Sandworm Team Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	558
zh	368
ru	22
de	18
fr	10

Country

cn	452
us	256
la	76
ru	26
gb	20

Actors

Cobalt Strike	9
Ave Maria	8
RedLine Stealer	7
Sandworm Team	7
AsyncRAT	4

Activities

Interest

Timeline

Type

Not Defined	332
Operating System	80
Smartphone Operating System	40
Content Management System	36
WordPress Plugin	22

Vendor

Not Defined	278
Microsoft	54
Google	42
Linux	32
Apple	32

Product

Microsoft Windows	34
Linux Kernel	32
Google Android	32
Microsoft Exchange Server	12
Apple macOS	10

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Joomla CMS com_easyblog sql injection	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.43	0.00000
2	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.94	0.01009	CVE-2006-6168
3	Google Android ActivityRecord.java setOptions Local Privilege Escalation	6.5	6.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.00042	CVE-2022-20419
4	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.49	0.00954	CVE-2010-0966
5	Zend Framework SQL Statement order sql injection	7.3	6.6	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.03	0.00000
6	Kubernetes kubelet pprof information disclosure	7.7	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	0.74826	CVE-2019-11248
7	Lars Ellingsen Guestserver guestbook.cgi cross site scripting	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	0.00169	CVE-2005-4222
8	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	1.97	0.00000
9	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.65	0.00000
10	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	3.08	0.00000	CVE-2020-12440
11	Git Plugin Build authorization	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.01083	CVE-2022-36883
12	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	2.75	0.00786	CVE-2020-15906
13	Yahoo! YUI cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	0.00355	CVE-2010-4208
14	Apple Mac OS X Server Wiki Server sql injection	5.3	4.6	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	0.00339	CVE-2015-5911
15	Francisco Burzi PHP-Nuke block-Old_Articles.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.53016	CVE-2007-0309
16	DZCP deV!L`z Clanportal browser.php information disclosure	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	0.02257	CVE-2007-1167
17	Apple Mac OS X Server Wiki Server cross site scripting	4.3	4.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.22	0.00263	CVE-2009-2814
18	XpressEngine XE3 Image File unrestricted upload	8.3	8.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.00237	CVE-2021-26642
19	FreeBSD Ping pr_pack stack-based overflow	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	0.00000	CVE-2022-23093
20	request-baskets API Request {name} server-side request forgery	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.22	0.04409	CVE-2023-27163

Campaigns (2)

These are the campaigns that can be associated with the actor:

BlackEnergy
Xxxxxxx

IOC - Indicator of Compromise (43)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Identified	Type	Confidence
1	5.9.32.230	static.230.32.9.5.clients.your-server.de	Sandworm Team	BlackEnergy	12/20/2020	verified	High
2	5.61.38.31		Sandworm Team	BlackEnergy	01/01/2021	verified	High
3	5.79.80.166		Sandworm Team	BlackEnergy	01/01/2021	verified	High
4	5.133.8.46	d8046.artnet.gda.pl	Sandworm Team		12/20/2020	verified	High
5	5.149.254.114	mail1.auditoriavanzada.info	Sandworm Team	BlackEnergy	12/20/2020	verified	High
6	5.255.87.39		Sandworm Team	BlackEnergy	01/01/2021	verified	High
7	31.210.111.154	.	Sandworm Team	BlackEnergy	12/20/2020	verified	High
8	37.220.34.56		Sandworm Team	BlackEnergy	01/01/2021	verified	High
9	45.56.93.83	li895-83.members.linode.com	Sandworm Team	Ukraine	04/20/2023	verified	High
10	XX.XX.XX.XXX	xx-xx.xxx.xx.xx.xxxxxx.xxxxx	Xxxxxxxx Xxxx	Xxxxxxx	04/20/2023	verified	High
11	XX.XXX.XX.XX	xx-xxxxx.xxxx.xx	Xxxxxxxx Xxxx	Xxxxxxx	04/20/2023	verified	High
12	XX.X.XX.XXX	xxxxxx.xxx.xx.x.xx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
13	XX.XXX.XXX.X		Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
14	XX.XXX.XXX.XX	xxxx.xxxxxx-xxxxx.xxx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
15	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxxx Xxxx		06/27/2022	verified	Medium
16	XX.XX.XX.XXX	xxxxxx.xxx.xx.xx.xx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
17	XX.XXX.XXX.XXX	xxxxxxxxxxx.xxx	Xxxxxxxx Xxxx		12/20/2020	verified	High
18	XX.XXX.XXX.XX		Xxxxxxxx Xxxx		12/20/2020	verified	High
19	XX.XXX.XXX.XX	xxxxxxxxx.xx	Xxxxxxxx Xxxx		12/20/2020	verified	High
20	XX.XX.XXX.XXX	x-xx.xx.xxx.xxx.xxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
21	XX.XX.XX.XXX		Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
22	XX.XXX.XX.XX	xxxxx.xxxxxxxxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	12/20/2020	verified	High
23	XX.XXX.XXX.XXX		Xxxxxxxx Xxxx	Xxxxxxx	04/15/2022	verified	High
24	XX.XXX.XXX.XXX	xxx.xxxx-xxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
25	XX.XXX.XXX.XXX	xx-xxx-xxx-xxx.xxxxxx-xx-xxxxxxxxxxx.xxx	Xxxxxxxx Xxxx		12/20/2020	verified	High
26	XX.XXX.XX.XXX	xxx-xx-xxx-xx-xxx.xxxx.xxxxxxxxxx.xxx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
27	XX.XXX.XX.X	xxxxxx-x.xx.xxx.xx.xxxxxx.xxx	Xxxxxxxx Xxxx		12/20/2020	verified	High
28	XX.XXX.XXX.XXX	xxxxxx-xxx-xxx-xxx-xx.xxxxxxxxxxxx.xxx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
29	XX.XXX.XXX.XX		Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
30	XX.XXX.XX.XXX	xxxxx.xxxxxxx.xx	Xxxxxxxx Xxxx		03/31/2022	verified	High
31	XXX.XX.XXX.X		Xxxxxxxx Xxxx		03/31/2022	verified	High
32	XXX.XXX.XXX.XXX		Xxxxxxxx Xxxx	Xxxxxxx	04/20/2023	verified	High
33	XXX.XXX.XXX.XX	xxxxxxx.xxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
34	XXX.XXX.XXX.XXX		Xxxxxxxx Xxxx		12/20/2020	verified	High
35	XXX.X.XX.X		Xxxxxxxx Xxxx	Xxxxxxxxxxx	12/20/2020	verified	High
36	XXX.XX.XXX.XXX	xxxxxxxx.xx-xxx-xx-xxx.xx	Xxxxxxxx Xxxx		12/20/2020	verified	High
37	XXX.XXX.XX.XX	xx.xxxxxxxxxxxxxx.xxx	Xxxxxxxx Xxxx	Xxxxxxx	04/20/2023	verified	High
38	XXX.XX.X.XX	xxxxxx.xx.x.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	12/20/2020	verified	High
39	XXX.XXX.XXX.XX	xxxxx.xxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
40	XXX.XXX.XXX.XX	xxxxxx.xxxxxxxxxxxxxxx.xx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
41	XXX.XX.XXX.XX	xxxxx.xx.xxxxxxxxxxx.xx	Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High
42	XXX.XXX.XX.XX		Xxxxxxxx Xxxx	Xxxxxxx	04/15/2022	verified	High
43	XXX.XXX.XXX.XX		Xxxxxxxx Xxxx	Xxxxxxxxxxx	01/01/2021	verified	High

TTP - Tactics, Techniques, Procedures (27)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-21, CWE-22, CWE-23, CWE-24, CWE-28	Pathname Traversal	predictive	High
2	T1040	CWE-294, CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CWE-74	Injection	predictive	High
4	T1059	CWE-88, CWE-94, CWE-1321	Cross Site Scripting	predictive	High
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CWE-264, CWE-269, CWE-284	J2EE Misconfiguration: Weak Access Permissions for EJB Methods	predictive	High
7	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
12	TXXXX	CWE-XXXX	Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxxxxxx Xxxxxx	predictive	High
13	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
14	TXXXX	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
15	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
17	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx.xxx Xxxxxxxxxxxxxxxx: Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
18	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
19	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx	predictive	High
23	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	High
24	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
25	TXXXX.XXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
26	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High
27	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (374)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/?p=products	predictive	Medium
2	File	/admin.php/accessory/filesdel.html	predictive	High
3	File	/admin/?page=user/manage	predictive	High
4	File	/admin/add-new.php	predictive	High
5	File	/admin/doctors.php	predictive	High
6	File	/admin/submit-articles	predictive	High
7	File	/alphaware/summary.php	predictive	High
8	File	/api/	predictive	Low
9	File	/api/admin/store/product/list	predictive	High
10	File	/api/baskets/{name}	predictive	High
11	File	/api/stl/actions/search	predictive	High
12	File	/api/v2/cli/commands	predictive	High
13	File	/attachments	predictive	Medium
14	File	/bin/ate	predictive	Medium
15	File	/boat/login.php	predictive	High
16	File	/booking/show_bookings/	predictive	High
17	File	/bsms_ci/index.php/book	predictive	High
18	File	/cgi-bin	predictive	Medium
19	File	/cgi-bin/wlogin.cgi	predictive	High
20	File	/Content/Template/root/reverse-shell.aspx	predictive	High
21	File	/context/%2e/WEB-INF/web.xml	predictive	High
22	File	/dashboard/add-blog.php	predictive	High
23	File	/debug/pprof	predictive	Medium
24	File	/DXR.axd	predictive	Medium
25	File	/enginemanager/server/user/delete.htm	predictive	High
26	File	/env	predictive	Low
27	File	/etc/hosts	predictive	Medium
28	File	/forum/away.php	predictive	High
29	File	/goform/delAd	predictive	High
30	File	/goform/SetFirewallCfg	predictive	High
31	File	/goform/wizard_end	predictive	High
32	File	/group1/uploa	predictive	High
33	File	/j_security_check	predictive	High
34	File	/medicines/profile.php	predictive	High
35	File	/modules/caddyhttp/rewrite/rewrite.go	predictive	High
36	File	/opt/zimbra/jetty/webapps/zimbra/public	predictive	High
37	File	/out.php	predictive	Medium
38	File	/owa/auth/logon.aspx	predictive	High
39	File	/php-sms/admin/?page=user/manage_user	predictive	High
40	File	/probe?target	predictive	High
41	File	/proxy	predictive	Low
42	File	/reservation/add_message.php	predictive	High
43	File	/resources//../	predictive	High
44	File	/xxxxxx/xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
45	File	/xxxx.xxx	predictive	Medium
46	File	/xxx	predictive	Low
47	File	/xxxxxxx/	predictive	Medium
48	File	/xxxxxx	predictive	Low
49	File	/xxxx/xxxxxxxxx	predictive	High
50	File	/xxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
51	File	/xxxxx-xxxxxxx-xxxxxx/xxxxx-xxxxx.xxx	predictive	High
52	File	/xxx/xxx/xxx/xxxxxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	High
53	File	/xxxxxxxx/xxxxxxxx.xxx	predictive	High
54	File	/xx/xxxxx.xxx	predictive	High
55	File	xxxxxxxxxxxxx.xxxxx.xxx	predictive	High
56	File	xxx.xxx	predictive	Low
57	File	xxxxxx-xxxxxxx.xxx	predictive	High
58	File	xxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
59	File	xxxxxxxxxxxxxx.xxxx	predictive	High
60	File	xxx_xxxxx.xxx	predictive	High
61	File	xxxxx.xxxxxxxxx.xxx	predictive	High
62	File	xxxxx.xxx	predictive	Medium
63	File	xxxxx/xxx_xxxxxxx.xxx	predictive	High
64	File	xxxxx/xxxx/xx_xxxxxxxx.xxx	predictive	High
65	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
66	File	xxxxx/xxxxxxxxxx_xxxx.xxx	predictive	High
67	File	xxxxx/xxxxxxxxx_xxxx.xxx	predictive	High
68	File	xxxxx/xxxxxx_xxxxxxxx.xxx	predictive	High
69	File	xxxxx/xxxx_xxxxxxxx.xxx	predictive	High
70	File	xxxxx/xxxxx.xxx?xxxxxx=xxx_xxxx	predictive	High
71	File	xxxxx/xxxx.xxx	predictive	High
72	File	xxxxx/xxxxxxxxxxxx_xxxx.xxx	predictive	High
73	File	xxxxxxxxxxxxxx.xxx	predictive	High
74	File	xxxxxxx/xxxx/xxxxxx.xxx	predictive	High
75	File	xxxxxxx.xxx	predictive	Medium
76	File	xxx/xx	predictive	Low
77	File	xxx/xxxx/xxxx.xxx?xxxxxx=xxxxxx_xxxxxx_xxxx	predictive	High
78	File	xxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
79	File	xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
80	File	xxxxxxxxxxxx/xxxxxxx.xxx	predictive	High
81	File	xxxxxxxxxxxxxxxx.xxxx	predictive	High
82	File	xxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
83	File	xxxx-xx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxx/xxxxxx/xxxxxxxxxxxxxx.xxxx	predictive	High
84	File	xxxxxxxxxx.xxxx	predictive	High
85	File	xxxx/xxx_xxxxxx.x	predictive	High
86	File	xxxxxx.xxx	predictive	Medium
87	File	xxxxxx/xxxxx-xxx_xxxxxxxx.xxx	predictive	High
88	File	xxxxxxx.xxx	predictive	Medium
89	File	xx_xxxx_xx_xxxx_xxxx.xxx	predictive	High
90	File	xxxx_xxxxxxx.xxx	predictive	High
91	File	xxxx.xxxxxxxxxxx.xxx	predictive	High
92	File	xxx-xxx/xxxxxxx.xx	predictive	High
93	File	xxxxxxx/xxxxx.xxx?x=xxxx	predictive	High
94	File	xxxxxxxxx.xxx	predictive	High
95	File	xxxxx.xxx	predictive	Medium
96	File	xxx.xxx?xxx=xxxxx_xxxx	predictive	High
97	File	xxxxx-xxxxxxx.xxx	predictive	High
98	File	xxxxxxxx/xxxxxxxx/xxxxxxxxxx_xxxxx.xxx	predictive	High
99	File	xxxxxxxxxx\xxxx.xxx	predictive	High
100	File	xxxx.xx	predictive	Low
101	File	xxxx_xxxxxxx.xxx	predictive	High
102	File	xxxxx.x	predictive	Low
103	File	xxx_xxxx.xxx	predictive	Medium
104	File	xxx_xxx	predictive	Low
105	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	High
106	File	xxxxxxx/xxx/xxx/xxxxxxx/xxxxxxx_xxx.x	predictive	High
107	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxx/xxxxx/xxxxx_xxx.x	predictive	High
108	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxx/xxx_xxx.x	predictive	High
109	File	xxxxxxx/xxx/xxxxxxxx/xxxxx_xxxx.x	predictive	High
110	File	xxxxxxx/xxxxxx/xxxxxx_xxxx_xxxxx.x	predictive	High
111	File	xxxxxxx/xxx/xxxxxx/xxx/xxx-xxxxxx.x	predictive	High
112	File	xxxxxxx/xxxxx/xxxxx/xxxxxx-xxx.x	predictive	High
113	File	xxxxxxxx.xxx	predictive	Medium
114	File	xxxx-xxxxx.xxx	predictive	High
115	File	xxxxxx.xxx	predictive	Medium
116	File	xxxxxxxxxxxxx/xxxxxx/xxxxxxxxxxx/xxxx_xxx.xxx	predictive	High
117	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
118	File	xxxx.xxx	predictive	Medium
119	File	xxxxxxxxxxx.xxxxx.xxx	predictive	High
120	File	xx/xxxxxx/xxxxx.x	predictive	High
121	File	xx/xxxxx/xxxxx.x	predictive	High
122	File	xxxxx.xxx	predictive	Medium
123	File	xxxxxxxxx.xxx	predictive	High
124	File	xxxxxxx.xxxxxx.xxx	predictive	High
125	File	xxxxxxx/xxxxxx.xxx	predictive	High
126	File	xxx-xxxxx.x	predictive	Medium
127	File	xxxxxxxxxxxx.xx	predictive	High
128	File	xxxxxxxxxxxxxxxxx.xxxx	predictive	High
129	File	xxx/xxxxxx.xxx	predictive	High
130	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
131	File	xxxxxxx/xxx_xxx/xxx_xxxxxxxxxxx.xxx	predictive	High
132	File	xxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxx	predictive	High
133	File	xxxxx.xxxx	predictive	Medium
134	File	xxxxx.xxx	predictive	Medium
135	File	xxxxx.xxx?x=xxxx&x=xxxx&x=xx_xxx_xxxxxx	predictive	High
136	File	xxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxx	predictive	High
137	File	xxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxx	predictive	High
138	File	xx.xxx	predictive	Low
139	File	xxxxxx.xxx/xxxxxx.xxx	predictive	High
140	File	xxxxx/xxxxxxxxxxxx/xxxxx	predictive	High
141	File	xxxx_xxxx.xxx	predictive	High
142	File	xxxxxxxx/xxxxxxxxx	predictive	High
143	File	xxxx_xxxxxxx.xxx	predictive	High
144	File	xxxxxxxx.xxx	predictive	Medium
145	File	xxx/xxxxxx-xxxxxx.x	predictive	High
146	File	xxxxxx/xxxx.x	predictive	High
147	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
148	File	xxxxx.xxx	predictive	Medium
149	File	xxxxxx_x.xx.x	predictive	High
150	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	High
151	File	xxxxxxx/xxx_xxxxxxxx.x	predictive	High
152	File	xxxxxxxxxxxxxxx.xxx	predictive	High
153	File	xxxxx.xxx	predictive	Medium
154	File	xxxxx.xxxx	predictive	Medium
155	File	xxxx/xxxx.xxx	predictive	High
156	File	xxxxx.xxx	predictive	Medium
157	File	xxxxxxxx.xx	predictive	Medium
158	File	xxxx.xxx	predictive	Medium
159	File	xx/xxxx.x	predictive	Medium
160	File	xxx_xxxxx.x	predictive	Medium
161	File	xxxx_xxx.x	predictive	Medium
162	File	xxx/xxxxxxxxx/xxxx/xxxx.x	predictive	High
163	File	xxx/xxxxxxxxx/xxxxx_xxxx.x	predictive	High
164	File	xxx/xxxx/xxxxxx_xxx_xxxx.x	predictive	High
165	File	xxx/xxxxx/xxx_xxx.x	predictive	High
166	File	xxxxxxx_xxxx.xxx	predictive	High
167	File	xxx_xxxxxxxx.x	predictive	High
168	File	xxx.xxx	predictive	Low
169	File	xxxxxxxxxxxxxxxxx.xxx	predictive	High
170	File	xxxxxx.xxxx	predictive	Medium
171	File	xxxxxxx.xxx	predictive	Medium
172	File	xxxxxxxxxxx.xxx	predictive	High
173	File	xxx-xxxxxxxx/xxx-xxxxxxxx.xxx	predictive	High
174	File	xxxxxxx/xx_xxxxx_xxxx/xxxx.xxx	predictive	High
175	File	xxxxxxx/xxxxxxx/xxx/xxxx.x	predictive	High
176	File	xxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxx	predictive	High
177	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	High
178	File	xxxx.xxx	predictive	Medium
179	File	xxxxxx.xxx	predictive	Medium
180	File	xxxxx\xxxxxx_xxxx.xxx	predictive	High
181	File	xxxxxx/xxxxxxx/_xxxx_xxxxxxxxxx.xx	predictive	High
182	File	xxxx-xxxxxxx.x	predictive	High
183	File	xxxxxxxx.xxx	predictive	Medium
184	File	xxxxxxxx.xxx	predictive	Medium
185	File	xxx.xxx	predictive	Low
186	File	xxxx_xxxx_xxxxxx.xxx	predictive	High
187	File	xxxxxx.xx	predictive	Medium
188	File	xxxxxx-xxxxxxx.xxx	predictive	High
189	File	xxxxxxxx/xxxxxxxx/xxxxx.x	predictive	High
190	File	xxxxxxx/xxxxxxxxxxxxx	predictive	High
191	File	xxxxx.xxx	predictive	Medium
192	File	xxxx.x	predictive	Low
193	File	xxxxxxx/xxxxxx.xxx	predictive	High
194	File	xxxxxxxx.xxx	predictive	Medium
195	File	xxx/xxx/xxx.x	predictive	High
196	File	xxx/xxxxxx.x	predictive	Medium
197	File	xxxxxxxxx.xxx	predictive	High
198	File	xxxxxxx_xxxxxxxx.xxx	predictive	High
199	File	xxxx.xxx	predictive	Medium
200	File	xxxxxxx/xxx_xx/xxxxxxxxx/xxxxxxx-xxx-xxxxxxxxx-xxxx.x	predictive	High
201	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	High
202	File	xxxxxx_xxx.xx	predictive	High
203	File	xxxx.xxxx	predictive	Medium
204	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	High
205	File	xxxx/xxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
206	File	xxxxxx/	predictive	Low
207	File	xxxx-xxxxx.xxx	predictive	High
208	File	xxxx-xxxxxxxx.xxx	predictive	High
209	File	xxxxxxxxxx/xxxxxxxxxxx.xx	predictive	High
210	File	xxxxxx	predictive	Low
211	File	xxxxxx.xxx	predictive	Medium
212	File	xxxxxx/xxxxxx/xxxxxxxxxx/xxxxxxx/xxxx.xxx	predictive	High
213	File	xxxx/xxxxxx.xxx	predictive	High
214	File	xxxxx/xxxxxxxx.xxx	predictive	High
215	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
216	File	xxxx.xxx	predictive	Medium
217	File	xxxxxxx.xxx	predictive	Medium
218	File	xxxxx.xxx	predictive	Medium
219	File	xxxxxx.x	predictive	Medium
220	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
221	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
222	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
223	File	xx-xxxxxxxx/xxxxx-xx-xxxxxx-xxxxxx.xxx	predictive	High
224	File	xx-xxxxx.xxx	predictive	Medium
225	File	xx-xxxxxxxx.xxx	predictive	High
226	File	xxxxxxxx.x	predictive	Medium
227	File	xxxxxx.xxx	predictive	Medium
228	File	xxxx.xxx	predictive	Medium
229	File	xxxx	predictive	Low
230	File	~/.xxxxx	predictive	Medium
231	File	~/xxxxxx.xxx	predictive	Medium
232	Library	/xxx/xxx/xxxxxx	predictive	High
233	Library	xxx.xxx	predictive	Low
234	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	High
235	Library	xxxxxxxxx.xxx	predictive	High
236	Library	xxx/xxx.xxx	predictive	Medium
237	Library	xxxxxxx/xxx.xxx.xxx.xxx	predictive	High
238	Library	xxxxxx.xxx	predictive	Medium
239	Library	xxx/xxx_xxx.x	predictive	High
240	Library	xxxxxxxxx.xx	predictive	Medium
241	Library	xxxxxxxxx/xxx-xxxxxx/xxxxxxxx.xxx	predictive	High
242	Library	xxxxxx.xxx	predictive	Medium
243	Library	xxxxxx.xxx	predictive	Medium
244	Library	xxxxxx/xxxxxxx.xx	predictive	High
245	Library	xxxxxxxx.xxx	predictive	Medium
246	Library	xxxxxx.xxxxxxx.xxxxxxx	predictive	High
247	Argument	$xxx_xxxx	predictive	Medium
248	Argument	$_xxxxxxx["xxx"]	predictive	High
249	Argument	*xxxx	predictive	Low
250	Argument	xx/xx	predictive	Low
251	Argument	xxxxxx	predictive	Low
252	Argument	xxxxxx:/xxxxxxxx:/xxxxxxxxxxxxxx:	predictive	High
253	Argument	xxxxxxxxxx	predictive	Medium
254	Argument	xxxxxxxxx	predictive	Medium
255	Argument	xxxxxxx	predictive	Low
256	Argument	xxxxx	predictive	Low
257	Argument	xxxxxx	predictive	Low
258	Argument	xxxxxxxxxxx	predictive	Medium
259	Argument	xxx_xxx	predictive	Low
260	Argument	xxxx	predictive	Low
261	Argument	xxxxxxxxx	predictive	Medium
262	Argument	xxxxxxxx	predictive	Medium
263	Argument	xxxxx	predictive	Low
264	Argument	xxxxxxxxx	predictive	Medium
265	Argument	xxxxxxx_xxxxxxx_xxxx	predictive	High
266	Argument	xxxx_xxx_xxxx	predictive	High
267	Argument	xxx	predictive	Low
268	Argument	xxxxxxxx	predictive	Medium
269	Argument	xxxxxxxxxx	predictive	Medium
270	Argument	xxxxxx	predictive	Low
271	Argument	xxxxxxxxxx	predictive	Medium
272	Argument	xxx	predictive	Low
273	Argument	xx_xxxxx	predictive	Medium
274	Argument	xxxx_xx	predictive	Low
275	Argument	xxxxxxx	predictive	Low
276	Argument	xxxxxx_xxxxxxx	predictive	High
277	Argument	xxxxxx	predictive	Low
278	Argument	xxxxxx[xxxx]	predictive	Medium
279	Argument	xxxxxxx-xxxxxxxxxxx	predictive	High
280	Argument	xxxxxxx-xxxxxx	predictive	High
281	Argument	xxxxx	predictive	Low
282	Argument	xxxxxx_xx	predictive	Medium
283	Argument	xxxxxx_xxx_xx	predictive	High
284	Argument	xxxxxx/xxxxxx	predictive	High
285	Argument	xxxxx	predictive	Low
286	Argument	xxxxx	predictive	Low
287	Argument	xxxxxx[xx-xxxxxxxxxx-xxxx-xxxx][x][xxxx]	predictive	High
288	Argument	xxxxx_xxx	predictive	Medium
289	Argument	xx_xxxxxxx	predictive	Medium
290	Argument	xxxx	predictive	Low
291	Argument	xxxxxxxxx	predictive	Medium
292	Argument	xxxxxxxx	predictive	Medium
293	Argument	xxxxxxxxxxx/xxxxxxxxxxxxxxx	predictive	High
294	Argument	xxxxxxxxxx	predictive	Medium
295	Argument	xxxxxxxx	predictive	Medium
296	Argument	xx_xx	predictive	Low
297	Argument	xxxx	predictive	Low
298	Argument	xxxxx	predictive	Low
299	Argument	xxxx_xxxxx	predictive	Medium
300	Argument	xxxx	predictive	Low
301	Argument	xxxx	predictive	Low
302	Argument	xx	predictive	Low
303	Argument	xx	predictive	Low
304	Argument	xx_xxxx	predictive	Low
305	Argument	xxxxxxxx	predictive	Medium
306	Argument	xxxxxxxxx_xxxx	predictive	High
307	Argument	xxx_xx	predictive	Low
308	Argument	x_xxxxxxxx	predictive	Medium
309	Argument	xxxx	predictive	Low
310	Argument	xxxxxxx	predictive	Low
311	Argument	xxx_xxx_xxx	predictive	Medium
312	Argument	xxx	predictive	Low
313	Argument	x_xx/xxxx	predictive	Medium
314	Argument	xxxx	predictive	Low
315	Argument	xxxxxxxxxxxxxxx	predictive	High
316	Argument	xxxxxx	predictive	Low
317	Argument	xxxxxx xxxxxx	predictive	High
318	Argument	xxxxxxx	predictive	Low
319	Argument	xxx_xxx	predictive	Low
320	Argument	xxxx	predictive	Low
321	Argument	xxxx	predictive	Low
322	Argument	xxxxxxxx	predictive	Medium
323	Argument	xxxxxxx	predictive	Low
324	Argument	xxxxxxxxxxxxx	predictive	High
325	Argument	xxxxxxxxxxx	predictive	Medium
326	Argument	xxxxxxx_xxx	predictive	Medium
327	Argument	xxxx_xx	predictive	Low
328	Argument	xxxx_xxxxx	predictive	Medium
329	Argument	xxxxx	predictive	Low
330	Argument	xxxxxxx	predictive	Low
331	Argument	xxx	predictive	Low
332	Argument	xxxxxx_xxxx	predictive	Medium
333	Argument	xxxxxx	predictive	Low
334	Argument	xxxxxxxxxx	predictive	Medium
335	Argument	xxxxxxxxx	predictive	Medium
336	Argument	xxxxxx_xxxxx	predictive	Medium
337	Argument	xxxxxx	predictive	Low
338	Argument	xxxxxxxxxxxxxxxxx	predictive	High
339	Argument	xxxxxxxxxxxxx/xxxxx	predictive	High
340	Argument	xxxxxx_xx	predictive	Medium
341	Argument	xxxxxx_xxxx	predictive	Medium
342	Argument	xxxx_xxxx	predictive	Medium
343	Argument	xxxx	predictive	Low
344	Argument	xxxx	predictive	Low
345	Argument	xxxxx	predictive	Low
346	Argument	xxxxx	predictive	Low
347	Argument	xxxxxxx.xx-xxxxx-xxxx	predictive	High
348	Argument	xxxxx	predictive	Low
349	Argument	xx	predictive	Low
350	Argument	xxxxxx_xxxxx	predictive	Medium
351	Argument	xxx	predictive	Low
352	Argument	xxxxxxxx	predictive	Medium
353	Argument	xxxxxxxx	predictive	Medium
354	Argument	xxxxxxxx/xxxxxxxx	predictive	High
355	Argument	xxxx_xxxxx	predictive	Medium
356	Argument	xxx	predictive	Low
357	Argument	xx	predictive	Low
358	Argument	xxxx->xxxxxxx	predictive	High
359	Argument	xxxxxx	predictive	Low
360	Argument	xx-xxxxxx_xxxx	predictive	High
361	Input Value	"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
362	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	High
363	Input Value	'xx''='	predictive	Low
364	Input Value	-x xxx xxxxxxxxx(x,xxxxxx(xxxx,xxxx()),x)#	predictive	High
365	Input Value	../	predictive	Low
366	Input Value	../../	predictive	Low
367	Input Value	xxxxx.xxx	predictive	Medium
368	Pattern	xxxxxxxxxxxxx\|xx\| xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx	predictive	High
369	Pattern	xxxx	predictive	Low
370	Pattern	\|xx xx xx xx\|	predictive	High
371	Network Port	xxx/xxxx	predictive	Medium
372	Network Port	xxx/xxx	predictive	Low
373	Network Port	xxx/xxx (xxxx)	predictive	High
374	Network Port	xxx xxxxxx xxxx	predictive	High

References (10)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!