ZeroAccess Analysis

Activities

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

Lang

en	995
pt	1
de	1
sv	1
it	1

Country

vn	1000

Actors

Indexsinas	2

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Product

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need you unlock this view to get access to more details of real data.

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	CVE
1	Microsoft Windows Remote Procedure Call Runtime Remote Code Execution	9.8	8.5	$100k and more	$25k-$100k	Unproven	Official Fix	10.00	CVE-2022-26809
2	Vmware Workspace ONE Access/Identity Manager Template injection	9.8	8.8	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	6.59	CVE-2022-22954
3	CODESYS Control CmpUserMgr improper authorization	5.9	5.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-22518
4	livehelperchat Password Reset behavioral workflow	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-0935
5	Asus RT-AC56U out-of-bounds write	8.8	8.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.08	CVE-2022-25596
6	Microprogram Parking Lot Management System URL information disclosure	5.3	5.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-25594
7	CODESYS Control Runtime System Webserver buffer overflow	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-22519
8	CODESYS Control Runtime System Configuration File exposure of resource	7.2	7.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-22515
9	aEnrich a+HRD API Function privileges management	9.8	9.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.19	CVE-2022-26676
10	JerryScript js-parser-statm.c parser_parse_for_statement_start heap-based overflow	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2021-43453
11	D-Link DIR-878 Input Field os command injection	8.8	8.6	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2022-26670
12	Asus RT-AC86U Request denial of service	6.5	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.15	CVE-2022-25595
13	Asus RT-AX56U sql injection	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.15	CVE-2022-23972
14	Asus RT-AX56U PORT path traversal	7.2	7.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-23971
15	CODESYS Products CmpSettings uninitialized pointer	6.8	6.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-22514
16	BitDefender Endpoint Security Tools Update Server denial of service	7.5	7.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-0677
17	aEnrich a+HRD URL path traversal	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-26675
18	Vmware Workspace ONE Access OAuth2 ACS Framework improper authentication	9.8	9.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.15	CVE-2022-22956
19	Microsoft Windows User Profile Service Privilege Escalation	7.3	6.8	$25k-$100k	$25k-$100k	Functional	Official Fix	1.92	CVE-2022-26904
20	Microsoft Windows Common Log File System Driver Privilege Escalation	8.3	7.7	$100k and more	$25k-$100k	Functional	Official Fix	2.64	CVE-2022-24521

IOC - Indicator of Compromise (190)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Confidence
1	13.107.21.200		Zeroaccess	High
2	13.107.213.70		Zeroaccess	High
3	13.107.246.70		Zeroaccess	High
4	20.36.253.92		Zeroaccess	High
5	23.10.130.155	a23-10-130-155.deploy.static.akamaitechnologies.com	ZeroAccess	High
6	23.20.239.12	ec2-23-20-239-12.compute-1.amazonaws.com	ZeroAccess	Medium
7	23.36.85.183	a23-36-85-183.deploy.static.akamaitechnologies.com	Zeroaccess	High
8	23.78.173.83	a23-78-173-83.deploy.static.akamaitechnologies.com	Zeroaccess	High
9	24.35.22.12	c-24-35-22-12.customer.broadstripe.net	ZeroAccess	High
10	24.112.60.78	host-24-112-60-78.vyvebroadband.net	ZeroAccess	High
11	27.252.253.254	254.253.252.27.dyn.cust.vf.net.nz	ZeroAccess	High
12	31.19.213.221	ip1f13d5dd.dynamic.kabel-deutschland.de	ZeroAccess	High
13	36.3.96.243	static-36-3-96-243.xxxxx.svips.gol.ne.jp	ZeroAccess	High
14	38.121.20.199		ZeroAccess	High
15	40.91.78.9		Zeroaccess	High
16	46.47.98.47		ZeroAccess	High
17	46.194.56.24	c-2ec23818-74736162.cust.telenor.se	ZeroAccess	High
18	46.246.253.254	46.246.253.254.dsl.dyn.forthnet.gr	ZeroAccess	High
19	50.4.85.69	d4-50-69-85.nap.wideopenwest.com	ZeroAccess	High
20	50.151.53.179	c-50-151-53-179.hsd1.il.comcast.net	ZeroAccess	High
21	52.24.23.122	ec2-52-24-23-122.us-west-2.compute.amazonaws.com	Zeroaccess	Medium
22	52.34.145.111	ec2-52-34-145-111.us-west-2.compute.amazonaws.com	Zeroaccess	Medium
23	52.85.144.35	server-52-85-144-35.iad89.r.cloudfront.net	Zeroaccess	High
24	54.81.163.76	ec2-54-81-163-76.compute-1.amazonaws.com	Zeroaccess	Medium
25	54.160.67.78	ec2-54-160-67-78.compute-1.amazonaws.com	Zeroaccess	Medium
26	62.60.251.244		ZeroAccess	High
27	64.4.54.254		Zeroaccess	High
28	64.210.151.32		ZeroAccess	High
29	65.25.8.238	cpe-65-25-8-238.neo.res.rr.com	ZeroAccess	High
30	65.30.151.36	cpe-65-30-151-36.wi.res.rr.com	ZeroAccess	High
31	65.55.44.109		Zeroaccess	High
32	66.233.105.136		ZeroAccess	High
33	67.61.64.86	67-61-67-61-64-86.cpe.sparklight.net	ZeroAccess	High
34	67.225.218.50	lb01.parklogic.com	ZeroAccess	High
35	68.43.104.31	c-68-43-104-31.hsd1.mi.comcast.net	ZeroAccess	High
36	68.61.104.80	c-68-61-104-80.hsd1.mi.comcast.net	ZeroAccess	High
37	68.64.113.104	dynamic-68-64-113-104.tvscable.com	ZeroAccess	High
38	68.173.181.191	cpe-68-173-181-191.nyc.res.rr.com	ZeroAccess	High
39	XX.XXX.XX.XX	xxx-xx-xxx-xx-xx.xxxxxx.xxx.xx.xxx	Xxxxxxxxxx	High
40	XX.XX.XX.XXX	xx-xx-xx-xx-xxx.xxx.xxxxxxxxx.xxx	Xxxxxxxxxx	High
41	XX.XX.XX.XX	xxxx-xx-xx-xx-xx.xxxxxxx.xxx	Xxxxxxxxxx	High
42	XX.XX.XX.XX	xxxxxxxxxxxxxxxxx.xx.xxxxxxxxx.xxx	Xxxxxxxxxx	High
43	XX.XXX.XXX.XX	xxx-xx-xxx-xxx-xx.xxx.xxx.xx.xxx	Xxxxxxxxxx	High
44	XX.XXX.XXX.XX	xxxx-xxx-xxx-xx.xx.xx.xxx.xxx	Xxxxxxxxxx	High
45	XX.XXX.X.XXX	x-xx-xxx-x-xxx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
46	XX.XXX.XXX.XXX	xxxx-xx-xxx-xxx-xxx.xxxxxx.xxxx.xxxxxxx.xxx	Xxxxxxxxxx	High
47	XX.XXX.XXX.XXX	xxxx-xx-xxx-xxx-xxx.xxxxxx.xxx-x.xxxxxxx.xxx	Xxxxxxxxxx	High
48	XX.XX.XX.XXX		Xxxxxxxxxx	High
49	XX.XX.XXX.XX		Xxxxxxxxxx	High
50	XX.XX.XXX.XXX	xxxx.xxxxxxxxx.xxx	Xxxxxxxxxx	High
51	XX.XXX.XX.XX	xxxx-xxx-xx-xx.xx.xx.xxx.xxx	Xxxxxxxxxx	High
52	XX.XXX.XX.XXX	xx-xxx-xx-xxx.xxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	High
53	XX.XXX.XX.XX	xx-xxx-xx-xx.xxxxxxxxxx.xxx.xxx.xxxxxxxxxx.xxx	Xxxxxxxxxx	High
54	XX.XXX.XXX.XXX		Xxxxxxxxxx	High
55	XX.XX.X.XXX	x-xx-xx-x-xxx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
56	XX.XXX.XXX.XX	xx.xxx-xx-xxx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
57	XX.XX.XXX.XX	xxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xx	Xxxxxxxxxx	High
58	XX.XX.XX.XXX	xx-xx-xx-xxx.xxxxxxxx.xx-xx.xxx	Xxxxxxxxxx	High
59	XX.XX.XX.XXX	xxxxx-xx-xx-xx-xxx.xx.xx	Xxxxxxxxxx	High
60	XX.XXX.XXX.XX	xxxxx-x_xxxx-xx-xxx-xxx-xx.xxx.xxxxxx.xxx	Xxxxxxxxxx	High
61	XX.XXX.XXX.XX	xx-xxx-xxx-xx.xxxxxx.xx	Xxxxxxxxxx	High
62	XX.XXX.XXX.XXX	xxxxxxxxx.xxxx.x-xxxxxxxxx.xx	Xxxxxxxxxx	High
63	XX.XX.XX.XX	xxxxxxxxx-xxxxxx-x-x-xxxxxx.x-x.xxxxx.xxxxxxx.xxx	Xxxxxxxxxx	High
64	XX.XXX.XXX.XX	xxxx.xxxxxx.xxx	Xxxxxxxxxx	High
65	XX.XXX.XXX.XX	xxxx-xx-xxx-xxx-xx.xxxxx.xxx.xx	Xxxxxxxxxx	High
66	XX.XXX.XX.XX	xx-xxx-xx-xx.xxxxx-xxxxxx.xx	Xxxxxxxxxx	High
67	XX.XX.X.XXX	xxx.x.xx.xx.xxx.xxx.xxx	Xxxxxxxxxx	High
68	XX.XX.XX.XXX	xxxx-xx-xx-xx-xxx.xxxxxxxx.xxxxxxxxxxxxx.xx	Xxxxxxxxxx	High
69	XX.XXX.XXX.XX	xx.xxx.xxx.xx.xxxxxxx.xxxxxxx.xx	Xxxxxxxxxx	High
70	XX.XXX.XXX.XXX	xxx.xxx.xxx.xx.xxxxxx.xxxxxx.xx	Xxxxxxxxxx	High
71	XX.XXX.XXX.XXX	xx.xxx.xxx.xxx.xxxxxxx.xxxxx.xxx.xx	Xxxxxxxxxx	High
72	XX.XXX.XXX.XXX		Xxxxxxxxxx	High
73	XX.XXX.XXX.XXX	xx.xxx.xxx.xxx.xxxxxxx.xxxxx.xxx.xx	Xxxxxxxxxx	High
74	XX.XXX.XX.XX	xxxx-xx-xxx-xx-xx.xxxxxxx.xx.xx	Xxxxxxxxxx	High
75	XX.XXX.XXX.XXX	xxxxxxxxx.xxxxxxxx.xx	Xxxxxxxxxx	High
76	XX.XX.XXX.XX	xxxxxxxxxx.xxxxxxx.xxxxx-xxxxxxxxxxx.xx	Xxxxxxxxxx	High
77	XX.XXX.X.XX	xxx.xxxxxxxx.xxx	Xxxxxxxxxx	High
78	XX.XXX.XXX.XXX		Xxxxxxxxxx	High
79	XX.XXX.XX.XXX		Xxxxxxxxxx	High
80	XX.XXX.XXX.XXX		Xxxxxxxxxx	High
81	XX.XX.XXX.XXX	xx.xx.xxx.xxx.xxxxxxxx.xxxxxxx.xx	Xxxxxxxxxx	High
82	XX.X.XX.X	xxx-x-xx-x.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	High
83	XX.XX.XXX.XXX	xxx-xx-xxx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	High
84	XX.XX.XXX.XX		Xxxxxxxxxx	High
85	XX.XX.XXX.XXX	xxx-xxx-xxx-xxx.xxx.xxxxxxxx.xxx	Xxxxxxxxxx	High
86	XX.XXX.XXX.XXX	x-xx-xxx-xxx-xxx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
87	XX.XXX.XXX.XX	x-xx-xxx-xxx-xx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
88	XX.XXX.XXX.XXX	x-xx-xxx-xxx-xxx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
89	XX.XXX.XXX.XXX	x-xx-xxx-xxx-xxx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
90	XXX.XX.XX.XX		Xxxxxxxxxx	High
91	XXX.XX.XX.XX		Xxxxxxxxxx	High
92	XXX.XX.XX.XX		Xxxxxxxxxx	High
93	XXX.XX.XX.XXX		Xxxxxxxxxx	High
94	XXX.XX.XX.XXX		Xxxxxxxxxx	High
95	XXX.XX.XX.XX		Xxxxxxxxxx	High
96	XXX.XXX.XX.XXX	xxxx-xxx-xx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	High
97	XXX.XX.XXX.XXX	xxx-xxx-xx-xxx-xxx.xxx.xxx.xx.xxx	Xxxxxxxxxx	High
98	XXX.XX.XXX.XXX		Xxxxxxxxxx	High
99	XXX.XX.XXX.XXX	xxx-xxx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxxxxx	Medium
100	XXX.XXX.XXX.XX	xx.xxx.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	Medium
101	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxxxxx.xxxxxx.xxxxxxxxx.xxx	Xxxxxxxxxx	High
102	XXX.XXX.XXX.XXX	xxxx-xxx-xxx-xxx-xxx.xxxx-xxxxxxxx.xx	Xxxxxxxxxx	High
103	XXX.XXX.XX.XX	xx-xx-xxx-xxx-xx-xxxx.xxx	Xxxxxxxxxx	High
104	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx-xx-xxxx.xxx	Xxxxxxxxxx	High
105	XXX.XX.XX.XX	xxxx-xx-xx-xx.xxxx.xxx.xxxxxxxx.xxx.xx	Xxxxxxxxxx	High
106	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxx.xxx.xxx	Xxxxxxxxxx	High
107	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
108	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
109	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
110	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
111	XXX.XXX.XX.XX		Xxxxxxxxxx	High
112	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
113	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx.xxxxxxxxx.xxxxxxx.xx	Xxxxxxxxxx	High
114	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
115	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
116	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
117	XXX.XXX.XXX.XXX	xx-xx-xxxx.xxxxx.xxx	Xxxxxxxxxx	High
118	XXX.XXX.XXX.XXX	xx-xx-xxxx.xxxxx.xxx	Xxxxxxxxxx	High
119	XXX.XXX.X.XXX		Xxxxxxxxxx	High
120	XXX.XXX.XX.XX	xxxxxxxx.xxxx.xxxx.xxx.xx	Xxxxxxxxxx	High
121	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
122	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
123	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxx.xxxxxxx.xx	Xxxxxxxxxx	High
124	XXX.XXX.XXX.XX		Xxxxxxxxxx	High
125	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
126	XXX.XXX.XXX.XXX	xxx.xxx-xxx-xxx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
127	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
128	XXX.XXX.XXX.XXX	xxxxxxx-xx-xxxx.xxxxxxx.xx	Xxxxxxxxxx	High
129	XXX.XXX.XXX.XXX	xxxxxxx-xx-xxxx.xxxxxxx.xx	Xxxxxxxxxx	High
130	XXX.XXX.X.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
131	XXX.XXX.X.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxxxxxx	High
132	XXX.XXX.X.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
133	XXX.XXX.X.X	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxxxxxx	High
134	XXX.XXX.XX.X	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxxxxxx	High
135	XXX.XXX.XX.XXX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
136	XXX.XXX.XX.XX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxxxxxx	High
137	XXX.XXX.XXX.XXX	xxxxxxxx-xx-xx.xxxxx.xxx	Xxxxxxxxxx	High
138	XXX.XXX.XX.XX	xxx-xxx-xx-xx.xxx.xxx.xxx	Xxxxxxxxxx	High
139	XXX.XXX.XX.XX	xxxxxxxxxxxxx.xx-xxx-xxx.xx.xxxxxxxxx.xx	Xxxxxxxxxx	High
140	XXX.XXX.XXX.XX	xxxxxxxxxxxxx.xxx-xxx-xxx.xx.xxxxxxxxx.xx	Xxxxxxxxxx	High
141	XXX.XXX.XXX.XX	xx.xx.xxxx.xxx.xxxxxx.xx-xxxxxxx.xxx	Xxxxxxxxxx	High
142	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx-xxxx.xxx.xxx.xxxxxxxxxx.xxx	Xxxxxxxxxx	High
143	XXX.XX.XXX.XXX	xxx-xxx-xxx-xxx.xxx.xxxxxxxx.xxx	Xxxxxxxxxx	High
144	XXX.XX.XX.XX	x-xxx-xx-xx-xx.xxxx.xx.xxxxxxx.xxx	Xxxxxxxxxx	High
145	XXX.XXX.XXX.XX	xx-xxx-xxx-xxx-xx.xxxxx.xxxxxxxxxxxxxxx.xx	Xxxxxxxxxx	High
146	XXX.XXX.XXX.XX	xxxxx-xxx-xxx-xxx-xx.xxxxxxx.xxx.xx	Xxxxxxxxxx	High
147	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
148	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
149	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
150	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
151	XXX.XX.XXX.XXX	xxx-xxx-xx-xxx.xxxxxxxx.xxx.xx	Xxxxxxxxxx	High
152	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
153	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
154	XXX.XX.XXX.XXX		Xxxxxxxxxx	High
155	XXX.XX.XXX.XX	xxxxxx-xxx-xx-xxx-xx.xx.xxxxxx.xxx	Xxxxxxxxxx	High
156	XXX.XXX.XXX.XXX	xx-xxx-xxx-xxx-xxx.xxxxxx.xxxxxxx.xxx	Xxxxxxxxxx	High
157	XXX.XXX.XXX.XXX	xx-xxx-xxx-xxx-xxx.xxxxxx.xxxxxxx.xxx	Xxxxxxxxxx	High
158	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx-xxx.xxxxxx.xxx	Xxxxxxxxxx	High
159	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxx.xxx.xxxxxxxxxxx.xxx.xx	Xxxxxxxxxx	High
160	XXX.X.X.XX	xx.x.x.xxx.xxx.xxx.xxx	Xxxxxxxxxx	High
161	XXX.XX.XXX.XX	xxxx-xxx-xx-xxx-xx.xxxxxxxx.xxxxxxxxxxxxx.xx	Xxxxxxxxxx	High
162	XXX.XX.X.X		Xxxxxxxxxx	High
163	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx.xx.xxxxxxxxxxx.xx	Xxxxxxxxxx	High
164	XXX.XX.XX.XX	xxxxxxxx.xxxxxx.xxx.xx	Xxxxxxxxxx	High
165	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxxxxx.xxx.xx	Xxxxxxxxxx	High
166	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
167	XXX.XX.XXX.XX	xxxx.xxxxxxxxxxx.xxx	Xxxxxxxxxx	High
168	XXX.XXX.XXX.XX		Xxxxxxxxxx	High
169	XXX.XX.XXX.XX	xx-xxx-xx-xxx.xxxx.xx.xx	Xxxxxxxxxx	High
170	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
171	XXX.XX.XXX.XX	xxx-xx-xxx-xx.xxx.xxxxxxxxxxx.xxx	Xxxxxxxxxx	High
172	XXX.XX.XX.XX	xx-xxx-xx-xx-xx.xxxxxxx.xxxxx.xx	Xxxxxxxxxx	High
173	XXX.XX.XXX.XXX		Xxxxxxxxxx	High
174	XXX.XX.XXX.XXX		Xxxxxxxxxx	High
175	XXX.XX.XXX.XX		Xxxxxxxxxx	High
176	XXX.XXX.XXX.XXX	xxxx-xxx-xxx-xxx.xxxxxxxx.xxx	Xxxxxxxxxx	High
177	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
178	XXX.XX.XXX.XXX	x-xxxx.x-xxxxxx.xxx	Xxxxxxxxxx	High
179	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
180	XXX.XXX.XX.XXX	xxxxx.xxx-xxx-xx.xxxxxx.xxxxxxxxxxxx.xxx	Xxxxxxxxxx	High
181	XXX.XX.XX.XXX		Xxxxxxxxxx	High
182	XXX.XX.XXX.XXX	xx-xx-xxxx.xxxxx.xxx	Xxxxxxxxxx	High
183	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxx.xxxxxxxxxxx.xxx	Xxxxxxxxxx	High
184	XXX.XX.XXX.XX		Xxxxxxxxxx	High
185	XXX.XXX.XXX.XXX	xxxx-xxx-xxx-xxx-xxx.xxxxxxx.xxxxxxxxxxx.xxx	Xxxxxxxxxx	High
186	XXX.XXX.XXX.XXX	xxxxxxxxx.xxx.xx	Xxxxxxxxxx	High
187	XXX.XXX.XXX.XXX		Xxxxxxxxxx	High
188	XXX.XX.XX.XX		Xxxxxxxxxx	High
189	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxx.xxx.xx	Xxxxxxxxxx	High
190	XXX.XXX.XXX.XXX	xxxxxx.xxxx.xx	Xxxxxxxxxx	High

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Confidence
1	T1040	CWE-294	Authentication Bypass by Capture-replay	High
2	T1059.007	CWE-79, CWE-80	Cross Site Scripting	High
3	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	High
4	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	High
5	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	High
6	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	High
7	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	High
8	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxxxx	High
9	TXXXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	High
10	TXXXX	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	High

IOA - Indicator of Attack (148)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Confidence
1	File	/admin/index.php	High
2	File	/admin/index.php?slides	High
3	File	/admin/login.php	High
4	File	/admin/uploads.php	High
5	File	/apply.cgi	Medium
6	File	/AvalancheWeb/image	High
7	File	/customer_register.php	High
8	File	/devices/acurite.c	High
9	File	/etc/master.passwd	High
10	File	/example/editor	High
11	File	/goform/login_process	High
12	File	/goform/rlmswitchr_process	High
13	File	/goforms/rlminfo	High
14	File	/include/chart_generator.php	High
15	File	/index.php?page=home	High
16	File	/index.php?page=reserve	High
17	File	/ofcms/company-c-47	High
18	File	/xxxxxx_xxxx/xxxxxxx	High
19	File	/xxxxxx_xxxx/xxxxx_xxxxxxx	High
20	File	/xxx/xxxxxxxxx.xx	High
21	File	/xxxx/xxxxx/	Medium
22	File	/xxxx/xxxxxxx/xxxxx.xxx?x=xxxx_xxxx	High
23	File	/xxxxxxxxxx/xxxxxxx/xxxxxxxxxxx?xxx=xxx=	High
24	File	/xxx/xxx_xxxxxx.x	High
25	File	/xxx/xxx_xxxx.xx	High
26	File	/xxxxxxx/xxxxx-xxxxxx.x	High
27	File	/xxxxxxx/xxxxxxxx.x	High
28	File	/xxx/xxxxx.xxxx	High
29	File	/xxxxxxx/	Medium
30	File	/xxxxxx/xxxxx/xxx_xxxxxxx.xxx	High
31	File	xx/x/xxxx	Medium
32	File	xxxxxxxxxxxxxx.xxxx	High
33	File	xxxxxxxxxx.xxxx	High
34	File	xxxxxxxxxx.xxx	High
35	File	xxx_xxxx.xxx	Medium
36	File	xx_xxxxxx.xxx	High
37	File	xxx/xxxxxxx.xxx	High
38	File	xxxxx.xxxxxxxxx.xxxxxx	High
39	File	xxxx.xxx_xxxxx_xxxx_xxxx-xxxx.xxx	High
40	File	xxxx.xxx_xxxxx_xxxx_xxxxxxxxxx.xxx	High
41	File	xxxxxxxxxxxxxxxxx.xxxx	High
42	File	xxxxxxxx.xxx.xxx	High
43	File	xxxx_xxxx_xx.xx	High
44	File	xxxxxx.xxx	Medium
45	File	xxxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx	High
46	File	xxxxxxxxxxxxxx.xxx	High
47	File	xxxxxxxxxxxx.xxx	High
48	File	xxxxxxx/xxxxxxx	High
49	File	xxxxxx.xxx	Medium
50	File	xxxxxx.xxx	Medium
51	File	xxxxxxxxx.xxxxxxx.xxx	High
52	File	xxx-xxx.x	Medium
53	File	xxxxxxx/xxx/xxx/xxx_xxxxx.x	High
54	File	xxxxxxx/xxxxxxxxxx/xxx/xxxx/xxxx-xxx.x	High
55	File	xxxxxxx/xxxx/xxx/xxxx_xxx_xxxxx.x	High
56	File	xxx/xxxx/xxxx.x	High
57	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	High
58	File	xxxxxxxxxxxxxxx.xxx	High
59	File	xxxx.xxxx	Medium
60	File	xxxxx.xxxx	Medium
61	File	xxxxx.xxx/xxxxxxxxx/xxxxxx	High
62	File	xxx-xxxxx.x	Medium
63	File	xx-xxxxxx-xxxxx.x	High
64	File	xxxxxxxxxxxxx.xxx	High
65	File	xxx_xxx.xx	Medium
66	File	xxxxxxxxxxxx.xxxx	High
67	File	xxxxxx\xxxxxxxxx\xxxxxx\xxxxxxx\xxxxxxxxxxxxx	High
68	File	xxxxxxxx/xxx/xxxxxx.x	High
69	File	xxxxxxxx/xxx/xxxxx.x	High
70	File	xxxxx.xxx	Medium
71	File	xxxxxxx.x	Medium
72	File	xxxxxx_xxxxxx_xxxx.xxx	High
73	File	xxxxxxxxxxxxx.xxxx	High
74	File	xxxxxxxxxxxxxxx.xxx	High
75	File	xxxxxxxx.x	Medium
76	File	xxx/xxxxxxxxx/xx_xxx_xxxxxx.x	High
77	File	xxxxxxxx_xxxxxxxx.xxx	High
78	File	xxxxxxxxxxxxxxxxx.xxxx	High
79	File	xxxxxx.xxx	Medium
80	File	xxxxxxxxxxxxxxxxxxxx.xxx	High
81	File	xxxxxxxxxxxxxxxx.xxxx	High
82	File	xxxxxx/xxxxxxx/xxxxxx/xxx_xxxx_xxxx_xxxxx.xx	High
83	File	xxxx-xxxxxx.x	High
84	File	xxxxx/xxxxxxx/xxxxxx	High
85	File	xxxxxxxx.xxx	Medium
86	File	xxx/xxxxx_xxxx.xx	High
87	File	xxx/xxxx_xxxxxxx.xx	High
88	File	xxx/xxxx_xxxxxxxxx.xx	High
89	File	xxx/xxx_xxxxx.xx	High
90	File	xxx/xxx_xxxxxx.xx	High
91	File	xxx/xxxx/xxx/xxxx.x	High
92	File	xxxxxxxxxxxxxxxxx.xxxx	High
93	File	xxxxxx_xxx/xxxx	High
94	File	xxxxxxxx_xxxxx.xxx	High
95	File	xxxx_xxx_xxxxxxxx.xxx	High
96	File	xx-xxxxxxx/xxxxxxx/xxxxx-xxxxxxxx-xxxx-xxx/xxxxx_xxxxx/xxxxxxxx/xxxxxxxxx/xx_xxx_xxxxx_xxxxxxxx.xxxxxxxx.xxx	High
97	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	High
98	File	xxxxxxxxxxx.xxx	High
99	File	\xxxxxxx\xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	High
100	File	~/xxxxxxxx/xxxxxx/xxxxxx.xxx	High
101	Library	xxxxxx.xxx	Medium
102	Argument	xxxxxxxx	Medium
103	Argument	xx	Low
104	Argument	xxxxxxxx	Medium
105	Argument	xxxxx_xx	Medium
106	Argument	xxxxxxxx	Medium
107	Argument	xxxxxx	Low
108	Argument	xxxxxxxxxxx[xxxxxxxxxxx]	High
109	Argument	xxxxxxxxxxxx	Medium
110	Argument	xxxxxxxxxx	Medium
111	Argument	xxxxx	Low
112	Argument	xxxx	Low
113	Argument	xxxxxxxxxxx	Medium
114	Argument	x/xx/x/xxxx_xxxxxxxx_xxxxxx/xxxx_xxxxxx	High
115	Argument	xxxxxxx	Low
116	Argument	xxxxxx_xxxx_xxx	High
117	Argument	xxxx	Low
118	Argument	xx	Low
119	Argument	xxxxxxxxxxxxx	High
120	Argument	xxxx_xxxxxx_xxx	High
121	Argument	xxxx	Low
122	Argument	xxxxxx	Low
123	Argument	xxxx	Low
124	Argument	xxxx/xxxxxxxxxxx	High
125	Argument	xxxx	Low
126	Argument	xxxxxxxx	Medium
127	Argument	xxxx_xxx	Medium
128	Argument	xxxx xxxxx	Medium
129	Argument	xxxx_xxxxx	Medium
130	Argument	xxxx	Low
131	Argument	xxxxxx	Low
132	Argument	xxxxxx-xxx	Medium
133	Argument	xxxxxxx_xx	Medium
134	Argument	xxxxxxxx	Medium
135	Argument	xxx_xxxx	Medium
136	Argument	xxxx xxxxxxxxxxx	High
137	Argument	xxxxx	Low
138	Argument	xxxxxxx	Low
139	Argument	xxxxxxxxxxxxxxxx	High
140	Argument	xxx	Low
141	Argument	xxx	Low
142	Argument	xxxx	Low
143	Argument	xxxxxxxx	Medium
144	Argument	xxxx_xx	Low
145	Argument	xxx_xxxx	Medium
146	Input Value	%xx%xx%xxxxx%xxxxx=x%xxxxxxxxx=xxxxx(x)%xx	High
147	Input Value	\' xxxxx xxxxxx x,x,xxxxxx(xxxxxxxx,xxxx,xxxxxxxx),x,x,x,x,x,x,xx xxxx xxxxx xxxxx xx \'	High
148	Pattern	\|xx\|	Low

References (11)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!