SolarMarker Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (887)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	650
fr	134
de	38
ru	26
es	18

Country

us	470
fr	120
de	64
gb	52
ru	46

Actors

solarmarker	13
Cobalt Strike	12
SolarMarker	6
RecordBreaker	6
BumbleBee	6

Activities

Interest

Timeline

Type

Not Defined	302
Operating System	58
Content Management System	48
WordPress Plugin	38
Web Server	22

Vendor

Not Defined	288
Microsoft	76
SourceCodester	28
Apache	24
Apple	14

Product

Microsoft Windows	34
Apache HTTP Server	16
WordPress	16
OpenSSH	14
Linux Kernel	10

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	3.12	0.00000	CVE-2020-12440
2	Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track cross-site request forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00058	CVE-2022-47166
3	Bitcoin wallet.dat AES Encryption Padding missing encryption	7.1	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.28	0.00000
4	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.09	0.00568	CVE-2017-0055
5	Genetechsolutions Pie Register User Account pie-register.php access control	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.07353	CVE-2014-8802
6	Microsoft Windows Sysmon Privilege Escalation	8.1	7.4	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.02	0.00044	CVE-2022-41120
7	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.45	0.01009	CVE-2006-6168
8	Microsoft Exchange Server Privilege Escalation	8.4	7.9	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00	0.00085	CVE-2022-21980
9	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.89	0.00954	CVE-2010-0966
10	WordPress WP_Query sql injection	6.3	6.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.94334	CVE-2022-21661
11	SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection	5.5	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	0.00076	CVE-2023-0516
12	Apache HTTP Server mod_rewrite redirect	6.7	6.7	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.03	0.00138	CVE-2020-1927
13	Host Discard Service privileges management	7.3	7.1	$0-$5k	$0-$5k	High	Workaround	0.03	0.01500	CVE-1999-0636
14	Popup Builder Plugin path traversal	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.00088	CVE-2021-25082
15	PHPUnit HTTP POST eval-stdin.php code injection	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.18	0.97477	CVE-2017-9841
16	SourceCodester Online Tours & Travels Management System expense_report.php sql injection	4.7	4.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.14	0.00051	CVE-2023-0533
17	Oracle Communications Cloud Native Core Unified Data Repository Signaling protection mechanism	9.9	9.7	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	0.00211	CVE-2022-43403
18	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.71	0.03421	CVE-2007-0354
19	WooCommerce Plugin path traversal	7.0	6.8	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	0.00494	CVE-2017-17058
20	Serendipity exit.php privileges management	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.47	0.00000

IOC - Indicator of Compromise (26)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	37.120.233.92	no-rdns.m247.com	SolarMarker	08/01/2022	verified	High
2	37.120.237.251		SolarMarker	08/01/2022	verified	High
3	45.42.201.248		SolarMarker	08/01/2022	verified	High
4	46.30.188.221	46.30.188.221.static.quadranet.com	solarmarker	08/26/2023	verified	High
5	78.135.73.148		solarmarker	10/15/2023	verified	High
6	78.135.73.160		solarmarker	10/15/2023	verified	High
7	XX.XXX.XX.XXX		Xxxxxxxxxxx	08/01/2022	verified	High
8	XX.XXX.XXX.XXX		Xxxxxxxxxxx	08/09/2023	verified	High
9	XX.XXX.XXX.XXX		Xxxxxxxxxxx	03/05/2022	verified	High
10	XX.XXX.XXX.XXX		Xxxxxxxxxxx	08/01/2022	verified	High
11	XXX.XX.XX.XXX		Xxxxxxxxxxx	10/15/2023	verified	High
12	XXX.XX.XX.XXX		Xxxxxxxxxxx	08/01/2022	verified	High
13	XXX.XX.XX.XXX		Xxxxxxxxxxx	08/01/2022	verified	High
14	XXX.XX.XX.XXX		Xxxxxxxxxxx	10/15/2023	verified	High
15	XXX.XX.XX.XXX		Xxxxxxxxxxx	05/23/2023	verified	High
16	XXX.XX.XX.XXX		Xxxxxxxxxxx	08/01/2022	verified	High
17	XXX.XX.XXX.XX		Xxxxxxxxxxx	08/01/2022	verified	High
18	XXX.XX.XXX.XXX		Xxxxxxxxxxx	10/15/2023	verified	High
19	XXX.XX.XXX.XX		Xxxxxxxxxxx	08/26/2023	verified	High
20	XXX.XX.XXX.XX		Xxxxxxxxxxx	01/15/2023	verified	High
21	XXX.XX.XXX.XXX		Xxxxxxxxxxx	10/15/2023	verified	High
22	XXX.XX.XX.XXX	xx.xxxxxxxx.xxx	Xxxxxxxxxxx	08/24/2021	verified	High
23	XXX.XX.XXX.XX		Xxxxxxxxxxx	06/22/2023	verified	High
24	XXX.XXX.XX.XX		Xxxxxxxxxxx	08/01/2022	verified	High
25	XXX.XX.XX.XXX	xxxxxxxx.xxx	Xxxxxxxxxxx	08/09/2023	verified	High
26	XXX.XXX.XXX.XXX		Xxxxxxxxxxx	06/22/2023	verified	High

TTP - Tactics, Techniques, Procedures (24)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-21, CWE-22, CWE-23	Pathname Traversal	predictive	High
2	T1055	CWE-74	Injection	predictive	High
3	T1059	CWE-94	Cross Site Scripting	predictive	High
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
5	T1068	CWE-250, CWE-264, CWE-269, CWE-284	J2EE Misconfiguration: Weak Access Permissions for EJB Methods	predictive	High
6	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
7	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
14	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx.xxx Xxxxxxxxxxxxxxxx: Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
15	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
16	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
18	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	High
19	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx	predictive	High
20	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	High
21	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
23	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (390)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	.htaccess	predictive	Medium
2	File	/api/baskets/{name}	predictive	High
3	File	/api2/html/	predictive	Medium
4	File	/apiadmin/notice/add	predictive	High
5	File	/classes/master.php?f=delete_order	predictive	High
6	File	/cloud_config/router_post/register	predictive	High
7	File	/ecommerce/support_ticket	predictive	High
8	File	/etc/gsissh/sshd_config	predictive	High
9	File	/forms/nslookupHandler	predictive	High
10	File	/Forms/tools_test_1	predictive	High
11	File	/forum/away.php	predictive	High
12	File	/forum/PostPrivateMessage	predictive	High
13	File	/h/autoSaveDraft	predictive	High
14	File	/h/calendar	predictive	Medium
15	File	/holiday.php	predictive	Medium
16	File	/home/cavesConsole	predictive	High
17	File	/include/chart_generator.php	predictive	High
18	File	/index.php	predictive	Medium
19	File	/librarian/bookdetails.php	predictive	High
20	File	/login/index.php	predictive	High
21	File	/log_download.cgi	predictive	High
22	File	/mgmt/tm/util/bash	predictive	High
23	File	/modules/profile/index.php	predictive	High
24	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	High
25	File	/news.dtl.php	predictive	High
26	File	/out.php	predictive	Medium
27	File	/p1/p2/:name	predictive	Medium
28	File	/param.file.tgz	predictive	High
29	File	/patient/appointment.php	predictive	High
30	File	/php-opos/index.php	predictive	High
31	File	/proc/<PID>/mem	predictive	High
32	File	/protocol/iscgwtunnel/uploadiscgwrouteconf.php	predictive	High
33	File	/ptms/?page=user	predictive	High
34	File	/Service/ImageStationDataService.asmx	predictive	High
35	File	/setup/finish	predictive	High
36	File	/spip.php	predictive	Medium
37	File	/sysmanage/importconf.php	predictive	High
38	File	/template/edit	predictive	High
39	File	/uncpath/	predictive	Medium
40	File	/upload/file.php	predictive	High
41	File	/user/s.php	predictive	Medium
42	File	/usr/bin/at	predictive	Medium
43	File	/usr/bin/pkexec	predictive	High
44	File	/vendor/htmlawed/htmlawed/htmLawedTest.php	predictive	High
45	File	/wolfcms/?/admin/user/add	predictive	High
46	File	/xx-xxxxx	predictive	Medium
47	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
48	File	/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxx.xxx	predictive	High
49	File	/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxxxxxx/xxxxxx/xxxxx/	predictive	High
50	File	/xx-xxxx/xxxxxx/x.x/xxxxx?xxx	predictive	High
51	File	/xx-xxxx/xx/xx/xxxxxxxx	predictive	High
52	File	x.x.x\xxxxxx.xxx	predictive	High
53	File	xxxxx.xxx/xxxxx-x.x.xxx/xxxxxxx.xxx/xxxx.xxx	predictive	High
54	File	xxxxxxx.xxx	predictive	Medium
55	File	xxxxxxxxx.xxx	predictive	High
56	File	xxxxx-xxxx.xxx	predictive	High
57	File	xxxxx.xxx	predictive	Medium
58	File	xxxxx/xxx.xxx	predictive	High
59	File	xxxxx/xxxxxxx_xxxx.xxx	predictive	High
60	File	xxxxx/xxxxxxxx.xxx.xxx	predictive	High
61	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
62	File	xxxxx/xxxxxxxxxx_xxxx.xxx	predictive	High
63	File	xxxxx/xxxxxxx_xxxxxx.xxx	predictive	High
64	File	xxxxx/xxxxxx_xxxxxxxx.xxx	predictive	High
65	File	xxxxx/xxxxx.xxx	predictive	High
66	File	xxxxx/xxxxxxxx_xxx.xxx	predictive	High
67	File	xxxxxxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	High
68	File	xxxxx\xxxxx\xxxxxx_xxxx.xxx	predictive	High
69	File	xxxxxxxxxxx.xxx	predictive	High
70	File	xxxxxx/	predictive	Low
71	File	xxxx-xxxx.x	predictive	Medium
72	File	xxxx.xxx.xxx	predictive	Medium
73	File	xxxxx-xxx.x	predictive	Medium
74	File	xxxxx/xxx.x	predictive	Medium
75	File	xxxxx-xxxx/xxxxxx.x	predictive	High
76	File	xxxxxxx.xx	predictive	Medium
77	File	xxxxxxxxxxxxxx.xxxx	predictive	High
78	File	xx_xxxxx_xxxxx.xxx	predictive	High
79	File	xxxxxx.x	predictive	Medium
80	File	xxxx.x	predictive	Low
81	File	xxxxxxxxxxxxxx.xxx	predictive	High
82	File	xxxxxxxxxxx.xxx	predictive	High
83	File	xxxxxxx.xxx	predictive	Medium
84	File	xxxxxxxx_xxxx.xxx	predictive	High
85	File	xxx_xx.xxx	predictive	Medium
86	File	xxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxx.xxx	predictive	High
87	File	xxx-xxx/xxxxxxx.xx	predictive	High
88	File	xxx-xxx/xxxx	predictive	Medium
89	File	xxx-xxx/xxxxxxxx.xxx	predictive	High
90	File	xxx/xxxxxxx.xx	predictive	High
91	File	xxx/xxx?xxxx	predictive	Medium
92	File	xxx/xxxxxxx.xx	predictive	High
93	File	xxxxx_xxxxxx.xxx	predictive	High
94	File	xxxxxxx.xxx	predictive	Medium
95	File	xxxxxx-xxxxxxx-xxxxx.xxx	predictive	High
96	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
97	File	xxxxxxx.xxx	predictive	Medium
98	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
99	File	xxxxxxx.xxx	predictive	Medium
100	File	xxxxxxx/xxx/xxxxxxxx.x	predictive	High
101	File	xxx.xxx	predictive	Low
102	File	xxxxxx/xxx/xxxx.xxx	predictive	High
103	File	xxxxx.xxx	predictive	Medium
104	File	xx/xxxxx/xxxxxx_xxxxx.xxx	predictive	High
105	File	xxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
106	File	xxxx.xxx	predictive	Medium
107	File	xxxxxxxxxxxxxxx.xxx	predictive	High
108	File	xxx/xxx/xxx_xxxxxxxx.x	predictive	High
109	File	xxxxx_xxxxx_xxx.x	predictive	High
110	File	xxxxxxxxxxx_xxxxx.xxx	predictive	High
111	File	xxxxxxxxxx.xxx	predictive	High
112	File	xxxxxx_xxx.xxx	predictive	High
113	File	xxxxxxx.xxx	predictive	Medium
114	File	xxx_xxxxxx.xxx	predictive	High
115	File	xxxxxx/xxxxxxxxxxx	predictive	High
116	File	xxxx-xxxxxxx.x	predictive	High
117	File	xxxxxx/xxxxx/xxxx_xxxxxxxx_xxxxxx_xxxx.xxx	predictive	High
118	File	xxxxxx/xxxx/xx/xxxxxxx/xxxxxx.xxx.xxx	predictive	High
119	File	xxxxxx/xxxxxxxxxxx/xxxx_xxxxxxx.xxx	predictive	High
120	File	xxxx.xxx	predictive	Medium
121	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
122	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
123	File	xxx/xxxxxx.xxx	predictive	High
124	File	xxxxxxxx/xxxxx/xxxxx/xxxxxxxxxxx.xxx	predictive	High
125	File	xxxxxxxx/xxxxx-xx-xxxxxxxxx.xxx	predictive	High
126	File	xxxxxxxx/xxxxxxxx.xxx	predictive	High
127	File	xxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
128	File	xxxxx.xxx	predictive	Medium
129	File	xxxxx.xxx	predictive	Medium
130	File	xxxxx.xxx/xxxxxxxxx_xxxx/xxx_xxxxxxx_xxxxxxxxxx/	predictive	High
131	File	xxxxx.xxx?xx=xxxxxxx&xxx=xxx	predictive	High
132	File	xxxx.xxx	predictive	Medium
133	File	xxxxxx/xxxxxxxx.xxx	predictive	High
134	File	xxxxxxxx.xxx	predictive	Medium
135	File	xxxxxxxxxx.xxx	predictive	High
136	File	xxxxxx.xxx/xxxxxx.xxx	predictive	High
137	File	xxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx	predictive	High
138	File	xxxx_xxxx.xxx	predictive	High
139	File	xxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	High
140	File	xxxxx/xxx_xxx.x	predictive	High
141	File	xxxxxxxxxxx/xxx.x	predictive	High
142	File	xxxxxxxx.x	predictive	Medium
143	File	xxxxxxx/xxx_xxxxxxxx.x	predictive	High
144	File	xxxx/xxxxx.xxx	predictive	High
145	File	xxxxx.xxx	predictive	Medium
146	File	xxxxxxxxxx/xxxxxxx.x	predictive	High
147	File	xxxxxx/xxxxxx_xxxx.xxx	predictive	High
148	File	xxxxxxx-xx/xxxxxx/xxx.xx	predictive	High
149	File	xxxxxxxxx.xxx	predictive	High
150	File	xxxxxxxxxxxxxxx.xxx	predictive	High
151	File	xxxxxxxxxxx.xxxxx.xxx	predictive	High
152	File	xxx_xxxxx_xxxx.x	predictive	High
153	File	xxxxxxxxx.xxx	predictive	High
154	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	High
155	File	xxxxxxxxxxxx.xxx	predictive	High
156	File	xxxx.xxxxxx.xx	predictive	High
157	File	xxxx.xxx	predictive	Medium
158	File	xxxxx_xxxxxxxx_xxxxx.xxx	predictive	High
159	File	xxxxxx/xxx_xxxxxx/x	predictive	High
160	File	xxxxxxxxxxxx.xxx	predictive	High
161	File	xxxxxxxxxx/xxxxxxxxx/xxxxxxxxxx/xxxxx_xxxxxx.xxxx	predictive	High
162	File	xxx-xxxxxxxx.xxx	predictive	High
163	File	xxxx-xxx/xxxx-xxx/xxx-xxxx.x	predictive	High
164	File	xxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxx	predictive	High
165	File	xxxx.x	predictive	Low
166	File	xxxxxxxx.xx	predictive	Medium
167	File	xxxxx/xxxxxxxxxxx/xxxxxxxxxx_xxxxxxxxxxx.xxx	predictive	High
168	File	xxxx.xxx	predictive	Medium
169	File	xxxxxxxx_xxx_xxxxxxxxxx.xxx	predictive	High
170	File	xxxxxxxxxxxxxx.xxx	predictive	High
171	File	xxxxxxxx.x	predictive	Medium
172	File	xxx_xxxxxxxxxxxx.xxx	predictive	High
173	File	xxxxx.xxx	predictive	Medium
174	File	xxxxxxxx.xx	predictive	Medium
175	File	xxxxxxxx.xxx	predictive	Medium
176	File	xxxxx/xx/xxxxxxxxx/	predictive	High
177	File	xxxxxxxx.xxx	predictive	Medium
178	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	High
179	File	xxxxxxx.xxx	predictive	Medium
180	File	xxxxxxxxxxx.xxxx	predictive	High
181	File	xxxxxx_xxxxxx.xxx	predictive	High
182	File	xxx.xxx	predictive	Low
183	File	xxxxxx.xx	predictive	Medium
184	File	xxxxxx-xxxxxxxx.xxx	predictive	High
185	File	xxxxxx-xxxxxxx.xxx	predictive	High
186	File	xxxxxx.xxx	predictive	Medium
187	File	xxxxxxxx/xxxxx/xxxxxxx.xx	predictive	High
188	File	xxxxx.xxx	predictive	Medium
189	File	xxxx-xxxxxx.x	predictive	High
190	File	xxxx.xxx	predictive	Medium
191	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
192	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
193	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
194	File	xxxx.xxx	predictive	Medium
195	File	xxxxxxx.xxx	predictive	Medium
196	File	xxx.xxx	predictive	Low
197	File	xxx/xxxxxx/xxxxx/xxx.xx	predictive	High
198	File	xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxx.xxxx	predictive	High
199	File	xxx/xxxx/xxxx/xxx/xxxxxx/xxxxx/xx/xxxx/xxxxx.xxxx	predictive	High
200	File	xxx.xxx	predictive	Low
201	File	xxxxx.xxx	predictive	Medium
202	File	xxxxx_xxxxx.xxx	predictive	High
203	File	xxxxxx.xxx	predictive	Medium
204	File	xxxxxx_xxxxxxxx.xxx	predictive	High
205	File	xxxxxx_xxx.xxx	predictive	High
206	File	x_xxxxxx.xxx	predictive	Medium
207	File	xxxxxxxx/xxxxxxxxx.xxxxxxx_xxxxxxxxx.xxx	predictive	High
208	File	xxxxxx-xxxxxx.xxx	predictive	High
209	File	xxxx-xxx	predictive	Medium
210	File	xxxxxx/	predictive	Low
211	File	xxxx-xxxxxxxx.xxx	predictive	High
212	File	xxx-xxxxxxx.x	predictive	High
213	File	xxxxxxxxxx/xxxxxxxxxxx.xx	predictive	High
214	File	xxxxxxxxx/xxxxx/xxxxxx.xx	predictive	High
215	File	xxxxxx.xxx	predictive	Medium
216	File	xxxx/xxxxxx_xxxxxxxx.xxx	predictive	High
217	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
218	File	xx\xxxxxxx\xxxx-xxxx.xxx	predictive	High
219	File	xxxxxx.xxx	predictive	Medium
220	File	xxxxxx/xxxxxxxxxxxxx.xxx	predictive	High
221	File	xxxxxx_xxxxxx.xxx	predictive	High
222	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
223	File	xxx/xxx.x	predictive	Medium
224	File	xxxxxx.xxx	predictive	Medium
225	File	_xxxxxx/xxxxxxxx.x	predictive	High
226	File	~/xxxx/xxx/xxxxxxx/xxxxxxxxxx/xxxxxx.xxx	predictive	High
227	Library	/xxx/xxx/xxx/xxxx/xxxxxxxxxx/xxxxxx.xxx	predictive	High
228	Library	/_xxx_xxx/xxxxx.xxx	predictive	High
229	Library	xxxxxxxxxxxxxxxx.xxx	predictive	High
230	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	High
231	Library	xxxxxx[xxxxxx_xxxx	predictive	High
232	Library	xxxxx.xxx	predictive	Medium
233	Library	xxxxxxxxxxxxxx.xxx	predictive	High
234	Library	xxx/xxxxxxxxx/xxxx/xxxx_xxxxxxxxxxx.x	predictive	High
235	Library	xxx/xxx-xxxxxxxxxx.xxx	predictive	High
236	Library	xxx/xxxxxx.xx	predictive	High
237	Library	xxxxxxx/xxx/xxxxxxx.xxx	predictive	High
238	Library	xxx.xxx	predictive	Low
239	Library	xxxxx.xxx	predictive	Medium
240	Library	xxxxxxxxxxxxxx.xxxxx	predictive	High
241	Argument	$_xxx	predictive	Low
242	Argument	$_xxxxxx['xxxxxx_xxxxxxxx']	predictive	High
243	Argument	-x	predictive	Low
244	Argument	xxxxxxx_xxxxxx	predictive	High
245	Argument	xxxxxx	predictive	Low
246	Argument	xxxxxx_xxxx	predictive	Medium
247	Argument	xxxxxxxx	predictive	Medium
248	Argument	xxxxxxxx	predictive	Medium
249	Argument	xxxx_xxxx	predictive	Medium
250	Argument	xxxxx_xxxx/xxx_xxxx/xxxx_xx	predictive	High
251	Argument	xxx_xxxx_xxxxx	predictive	High
252	Argument	xxxxxxxxx	predictive	Medium
253	Argument	xxx	predictive	Low
254	Argument	xxxxxxxx[xxxxxxx]	predictive	High
255	Argument	xxx_xx	predictive	Low
256	Argument	xxx	predictive	Low
257	Argument	xxx	predictive	Low
258	Argument	xxxx	predictive	Low
259	Argument	xxxxxxxxxxxxxxx	predictive	High
260	Argument	xxxxxxxxx	predictive	Medium
261	Argument	xxxx_xx	predictive	Low
262	Argument	xxxxxxx	predictive	Low
263	Argument	xxxxxxxxx	predictive	Medium
264	Argument	xxxxxx	predictive	Low
265	Argument	xxxxxx[xxxxxx_xxxx]	predictive	High
266	Argument	xxxxxxx	predictive	Low
267	Argument	xxxxxxx	predictive	Low
268	Argument	xxxxxx	predictive	Low
269	Argument	xxxxxxx/xxxxxxx/xxxxxxx_xxxxxxxxxx/xxxxxxx_xxxxxx/xxxxxxxx/xxxx_xxxxx	predictive	High
270	Argument	xxxxxxxxx[x]	predictive	Medium
271	Argument	xxxx/xxxx	predictive	Medium
272	Argument	xxxxxxxxxxx	predictive	Medium
273	Argument	x_xxxxxx.xxxx_xxxxx	predictive	High
274	Argument	x_xx	predictive	Low
275	Argument	xxxxxxxxxxxxxxxxx	predictive	High
276	Argument	xxxx	predictive	Low
277	Argument	xxxxxxxxxxx	predictive	Medium
278	Argument	xxxxxxx	predictive	Low
279	Argument	xxxxxxxxxxxxxxx	predictive	High
280	Argument	xxx_xx	predictive	Low
281	Argument	xxxxx	predictive	Low
282	Argument	xxxxxxxx-xxxxxx	predictive	High
283	Argument	xxxxxxxx	predictive	Medium
284	Argument	xxxxxxxx	predictive	Medium
285	Argument	xxxx_xxxx	predictive	Medium
286	Argument	xxxxxxxxx	predictive	Medium
287	Argument	xxxxxxxxxxx	predictive	Medium
288	Argument	xxxx	predictive	Low
289	Argument	xxxxxxxx	predictive	Medium
290	Argument	xxx	predictive	Low
291	Argument	xxxx	predictive	Low
292	Argument	xxxx	predictive	Low
293	Argument	xxxx	predictive	Low
294	Argument	xxxx_xxxxx	predictive	Medium
295	Argument	xx	predictive	Low
296	Argument	xx	predictive	Low
297	Argument	xx/xxxx	predictive	Low
298	Argument	xxxx/xxx/xxxxxxxx/xxxxx/xxxx/xxxx	predictive	High
299	Argument	xxxxxxxxxxxxxxxx	predictive	High
300	Argument	xx_xxxxx	predictive	Medium
301	Argument	xxxxxx	predictive	Low
302	Argument	xxxx/xxxxxx_xxxx	predictive	High
303	Argument	xxxx/xxx_xxxxxxxxx	predictive	High
304	Argument	xxxxxxxx_xxxx	predictive	High
305	Argument	xxxxx	predictive	Low
306	Argument	xxx_xxxx	predictive	Medium
307	Argument	xxxxx/xxxxx_xxxxxxxx/xxxx	predictive	High
308	Argument	xx_xxxxxx	predictive	Medium
309	Argument	xxxx x xxxx	predictive	Medium
310	Argument	xxxxxx xxxxxxx	predictive	High
311	Argument	xxx_xx	predictive	Low
312	Argument	xxxxxx	predictive	Low
313	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	High
314	Argument	x/x	predictive	Low
315	Argument	xxxx	predictive	Low
316	Argument	xxxx	predictive	Low
317	Argument	xxxx/xxx	predictive	Medium
318	Argument	xxxxxx	predictive	Low
319	Argument	xxxxxx	predictive	Low
320	Argument	xxx/xxxxxx/xxxxx/xxx/xxxxxx/xxxxxx/xxxxxxxx/xxxx	predictive	High
321	Argument	xxxxxxxxxxxxxx	predictive	High
322	Argument	xxx	predictive	Low
323	Argument	xxxxxx.xxxxxxx	predictive	High
324	Argument	xx	predictive	Low
325	Argument	xxx_xxxxxxxx	predictive	Medium
326	Argument	xxxxx	predictive	Low
327	Argument	xxxxxxxx	predictive	Medium
328	Argument	xxxx	predictive	Low
329	Argument	xxxx_xxx	predictive	Medium
330	Argument	xxxxx_xxxx_xxxx	predictive	High
331	Argument	xxxx_xxxx/xxxxx_xxxx	predictive	High
332	Argument	xxxx_xx	predictive	Low
333	Argument	xxxxxx	predictive	Low
334	Argument	xxxxxxx_xx/xxxx_xx	predictive	High
335	Argument	xxxxxxxxxx	predictive	Medium
336	Argument	xxxxxxxxx_	predictive	Medium
337	Argument	xxxxxxxxx_xx	predictive	Medium
338	Argument	xxx_xxx	predictive	Low
339	Argument	xxxxxx	predictive	Low
340	Argument	xxxxx	predictive	Low
341	Argument	xxxxxx	predictive	Low
342	Argument	xxxxxxxxxx	predictive	Medium
343	Argument	xxxxxx_xxxxxxxx	predictive	High
344	Argument	xxxxxxx_xx	predictive	Medium
345	Argument	xxxx_xxxx	predictive	Medium
346	Argument	xxxxxxxxxxx	predictive	Medium
347	Argument	xxx	predictive	Low
348	Argument	xxxxxx	predictive	Low
349	Argument	xxxxxx	predictive	Low
350	Argument	xxxxxxx/xxxxxxx	predictive	High
351	Argument	xxxxxx($xxx)	predictive	Medium
352	Argument	xxx_xxxx[x][]	predictive	High
353	Argument	xxxxx	predictive	Low
354	Argument	xxxxxx	predictive	Low
355	Argument	xx_xxxx	predictive	Low
356	Argument	xxxxxxxxxxxxxxx	predictive	High
357	Argument	xxxxxxxx	predictive	Medium
358	Argument	xxxxxxxxx	predictive	Medium
359	Argument	xxxx	predictive	Low
360	Argument	xxxxx	predictive	Low
361	Argument	xxx	predictive	Low
362	Argument	xxxx	predictive	Low
363	Argument	xxxx	predictive	Low
364	Argument	xxxx-xxxxx	predictive	Medium
365	Argument	xxxxxxxx	predictive	Medium
366	Argument	xxxxxxxx	predictive	Medium
367	Argument	xxxx xxxx	predictive	Medium
368	Argument	xxxxxxxx	predictive	Medium
369	Argument	xxxx	predictive	Low
370	Argument	x-xxxxxxxxx-xxx	predictive	High
371	Argument	_xxxxxx[xxxxxxxx_xxxx]	predictive	High
372	Input Value	"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
373	Input Value	%xx	predictive	Low
374	Input Value	'"<xxxxxx>xxxxx(/xxxx.xx/)</xxxxxx>	predictive	High
375	Input Value	' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxx	predictive	High
376	Input Value	.%xx.../.%xx.../	predictive	High
377	Input Value	../	predictive	Low
378	Input Value	/%xx	predictive	Low
379	Input Value	/../	predictive	Low
380	Input Value	xxxxxxxxx--><xxxxxx%xx>xxxxx(xxxx)</xxxxxx><!--	predictive	High
381	Input Value	xxxxxxxxxxxxxxxx	predictive	High
382	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
383	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxx	predictive	High
384	Input Value	\x	predictive	Low
385	Input Value	\|xxx${xxx}	predictive	Medium
386	Network Port	xxxxx	predictive	Low
387	Network Port	xxxxx	predictive	Low
388	Network Port	xxx/xx (xxx xxxxxxxx)	predictive	High
389	Network Port	xxx/xxx	predictive	Low
390	Network Port	xxx/xxxx	predictive	Medium

References (8)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

https://tria.ge/210824-j7r4atcshe/behavioral2

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!