NetSupport Analysisinfo

IOB - Indicator of Behavior (264)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en236
zh12
fr6
ru4
de2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

WordPress6
Computrols CBAS6
DZCP deV!L`z Clanportal4
asith-eranga ISIC Tour Booking4
phpMyAdmin4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.028200.15CVE-2010-0966
2Atmail Remote Code Execution9.89.4$0-$5k$0-$5kNot DefinedOfficial Fix0.002440.03CVE-2013-5033
3Palo Alto PAN-OS GlobalProtect Clientless VPN buffer overflow8.88.6$0-$5k$0-$5kNot DefinedOfficial Fix0.001120.00CVE-2021-3056
4WordPress sql injection6.86.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.005760.07CVE-2022-21664
5VeronaLabs wp-statistics Plugin API Endpoint Blind sql injection8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.005410.04CVE-2019-13275
6Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.038280.00CVE-2007-1192
7Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure4.34.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.000470.04CVE-2024-1406
8MW WP Form Plugin unrestricted upload7.37.1$0-$5k$0-$5kNot DefinedNot Defined0.008950.04CVE-2023-6316
9RoundCube Webmail Email Message rcube_string_replacer.php linkref_addindex cross site scripting5.25.2$0-$5k$0-$5kHighOfficial Fix0.025480.02CVE-2020-35730
10Teclib GLPI unlock_tasks.php sql injection8.58.5$0-$5k$0-$5kNot DefinedOfficial Fix0.132580.04CVE-2019-10232
11Sophos Firewall User Portal/Webadmin improper authentication8.58.5$0-$5k$0-$5kHighNot Defined0.970400.02CVE-2022-1040
12CutePHP CuteNews index.php unrestricted upload7.56.8$0-$5k$0-$5kProof-of-ConceptNot Defined0.028040.06CVE-2019-11447
13WordPress Object injection5.35.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.007990.03CVE-2022-21663
14Microsoft Windows Active Directory Domain Services certificate validation8.88.3$25k-$100k$0-$5kHighOfficial Fix0.011540.05CVE-2022-26923
15QNAP QTS Media Library access control8.58.2$0-$5k$0-$5kHighOfficial Fix0.093600.02CVE-2017-13067
16Microsoft Exchange Server Privilege Escalation8.88.4$25k-$100k$0-$5kHighOfficial Fix0.962250.00CVE-2021-42321
17OpenSSH Authentication Username information disclosure5.34.8$5k-$25k$0-$5kHighOfficial Fix0.068840.02CVE-2016-6210
18Peplink Balance Cookie admin.cgi sql injection8.58.2$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009020.06CVE-2017-8835
19Samurai Build File util.c canonpath out-of-bounds write6.56.5$0-$5kCalculatingNot DefinedNot Defined0.001620.00CVE-2019-19795
20Phpsugar PHP Melody page_manager.php cross site scripting5.24.9$0-$5k$0-$5kNot DefinedOfficial Fix0.002300.00CVE-2017-15648

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
15.181.156.60no-rdns.mivocloud.comNetSupport10/15/2024verifiedHigh
25.181.159.28no-rdns.mivocloud.comNetSupport10/15/2024verifiedHigh
3X.XXX.XXX.XXXx-xxx-xxx-xxx.xxxxxxxxx.xxxXxxxxxxxxx10/15/2024verifiedHigh
4XX.XXX.XXX.XXXxx-xxxx.xxxxxxxxx.xxxXxxxxxxxxx10/15/2024verifiedHigh
5XXX.XX.XXX.XXXxxxxxxxxx10/15/2024verifiedVery High
6XXX.XXX.XX.XXxxxxxxx.xxXxxxxxxxxx10/20/2019verifiedLow
7XXX.XXX.XX.XXxx-xxxx.xxxxxxxxx.xxxXxxxxxxxxx10/20/2019verifiedVery Low

TTP - Tactics, Techniques, Procedures (15)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (120)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/api/RecordingList/DownloadRecord?file=predictiveHigh
2File/apply.cgipredictiveMedium
3File/cgi-bin/cstecgi.cgipredictiveHigh
4File/gena.cgipredictiveMedium
5File/netflow/jspui/editProfile.jsppredictiveHigh
6File/php/ping.phppredictiveHigh
7File/rapi/read_urlpredictiveHigh
8File/scripts/unlock_tasks.phppredictiveHigh
9File/sec/content/sec_asa_users_local_db_add.htmlpredictiveHigh
10File/see_more_details.phppredictiveHigh
11File/SysInfo1.htmpredictiveHigh
12File/sysinfo_json.cgipredictiveHigh
13File/system/dictData/loadDictItempredictiveHigh
14File/xxxxxx/xxxx/xxxxxxx/xxx_xxxxx/xxxxxxxxxx.xxxpredictiveHigh
15File/xxxx/xxx/xxxxxxx/xxx_xxxxxx.xxxpredictiveHigh
16File/xx-xxxxx/xxxxx-xxxx.xxx?xx_xxxx=x&xxxxxx_xxxxpredictiveHigh
17Filexxxxxxx/xxxx.xxxpredictiveHigh
18Filexxxxxx/xxxxxxx/xxxx/xxxxx.xxxpredictiveHigh
19Filexxx-xxx/xxxxx/xxxxx.xxxpredictiveHigh
20Filexxx-xxx/xxxxx_xxx_xxxpredictiveHigh
21Filexxxxxx/xxx.xpredictiveMedium
22Filexxxxxxx=xxxxxxxxxx&xxxx=xxxx&xxxxxxxxxxxxx=/predictiveHigh
23Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
24Filexxxxxxxxx.xxx.xxxpredictiveHigh
25Filexxxxx/xxxxx.xxxpredictiveHigh
26Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
27Filexxxx_xxxxx.xxxpredictiveHigh
28Filexxxxx.xxxpredictiveMedium
29Filexxxxxx.xxxpredictiveMedium
30Filexxxxxxxxxxx/xxxxxxxx/xxxxxxxxxx.xxxpredictiveHigh
31Filexx/xx-xx.xpredictiveMedium
32Filexxx/xxxx_xxxx.xpredictiveHigh
33Filexxxxxx/xxxxxxxxxxxpredictiveHigh
34Filexxxx_xxxxxx.xpredictiveHigh
35Filexxxx/xxxxxxx.xpredictiveHigh
36Filexxx/xxxxxx.xxxpredictiveHigh
37Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveHigh
38Filexxxxxxxx/xxxxx-xxxxxx-xxxx-xxxxxxx.xxxpredictiveHigh
39Filexxxxxxxx/xxxxxxxx/xxxxx-xxxxxxxx-xxxxx.xxxpredictiveHigh
40Filexxxxx.xxxpredictiveMedium
41Filexxxxx.xxx?xxx=xxxx&xxx=xxxxxxxxpredictiveHigh
42Filexxxxxxxxxx.xxxpredictiveHigh
43Filexxxxxx_xxxx_xxxxxxx.xxxpredictiveHigh
44Filexxxxx.xxxpredictiveMedium
45Filexxxx/xxxxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxpredictiveHigh
46Filexxx/xxx.xxxpredictiveMedium
47Filexxxx_xxxxxxx.xxxpredictiveHigh
48Filexxx%xx.xxxpredictiveMedium
49Filexxxxxx.xpredictiveMedium
50Filexxxx.xxxpredictiveMedium
51Filexxxxx.xxxpredictiveMedium
52Filexxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]predictiveHigh
53Filexxxxx_xxxxxx_xxxxxxxx.xxxpredictiveHigh
54Filexxxxxxxxxxx.xxxpredictiveHigh
55Filexxxxxxxx.xxxpredictiveMedium
56Filexxxx.xxxpredictiveMedium
57Filexxxxx/xxxxx.xxxpredictiveHigh
58Filexxxxxxxx.xxxpredictiveMedium
59Filexxxxxxx.xxx.xx.xxxxxxxxxxx.xxxpredictiveHigh
60Filexxxx.xxxxxxxx.xxxpredictiveHigh
61Filexxxxxxxxx.xxxpredictiveHigh
62Filexxxxxxxxx.xxxpredictiveHigh
63Filexxxx.xpredictiveLow
64FilexxxxxxxxxxpredictiveMedium
65Filexxxxxxx/xxxxx.xxxpredictiveHigh
66Filexx-xxxxx/xxxxx-xxxx.xxxpredictiveHigh
67Libraryxxxxx.xxxpredictiveMedium
68ArgumentxxxxxxpredictiveLow
69Argumentxxxxxxx_xxxxpredictiveMedium
70Argumentxxxxxx_xxxxpredictiveMedium
71ArgumentxxxxxxxxpredictiveMedium
72ArgumentxxxxxpredictiveLow
73Argumentxxxxxxxx_xxxxxxx_xxxxxx[xxxxx_xxxxxx_xxx]'predictiveHigh
74ArgumentxxxpredictiveLow
75ArgumentxxxxxxxxxxxxxxxxxpredictiveHigh
76ArgumentxxxxxpredictiveLow
77Argumentxxxxxxxxxxx/xxxxxxxx/xxx/xxxxxpredictiveHigh
78Argumentxxxxxx_xxpredictiveMedium
79ArgumentxxxxxpredictiveLow
80ArgumentxxxxxpredictiveLow
81ArgumentxxxxpredictiveLow
82ArgumentxxxxpredictiveLow
83ArgumentxxxxxxpredictiveLow
84Argumentxx_xxxx [xx][x]/xx_xxxx [xx][x]/xx_xxxx [xx][x]/xx_xxxx [xx][x]/xxxxxpredictiveHigh
85ArgumentxxxxpredictiveLow
86ArgumentxxxxpredictiveLow
87ArgumentxxpredictiveLow
88Argumentxxxxx_xxxxpredictiveMedium
89Argumentxxxxxxxx[xx]predictiveMedium
90ArgumentxxxpredictiveLow
91ArgumentxxxpredictiveLow
92ArgumentxxxxxxxpredictiveLow
93Argumentxxxx/xxx_xxxxxxxxxpredictiveHigh
94Argumentxxx_xxxxpredictiveMedium
95Argumentxxxx_xxxxxpredictiveMedium
96ArgumentxxxxxxxxpredictiveMedium
97ArgumentxxxxxxxpredictiveLow
98Argumentxxxxxxx/xxxxxpredictiveHigh
99ArgumentxxxxxxxxxxpredictiveMedium
100Argumentxxxxxx_xxxpredictiveMedium
101Argumentxxxx_xxpredictiveLow
102Argumentxxxxxxxx_xxxxxxxxpredictiveHigh
103ArgumentxxxxxxxxxxxxxxxxxxxxxpredictiveHigh
104Argumentxxxx_xxpredictiveLow
105ArgumentxxxpredictiveLow
106ArgumentxxxxpredictiveLow
107ArgumentxxxxxxxxpredictiveMedium
108ArgumentxxxxxxxxpredictiveMedium
109Argumentxxxx/xx/xxxx/xxxpredictiveHigh
110Argument_xxx_xxxxxxxxxxx_predictiveHigh
111Input Value.%xx.../.%xx.../predictiveHigh
112Input Value../../../../../xxx/xxx/xxxxx/xxxx/xxxxxxxx/xxxxx/xxx.xxxpredictiveHigh
113Input Valuexxxxxxx -xxxpredictiveMedium
114Input ValuexxxxxxxxxxpredictiveMedium
115Network PortxxxxpredictiveLow
116Network PortxxxxpredictiveLow
117Network Portxxxx xxxxpredictiveMedium
118Network Portxxx/xxxpredictiveLow
119Network Portxxx/xxxpredictiveLow
120Network Portxxx/xxxxpredictiveMedium

References (3)

The following list contains external sources which discuss the actor and the associated activities:

This view requires CTI permissions

Just purchase a CTI license today!