Agent Tesla تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

التسلسل الزمني

اللغة

en926
zh34
de14
sv6
ru4

البلد

us834
cn52
il14
ru8
es8

الفاعلين

Cobalt Strike7
Mirai5
RedLine Stealer4
AsyncRAT3
Raccoon2

النشاطات

الاهتمام

التسلسل الزمني

النوع

Not Defined402
Operating System104
Content Management System50
Programming Language Software34
Web Browser22

المجهز

Not Defined208
Apple88
Microsoft52
Oracle44
Cisco38

منتج

Apple Mac OS X78
Oracle Java SE18
Microsoft Windows16
Adobe Shockwave Player14
WordPress14

الثغرات

#الثغرةBaseTemp0dayاليومق�معالجةEPSSCTICVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash الكشف عن المعلومات5.35.2$5k-$25kجاري الحسابHighWorkaround0.020160.02CVE-2007-1192
2Vmware Workspace ONE Access/Identity Manager Template تجاوز الصلاحيات9.89.4$5k-$25k$0-$5kHighOfficial Fix0.974490.29CVE-2022-22954
3Microsoft IIS سكربتات مشتركة5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.05CVE-2017-0055
4DZCP deV!L`z Clanportal config.php تجاوز الصلاحيات7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009431.22CVE-2010-0966
5vsftpd deny_file ثغرات غير معروفة3.73.6$0-$5k$0-$5kNot DefinedOfficial Fix0.003120.05CVE-2015-1419
6Microsoft IIS IP/Domain Restriction تجاوز الصلاحيات6.55.7$25k-$100k$0-$5kUnprovenOfficial Fix0.008170.24CVE-2014-4078
7HP Storage Data Protector تلف الذاكرة10.010.0$25k-$100k$0-$5kHighNot Defined0.521780.06CVE-2014-2623
8Guangzhou 1GE ONU/V2804RGW formPing تجاوز الصلاحيات5.95.9$0-$5k$0-$5kNot DefinedNot Defined0.770790.00CVE-2020-8958
9Basti2web Book Panel books.php حقن إس كيو إل7.37.0$0-$5k$0-$5kHighOfficial Fix0.000640.05CVE-2009-4889
10LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000004.49
11RARLabs WinRAR ZIP Archive Remote Code Execution6.35.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.443730.05CVE-2023-38831
12OpenSSH Supplemental Group تجاوز الصلاحيات4.64.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.000560.15CVE-2021-41617
13SourceCodester Simple Cold Storage Management System Contact Us طلب تزوير مشترك4.34.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.000660.05CVE-2022-3585
14FLDS redir.php حقن إس كيو إل7.37.3$0-$5k$0-$5kHighUnavailable0.002030.00CVE-2008-5928
15nginx تجاوز الصلاحيات6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002415.07CVE-2020-12440
16Esoftpro Online Guestbook Pro ogp_show.php حقن إس كيو إل7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001080.24CVE-2009-4935
17OpenSSH Readonly Mode sftp-server.c process_open تجاوز الصلاحيات5.35.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.006600.05CVE-2017-15906
18Zoho ManageEngine Firewall Analyzer DNS Name Stored سكربتات مشتركة5.25.1$0-$5k$0-$5kNot DefinedOfficial Fix0.001380.03CVE-2019-11676
19Microsoft IIS FTP Server تلف الذاكرة7.57.2$25k-$100k$0-$5kHighOfficial Fix0.968430.10CVE-2010-3972
20Tor Guard Relay De-anonymization الكشف عن المعلومات5.65.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.003890.03CVE-2017-0377

حملات (2)

These are the campaigns that can be associated with the actor:

IOC - Indicator of Compromise (143)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDعنوان بروتوكول الإنترنتHostnameممثلحملاتIdentifiedالنوعالثقة
12.9.12.0anantes-154-1-77-net.w2-9.abo.wanadoo.frAgent Tesla15/10/2018verifiedعالي
23.93.18.244ec2-3-93-18-244.compute-1.amazonaws.comAgent Tesla07/09/2022verifiedمتوسط
33.217.248.28ec2-3-217-248-28.compute-1.amazonaws.comAgent Tesla07/09/2022verifiedمتوسط
45.253.38.46Agent Tesla02/10/2023verifiedعالي
523.95.85.18123-95-85-181-host.colocrossing.comAgent Tesla12/06/2022verifiedعالي
623.95.128.19523-95-128-195-host.colocrossing.comAgent Tesla06/09/2023verifiedعالي
731.3.251.197h31-3-251-197.host.redstation.co.ukAgent Tesla31/03/2022verifiedعالي
831.155.119.217Agent Tesla02/04/2024verifiedعالي
931.209.137.12smtp.vivaldi.netAgent Tesla11/06/2022verifiedعالي
1031.220.2.200shared.swiftslots.comAgent Tesla02/11/2023verifiedعالي
1134.154.74.8585.74.154.34.bc.googleusercontent.comAgent Tesla08/01/2024verifiedمتوسط
1234.200.207.31ec2-34-200-207-31.compute-1.amazonaws.comAgent Tesla07/09/2022verifiedمتوسط
1337.19.196.108unn-37-19-196-108.datapacket.comAgent Tesla11/06/2022verifiedعالي
1437.49.228.234Agent Tesla04/03/2024verifiedعالي
1541.90.176.165Agent Tesla02/04/2024verifiedعالي
1641.90.177.10Agent Tesla02/04/2024verifiedعالي
1741.90.179.140Agent Tesla02/04/2024verifiedعالي
1841.90.180.123Agent Tesla02/04/2024verifiedعالي
1941.90.180.219Agent Tesla02/04/2024verifiedعالي
2041.90.181.104Agent Tesla02/04/2024verifiedعالي
2141.90.185.44Agent Tesla02/04/2024verifiedعالي
2241.90.186.173Agent Tesla02/04/2024verifiedعالي
2341.90.186.247Agent Tesla02/04/2024verifiedعالي
2441.90.186.248Agent Tesla02/04/2024verifiedعالي
2541.90.188.113Agent Tesla02/04/2024verifiedعالي
2641.90.189.214Agent Tesla02/04/2024verifiedعالي
2743.230.131.138srv1.nusadatacenter.comAgent Tesla12/11/2023verifiedعالي
2845.33.8.3045-33-8-30.ip.linodeusercontent.comAgent Tesla22/01/2024verifiedعالي
2945.38.135.112Agent Tesla02/04/2024verifiedعالي
30XX.XXX.XXX.XXXxxxxxxxxxx.xxxxXxxxx Xxxxx18/05/2022verifiedعالي
31XX.XXX.XX.XXXxxxx Xxxxx18/05/2022verifiedعالي
32XX.X.XX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
33XX.X.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
34XX.X.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
35XX.X.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
36XX.XXX.XXX.XXXxxxxxxxxxxxxxx.xxxXxxxx Xxxxx15/10/2018verifiedعالي
37XX.XX.XXX.XXXXxxxx Xxxxx23/09/2023verifiedعالي
38XX.XX.X.XXXxxx-xx-xx-x-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxx Xxxxx11/06/2022verifiedمتوسط
39XX.XX.XXX.XXXxxxxx.xx-xx-xx-xxx.xxXxxxx Xxxxx05/05/2022verifiedعالي
40XX.XX.XXX.XXxx.xxxx.xxx.xxxx.xxxxxxxXxxxx Xxxxx05/05/2022verifiedعالي
41XX.XXX.XXX.XXxxxxxx.xxxxxxxxxxxxxxxxxxxx.xxxXxxxx Xxxxx24/11/2023verifiedعالي
42XX.XXX.XXX.XXXXxxxx Xxxxx18/05/2022verifiedعالي
43XX.XX.XX.XXxxxxxx.xx.xx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxx Xxxxx18/05/2022verifiedعالي
44XX.XXX.XXX.XXxxxx.xxxxxxxxx.xxxXxxxx Xxxxx27/09/2023verifiedعالي
45XX.XXX.XX.XXXxxxxxxxxxx.xxxxxxxxx.xxxXxxxx XxxxxXxxxxxxx Xxxxx03/03/2022verifiedعالي
46XX.XXX.XXX.XXXXxxxx Xxxxx21/06/2022verifiedعالي
47XX.XXX.XX.XXxxxx Xxxxx02/04/2024verifiedعالي
48XX.XXX.XX.XXXxxxx XxxxxXxx-xxxx-xxxxx20/12/2023verifiedعالي
49XX.XXX.XX.XXXxx.xxxxxxxx.xxxXxxxx Xxxxx06/07/2022verifiedعالي
50XX.XXX.XXX.XXXxxxx Xxxxx05/05/2022verifiedعالي
51XX.XX.XXX.XXxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
52XX.XX.XXX.XXxxxxxxxx.xxxxxxx.xxxxxXxxxx Xxxxx12/07/2023verifiedعالي
53XX.XX.XXX.XXXxx-xxx-xxx.xxxxxxxx.xxxxXxxxx Xxxxx02/04/2024verifiedعالي
54XX.XXX.XX.XXXxxxxx-xx-xxx-xx-xxx.xxxxxx.xxxXxxxx Xxxxx17/01/2024verifiedعالي
55XX.XXX.XXX.XXXXxxxx Xxxxx05/07/2023verifiedعالي
56XX.XX.X.XXXxxxx Xxxxx15/10/2023verifiedعالي
57XX.XX.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
58XX.XX.XXX.XXXXxxxx Xxxxx19/01/2024verifiedعالي
59XX.XX.XXX.XXXxxxx Xxxxx06/11/2023verifiedعالي
60XX.XXX.XXX.XXxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
61XX.XXX.XXX.Xxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
62XX.XXX.XX.XXXxxxx Xxxxx19/03/2024verifiedعالي
63XX.XXX.XXX.XXxxxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxx Xxxxx30/05/2022verifiedعالي
64XX.XXX.XX.XXXxxxx Xxxxx24/03/2023verifiedعالي
65XXX.XXX.XXX.XXXXxxxx Xxxxx09/11/2021verifiedعالي
66XXX.XXX.XX.XXxxxx Xxxxx29/07/2022verifiedعالي
67XXX.XXX.XXX.XXXxxxx Xxxxx06/04/2022verifiedعالي
68XXX.XX.XXX.XXXxxxx Xxxxx05/05/2022verifiedعالي
69XXX.XXX.XX.XXxxx-xxx-xx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx19/03/2024verifiedعالي
70XXX.XXX.XX.XXxxx-xxx-xx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx06/07/2022verifiedعالي
71XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
72XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
73XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
74XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
75XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
76XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
77XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
78XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
79XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
80XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
81XXX.XXX.XXX.XXXxxxx Xxxxx31/03/2022verifiedعالي
82XXX.XXX.XXX.XXXXxxxx Xxxxx31/03/2022verifiedعالي
83XXX.XXX.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
84XXX.XXX.XX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
85XXX.XXX.XX.XXXxxxx Xxxxx02/04/2024verifiedعالي
86XXX.XXX.XXX.XXXxxxx-xxxxx.xxxxxxxxxxxxxxxxx.xxxXxxxx Xxxxx24/08/2021verifiedعالي
87XXX.XXX.XX.XXXxxx.xxx.xx.xxx.xxxxxxx.xxxxxxXxxxx Xxxxx04/10/2023verifiedعالي
88XXX.XXX.XXX.XXXxxxx.xx-xx.xxxXxxxx Xxxxx08/12/2023verifiedعالي
89XXX.XXX.X.XXxxxx.xxxxxxxxx.xxxxXxxxx Xxxxx22/07/2023verifiedعالي
90XXX.XX.XXX.XXxxxxxx-xxxx-xx.xxxxxxxxxxxxxxxxxxxxx.xxxXxxxx Xxxxx13/07/2023verifiedعالي
91XXX.XX.X.XXXXxxxx Xxxxx10/10/2023verifiedعالي
92XXX.XXX.XXX.XXXxxxxxxxxxx.xxx-xxx-xxx-xxx.xxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
93XXX.XXX.XXX.XXXxxxxxxxxxx.xxx-xxx-xxx-xxx.xxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
94XXX.XXX.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
95XXX.X.XX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
96XXX.X.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
97XXX.XX.XXX.XXXxxxxx.xx-xxx-xx-xxx.xxxXxxxx XxxxxXxxxxxxx Xxxxx03/03/2022verifiedعالي
98XXX.XXX.XXX.XXXXxxxx Xxxxx06/07/2022verifiedعالي
99XXX.XXX.X.XXXXxxxx Xxxxx02/04/2024verifiedعالي
100XXX.XXX.XX.XXxxx-xxx-xx-xx.xxxxxxxxxxxx.xxxXxxxx Xxxxx22/11/2023verifiedعالي
101XXX.XXX.XXX.XXxxxxxxxx.xxxxxxxxxxx.xxxXxxxx Xxxxx06/07/2022verifiedعالي
102XXX.XXX.XX.XXxxxx-xxx.xx-xxx.xxxXxxxx Xxxxx12/06/2022verifiedعالي
103XXX.XX.XX.XXXXxxxx Xxxxx19/05/2023verifiedعالي
104XXX.XX.XX.XXXXxxxx Xxxxx19/05/2023verifiedعالي
105XXX.XX.XXX.XXXXxxxx Xxxxx31/03/2024verifiedعالي
106XXX.XX.XX.XXXxxxxxxxxxx.xxx-xx-xx-xxx.xxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
107XXX.XXX.XXX.XXxx-xxx-xxx-xxx-xx.xx.xxxxxxxxxxxx.xxxXxxxx Xxxxx07/03/2024verifiedعالي
108XXX.XXX.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
109XXX.XX.XXX.XXXxxxxxxxx.xxxxxxxxxxx.xxxXxxxx Xxxxx06/04/2023verifiedعالي
110XXX.XX.XX.XXxxxxxxxx.xxxxxxxxxx.xxXxxxx Xxxxx18/05/2022verifiedعالي
111XXX.XX.X.XXXxxxx-xxx-xx-x-xxx.xxxxxxxxxxxx.xxXxxxx Xxxxx22/11/2023verifiedعالي
112XXX.XXX.XX.XXxxxxxxxxxx-xxxx.xxxx.xxxxxxxXxxxx Xxxxx18/05/2022verifiedعالي
113XXX.XXX.XX.XXXxxxx Xxxxx17/01/2023verifiedعالي
114XXX.XXX.XXX.XXXxxxx Xxxxx19/05/2023verifiedعالي
115XXX.XXX.XXX.XXXXxxxx Xxxxx27/12/2022verifiedعالي
116XXX.XXX.XXX.XXXxxxx Xxxxx25/05/2023verifiedعالي
117XXX.XXX.XXX.XXxxxxx.xxxxxxx.xxXxxxx Xxxxx22/11/2023verifiedعالي
118XXX.XXX.XXX.XXXxxxx.xxxxxxxxxx.xxXxxxx Xxxxx19/05/2023verifiedعالي
119XXX.X.XX.XXXxxx-x-xx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx12/03/2024verifiedعالي
120XXX.XX.XX.XXXXxxxx Xxxxx10/08/2022verifiedعالي
121XXX.XXX.XX.XXxxxxxxxx.xxxx.xxxXxxxx Xxxxx05/05/2022verifiedعالي
122XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxx Xxxxx29/07/2022verifiedعالي
123XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx22/11/2023verifiedعالي
124XXX.XXX.XX.XXx-xxx-xxx-xx-xx.xxxxx-xxx.xxxxxxx-xxxxxxx.xxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
125XXX.XXX.XX.XXx-xxx-xxx-xx-xx.xxxxx-xxx.xxxxxxx-xxxxxxx.xxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
126XXX.XXX.XXX.XXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
127XXX.XXX.XXX.XXXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
128XXX.XXX.XXX.XXxxxxxx-xxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
129XXX.XX.XX.XXXxxxx XxxxxXxx-xxxx-xxxxx20/12/2023verifiedعالي
130XXX.XXX.XXX.XXXxxxx Xxxxx06/12/2022verifiedعالي
131XXX.XXX.XX.XXXxxx.xxx.xx.xxx.xxxxxxxx.xxxXxxxx Xxxxx02/04/2024verifiedعالي
132XXX.XX.XXX.Xxxx-xx-xxx-x-xxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx06/07/2022verifiedعالي
133XXX.XX.XXX.XXXXxxxx Xxxxx05/05/2022verifiedعالي
134XXX.XX.XX.XXXxxxxx.xxxxxxxxxx.xxxXxxxx Xxxxx16/01/2023verifiedعالي
135XXX.XXX.X.XXXXxxxx Xxxxx08/04/2024verifiedعالي
136XXX.XX.XXX.XXXx-xxxx.x-xxxxxx.xxxXxxxx Xxxxx05/05/2022verifiedعالي
137XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx05/05/2022verifiedعالي
138XXX.XX.XXX.XXxxx.xxxxxxxx.xxxXxxxx Xxxxx12/06/2022verifiedعالي
139XXX.XX.XXX.XXXxxx.xxxxxxxx.xxxxxxxxxxx.xxxXxxxx Xxxxx04/03/2022verifiedعالي
140XXX.XX.XXX.XXXxxx.xxxxxxxx.xxxxxxxxxxx.xxxXxxxx Xxxxx12/06/2022verifiedعالي
141XXX.XXX.XX.XXXxxxxxx.xxxxxxxxxxxx.xxxXxxxx Xxxxx22/03/2023verifiedعالي
142XXX.XXX.XXX.XXXXxxxx Xxxxx02/04/2024verifiedعالي
143XXX.XXX.XXX.XXXxxxx Xxxxx22/12/2023verifiedعالي

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueالفئةالثغراتمتجه الوصولالنوعالثقة
1T1006CAPEC-126CWE-21, CWE-22Path Traversalpredictiveعالي
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath Expressionspredictiveعالي
3T1059CAPEC-137CWE-88, CWE-94Argument Injectionpredictiveعالي
4T1059.007CAPEC-209CWE-79, CWE-80Cross Site Scriptingpredictiveعالي
5T1068CAPEC-122CWE-264, CWE-269, CWE-284Execution with Unnecessary Privilegespredictiveعالي
6TXXXX.XXXCAPEC-CWE-XXXXxx Xx Xxxx-xxxxx Xxxxxxxxpredictiveعالي
7TXXXX.XXXCAPEC-16CWE-XXX, CWE-XXXXxxx-xxxxx Xxxxxxxxxxxpredictiveعالي
8TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxpredictiveعالي
9TXXXX.XXXCAPEC-178CWE-XXXXxxx Xxxxxxxxpredictiveعالي
10TXXXXCAPEC-CWE-XXX, CWE-XXX7xx Xxxxxxxx Xxxxxxxxpredictiveعالي
11TXXXXCAPEC-1CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx Xxxxxxpredictiveعالي
12TXXXXCAPEC-108CWE-XXXxx Xxxxxxxxxpredictiveعالي
13TXXXXCAPEC-50CWE-XXX, CWE-XXXXxxxxxxxxxx Xxxxxxxxxxpredictiveعالي
14TXXXX.XXXCAPEC-120CWE-XXXXxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxxpredictiveعالي
15TXXXXCAPEC-38CWE-XXXXxxxxxxxx Xxxxxx Xxxxpredictiveعالي
16TXXXX.XXXCAPEC-133CWE-XXXXxxxxxxxpredictiveعالي
17TXXXXCAPEC-464CWE-XXXXxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxxpredictiveعالي
18TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxpredictiveعالي
19TXXXX.XXXCAPEC-CWE-XXXxxxxxxxxxxxxpredictiveعالي
20TXXXXCAPEC-157CWE-XXX, CWE-XXXXxxxxxxxxxxxx Xxxxxxpredictiveعالي
21TXXXX.XXXCAPEC-59CWE-XXXXxx Xxxxxxxxxx Xxxxxpredictiveعالي
22TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxxpredictiveعالي

IOA - Indicator of Attack (333)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDالفئةIndicatorالنوعالثقة
1File/+CSCOE+/logon.htmlpredictiveعالي
2File/api/admin/system/store/order/listpredictiveعالي
3File/cgi-bin/wapopenpredictiveعالي
4File/csms/?page=contact_uspredictiveعالي
5File/etc/ajenti/config.ymlpredictiveعالي
6File/etc/gsissh/sshd_configpredictiveعالي
7File/forum/away.phppredictiveعالي
8File/goform/telnetpredictiveعالي
9File/modules/profile/index.phppredictiveعالي
10File/out.phppredictiveمتوسط
11File/rom-0predictiveواطئ
12File/tmp/phpglibccheckpredictiveعالي
13File/uncpath/predictiveمتوسط
14File/uploadpredictiveواطئ
15File/var/tmp/sess_*predictiveعالي
16Fileaction.phppredictiveمتوسط
17Fileactionphp/download.File.phppredictiveعالي
18Fileadd_comment.phppredictiveعالي
19Fileadmin.php3predictiveمتوسط
20Fileadmin.php?m=backup&c=backup&a=dobackpredictiveعالي
21Fileadmin/admin.phppredictiveعالي
22Fileadmin/content.phppredictiveعالي
23Fileadmin/index.php?id=users/action=edit/user_id=1predictiveعالي
24Fileadmin/memberviewdetails.phppredictiveعالي
25Fileadmin_gallery.php3predictiveعالي
26Fileaffich.phppredictiveمتوسط
27Fileagent/Core/Controller/SendRequest.cpppredictiveعالي
28Fileajax/telemetry.phppredictiveعالي
29FileakeyActivationLogin.dopredictiveعالي
30Filealbum_portal.phppredictiveعالي
31Fileapache-auth.confpredictiveعالي
32Fileaskapache-firefox-adsense.phppredictiveعالي
33Fileattachment.cgipredictiveعالي
34Fileblueprints/sections/edit/1predictiveعالي
35Fileboaform/admin/formPingpredictiveعالي
36Filebooks.phppredictiveمتوسط
37Filecart_add.phppredictiveمتوسط
38FileCFS.cpredictiveواطئ
39Filechecktransferstatus.phppredictiveعالي
40Filecheckuser.phppredictiveعالي
41Fileclass.SystemAction.phppredictiveعالي
42Fileclientarea.phppredictiveعالي
43Filecollectivite.class.phppredictiveعالي
44Filecom_android_bluetooth_btservice_AdapterService.cpppredictiveعالي
45Filecontactpredictiveواطئ
46Filexxxxxxx.xpredictiveمتوسط
47Filexxxx/xxxxxxxxxxxxxxxxxxxx.xxxpredictiveعالي
48Filexxx-xxx/xxxxxxxxxxxxx.xxxpredictiveعالي
49Filexx_xxxx.xpredictiveمتوسط
50Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveعالي
51Filexxxxx_xxxxxxx_xxxx.xxxpredictiveعالي
52Filexxxxxxxxxxxxx/xxxxxx/xxxx.xxxpredictiveعالي
53Filexxxxxxx_xxxx.xxxpredictiveعالي
54Filexxxxxxxx.xxxpredictiveمتوسط
55Filexxxxxxxxxxxxxxxx.xpredictiveعالي
56Filexxxxxxxx-xxxx.xxxpredictiveعالي
57Filexxxxxxxx.xxxpredictiveمتوسط
58Filex/xxxxxx/xxxxxxxx.xxxpredictiveعالي
59Filexxxxxxxx.xxxpredictiveمتوسط
60Filexxxxx.xxxpredictiveمتوسط
61Filexxxxxxx-xxxxxxx/xxxx/xxxxxx/xxxxxxxx/xxx/xxxxxxxxx/xxxxxx.xxpredictiveعالي
62Filexxxxx.xxxpredictiveمتوسط
63Filexxx/xxxx/xxxx_xxxxxx.xpredictiveعالي
64Filexxx/xxxxxxxx/xxx.xpredictiveعالي
65Filexxxx.xxxpredictiveمتوسط
66Filexxxxxxxxxx/xxx.xxpredictiveعالي
67Filexxxxxxxxx/xx/xxxxxxxxxxxx.xxxpredictiveعالي
68Filexxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveعالي
69Filexxxxxxxx.xxxpredictiveمتوسط
70Filexxxxxxxx/xxxx_xxxxxxxx.xxxpredictiveعالي
71Filexxxxxxxxxxxxxx.xxxpredictiveعالي
72Filexxxxxxxxxx.xxxpredictiveعالي
73Filexxxxxxx.xxxpredictiveمتوسط
74Filexxxxxxxxx.xxxpredictiveعالي
75Filexxxxxxxxx.xxpredictiveمتوسط
76Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictiveعالي
77Filexxxx-xxxxxxx.xpredictiveعالي
78Filexxxxxx/xxxxxxpredictiveعالي
79Filexxxxxx_xx.xpredictiveمتوسط
80Filexx/xxx/xxxxx.xpredictiveعالي
81Filexxxxx.xxxpredictiveمتوسط
82Filexxxxxxxxxxxxxx.xxxpredictiveعالي
83Filexxxxxxx.xxxpredictiveمتوسط
84Filexxx/xxxxxx.xxxpredictiveعالي
85Filexxxxx.xxxpredictiveمتوسط
86Filexxxxx.xxx?xxx=xxxx&xxx=xxxxxxxxpredictiveعالي
87Filexxxxx_xx.xxxpredictiveمتوسط
88Filexxxxxxxx.xxxpredictiveمتوسط
89Filexxxx_xxxx.xxxpredictiveعالي
90Filexxxxxxxxxx/xxx/xxxxxx_xxxx.xxxpredictiveعالي
91Filexxx/xxxxxxxxxx/xxxxxxxxx.xxpredictiveعالي
92Filexxxxxx.xpredictiveمتوسط
93Filexxxxxxxxx/xxxxxx.xxx.xxxpredictiveعالي
94Filexxxxxxxxx/xxxxxxxx.xxxpredictiveعالي
95Filexxxxxxxxx.xxxpredictiveعالي
96Filexxxxx.xxxxpredictiveمتوسط
97Filexxxxx.xxxpredictiveمتوسط
98Filexxx.xpredictiveواطئ
99Filexxxxx_xxxxxxxxxx_xxxx.xpredictiveعالي
100Filexxxx.xxxpredictiveمتوسط
101Filexxxxxxxx.xxx.xpredictiveعالي
102Filexxxxxxxxxx.xxxpredictiveعالي
103Filexxxxx/__xxxx_xxxx.xxxpredictiveعالي
104Filexxxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxxpredictiveعالي
105Filexxxxxx_xxxxxx.xxxpredictiveعالي
106Filexxx/xxxx/xxxx_xxxxxx.xpredictiveعالي
107Filexxxx_xxxx.xxxpredictiveعالي
108Filexxx_xxxxxxxx.xpredictiveعالي
109Filexxxx/xxxxx/xxxxxxx/xxxxxxxx.xxpredictiveعالي
110Filexxxxxxx.xxxpredictiveمتوسط
111Filexxxxx.xxxpredictiveمتوسط
112Filexxx_xxxx.xxxpredictiveمتوسط
113Filexxxxxxx_xxxxxxxxx.xpredictiveعالي
114Filexxx/xxxxxx/xxxxxxxx/xxxxx/xxxxxxxxx.xxxxpredictiveعالي
115Filexxxxxxxxxxxx.xxxpredictiveعالي
116Filexxxxxx.xxxpredictiveمتوسط
117Filexxxxxx/xxxxxxx-xxx-xxxpredictiveعالي
118Filexxxxxx.xxxpredictiveمتوسط
119Filexxxxxxxxxx.xxx.xxxpredictiveعالي
120Filexxxpredictiveواطئ
121Filexxxxx_xxxxxx.xxxpredictiveعالي
122Filexxxxxx.xxxpredictiveمتوسط
123Filexxxx_xxx.xxxpredictiveمتوسط
124Filexxxxxxx.xxxpredictiveمتوسط
125Filexxxxxxxxxx.xxxpredictiveعالي
126Filexxxxxx/xxxxx.xxxpredictiveعالي
127Filexxx_xxxxxx.xxxpredictiveعالي
128Filexxxx.xxxpredictiveمتوسط
129Filexxxxx.xxxpredictiveمتوسط
130Filexxxxx.xxxpredictiveمتوسط
131Filexxxxxxxx.xxxpredictiveمتوسط
132Filexxxxxxxxxxxx.xxxpredictiveعالي
133Filexxxxxxxx_xxxx.xxxpredictiveعالي
134Filexxxxxx.xxxpredictiveمتوسط
135Filexxxxx.xxxpredictiveمتوسط
136Filexx_xxxx.xpredictiveمتوسط
137Filexxxx/xxxxxxxxxxxxxx/xxxx_xxxxxxx.xpredictiveعالي
138Filexxxxx.xxxpredictiveمتوسط
139Filexxxxxx.xxxpredictiveمتوسط
140Filexxxxxxxxx.xxxpredictiveعالي
141Filexxxx-xxxxxx.xpredictiveعالي
142Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveعالي
143Filexxxxxxxxxxxxx.xxxpredictiveعالي
144Filexxxxx.xxxpredictiveمتوسط
145Filexxxxx_xxxxx.xxxpredictiveعالي
146Filexxxxxxxxxxxx.xxxpredictiveعالي
147Filexxxxxxxxx.xxxpredictiveعالي
148Filexxxxx.xpredictiveواطئ
149Filex/xxxxx.xxxpredictiveمتوسط
150Filexxx_xxx.xpredictiveمتوسط
151Filexxxx-xxxxxxxx.xxxpredictiveعالي
152Filexxx.xxxpredictiveواطئ
153Filexxxxx/xxxxxxxx.xxxpredictiveعالي
154Filexxxxx_xxxxx.xxxxpredictiveعالي
155Filexxxx/xxxxxxxx/xxxxxxxx.xxxxpredictiveعالي
156Filexxxxxxxxx.xxpredictiveمتوسط
157Filexxxxx_xx.xxxpredictiveمتوسط
158Filexxxx_xx_xxxx.xxxpredictiveعالي
159Filexxx.xxxpredictiveواطئ
160Filexxx.xxxpredictiveواطئ
161Filexxxxxxxx/xxxxx/xxxxx.xxxpredictiveعالي
162Filexxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxxpredictiveعالي
163Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveعالي
164Filexx-xxxxx.xxxpredictiveمتوسط
165Filexxx/xx_xxx.xxxpredictiveعالي
166Filexxxx.xxpredictiveواطئ
167File\xxxxxxx\xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxpredictiveعالي
168File~/xxx-xxx-xxxxxx.xxxpredictiveعالي
169Libraryxxxxxxxx/xxxxxxx/xxxxxxxx/xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxx/xxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxx/xxxxxxxx_xxxxxxxxxxxxxxxx.xxxxpredictiveعالي
170Libraryxxxxxx[xxxxxx_xxxxpredictiveعالي
171Libraryxxxxxx.xxxpredictiveمتوسط
172Libraryxxxxxxx.xxxpredictiveمتوسط
173Libraryxxxxxx.xxxpredictiveمتوسط
174Libraryxxxxxx.xxxpredictiveمتوسط
175Libraryxxxxxxx-xxxxxxx/xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxxxx.xxxxpredictiveعالي
176Libraryxxxxxx.xxxpredictiveمتوسط
177Libraryxxxxx.xxxpredictiveمتوسط
178Libraryxxxxxx.xxxpredictiveمتوسط
179Libraryxxx.xxxpredictiveواطئ
180Libraryxxx/xxx/xxx.xxxx.xxxpredictiveعالي
181Libraryxxxxxxxx/xxx/xx.xxxpredictiveعالي
182Libraryxxx/xxxxxx/xxxxxxxx.xxpredictiveعالي
183Libraryxxx/xxxxxx/xxxxxxx/xxxxxxxxx.xxpredictiveعالي
184Libraryxxx/xxxxxx/xxxxxxx/xxxxx.xxpredictiveعالي
185Libraryxxx/xxxxxx/xxx/xxxxxxxxxxx_xxxxxxxxx.xxpredictiveعالي
186Libraryxxx/x.xpredictiveواطئ
187Libraryxxx/xxxxxxx/xxxxx.xxpredictiveعالي
188Libraryxxx/xxxxxxx.xxpredictiveعالي
189Libraryxxxxxxxx.xxxpredictiveمتوسط
190Libraryxxx.xxxpredictiveواطئ
191Libraryxxxxxxxxx.x.x.xxx.xxxpredictiveعالي
192Libraryxxxxxxxx.xxxpredictiveمتوسط
193Libraryxxxxxx.xxxpredictiveمتوسط
194Libraryxxxxxx.xxxpredictiveمتوسط
195Libraryxxxxxxxxxx.xxxpredictiveعالي
196Libraryxxxxxxxxxx.xxxpredictiveعالي
197Libraryxxxx.xxxpredictiveمتوسط
198Libraryxxxxxx.xxxpredictiveمتوسط
199Libraryxxxxxxxx.xxxpredictiveمتوسط
200Libraryxxxxxxxx.xxxpredictiveمتوسط
201Libraryxxxxxxxx.xxxpredictiveمتوسط
202Libraryxxxxxxxx.xxxpredictiveمتوسط
203Libraryxxxxxx.xxxpredictiveمتوسط
204Argument$xxxxxxxpredictiveمتوسط
205Argument$x_xxxxxx[xxxxxxxx]predictiveعالي
206Argumentxxxxxxxxxxxxpredictiveمتوسط
207Argumentxxxxxxpredictiveواطئ
208Argumentxxxxx_xxxpredictiveمتوسط
209Argumentxxxxxpredictiveواطئ
210Argumentxxxxxxxxpredictiveمتوسط
211Argumentxxxxxpredictiveواطئ
212Argumentxxxxxx_xxxxpredictiveمتوسط
213Argumentxxxxxxxxxpredictiveمتوسط
214Argumentxxxxpredictiveواطئ
215Argumentxxxxxxxxpredictiveمتوسط
216Argumentxxxxpredictiveواطئ
217Argumentxxxxxpredictiveواطئ
218Argumentxxxxxxpredictiveواطئ
219Argumentxxxpredictiveواطئ
220Argumentxxxxxpredictiveواطئ
221Argumentxxx_xxpredictiveواطئ
222Argumentxxxx_xxpredictiveواطئ
223Argumentxxxxxxxpredictiveواطئ
224Argumentxxxxxxpredictiveواطئ
225Argumentxxxxxx/xxxxxxxpredictiveعالي
226Argumentxxxxxx[xxxxxx_xxxx]predictiveعالي
227Argumentxxxxxxxpredictiveواطئ
228Argumentxxxxxxxxxxpredictiveمتوسط
229Argumentxxxxxx_xxpredictiveمتوسط
230Argumentxxxxxxxxxxxxxxxxpredictiveعالي
231Argumentxxxx_xxxpredictiveمتوسط
232Argumentxxxxxxxxxxxpredictiveمتوسط
233Argumentxxxx xx xxxxxxxpredictiveعالي
234Argumentxxxxxxxxpredictiveمتوسط
235Argumentxxx_xxxxpredictiveمتوسط
236Argumentxxx_xxxxpredictiveمتوسط
237Argumentxxxxxxxpredictiveواطئ
238Argumentxxxxxpredictiveواطئ
239Argumentxxx[xxxxxxx]predictiveمتوسط
240Argumentxxxxxxxpredictiveواطئ
241Argumentxxxxxpredictiveواطئ
242Argumentxxxxx_xxpredictiveمتوسط
243Argumentxxxxpredictiveواطئ
244Argumentxxxxxxxxxxpredictiveمتوسط
245Argumentxxx_xxxxx_xxpredictiveمتوسط
246Argumentxxxxxpredictiveواطئ
247Argumentxxxxxxxxx/xx/xxxxxxxxpredictiveعالي
248Argumentxxxx=xxxxxxpredictiveمتوسط
249Argumentxxxxxxpredictiveواطئ
250Argumentx_xxxxxxxxpredictiveمتوسط
251Argumentxxx-xxx-xxxxpredictiveمتوسط
252Argumentxxxxpredictiveواطئ
253Argumentxxx_xxxxxxxxxpredictiveعالي
254Argumentxxx_xxxxxxpredictiveمتوسط
255Argumentxxpredictiveواطئ
256Argumentxxxxx_xxxx/xxxxxx/xxxxxpredictiveعالي
257Argumentxxxxxpredictiveواطئ
258Argumentxxxxxxpredictiveواطئ
259Argumentxxxx_xxpredictiveواطئ
260Argumentxx_xxxxxpredictiveمتوسط
261Argumentxxxpredictiveواطئ
262Argumentxxxxxxxpredictiveواطئ
263Argumentxxxxxxxxpredictiveمتوسط
264Argumentxxxxxxxxxxxxxxpredictiveعالي
265Argumentxxxxxxxxxxpredictiveمتوسط
266Argumentxxxxxxxxxxxx_xxxxxxpredictiveعالي
267Argumentxxxxxxxxxpredictiveمتوسط
268Argumentxxxpredictiveواطئ
269Argumentxxxxxpredictiveواطئ
270Argumentxxxxxxpredictiveواطئ
271Argumentxxxxxxxxpredictiveمتوسط
272Argumentxxxxxxxxxxxpredictiveمتوسط
273Argumentxxxpredictiveواطئ
274Argumentxxxxxxxxxxxxxxxxxxxxxxxpredictiveعالي
275Argumentx-xxxpredictiveواطئ
276Argumentxxxxpredictiveواطئ
277Argumentxxxx/xxxxxxxxxx xxxxx/xxxxxpredictiveعالي
278Argumentxxxpredictiveواطئ
279Argumentxxxxx xxxxxxpredictiveمتوسط
280Argumentxxxxxxxxxpredictiveمتوسط
281Argumentxxxxxxxxxxxxxxxxpredictiveعالي
282Argumentxxpredictiveواطئ
283Argumentxxxxpredictiveواطئ
284Argumentxxxxpredictiveواطئ
285Argumentxxxx_xxxx_xxxxxxxpredictiveعالي
286Argumentxxxxxpredictiveواطئ
287Argumentxxxxxxxxpredictiveمتوسط
288Argumentxxxxpredictiveواطئ
289Argumentxxxx_xxpredictiveواطئ
290Argumentxxxxxxxxxpredictiveمتوسط
291Argumentxxxxx_xxxx_xxxxpredictiveعالي
292Argumentxxxx_xxpredictiveواطئ
293Argumentxxxxxxxxpredictiveمتوسط
294Argumentxxxxxpredictiveواطئ
295Argumentxxxxxxxxpredictiveمتوسط
296Argumentxxxxxxxpredictiveواطئ
297Argumentxxxxxxpredictiveواطئ
298Argumentxxxxxpredictiveواطئ
299Argumentxxxxxx/xxxxxpredictiveمتوسط
300Argumentxxxxxxpredictiveواطئ
301Argumentxxxxxxx_xxxxxpredictiveعالي
302Argumentxxxxxxxpredictiveواطئ
303Argumentxxxxxxx_xxxxpredictiveمتوسط
304Argumentxxxxxxxpredictiveواطئ
305Argumentxxxxxxxxxpredictiveمتوسط
306Argumentxxxx/xxxxxx/xxxxxxx/xxxxxxxxxxpredictiveعالي
307Argumentxxxpredictiveواطئ
308Argumentxxxxxxx[]predictiveمتوسط
309Argumentxxxxxxxxxxxxpredictiveمتوسط
310Argumentxxxpredictiveواطئ
311Argumentxx_xxxxpredictiveواطئ
312Argumentxxxxxxxxpredictiveمتوسط
313Argumentxxxxxxxxxxxpredictiveمتوسط
314Argumentxxxpredictiveواطئ
315Argumentxxxxpredictiveواطئ
316Argumentxxxxxxxxpredictiveمتوسط
317Argumentxxxxxxxx/xxxxpredictiveعالي
318Argumentxxxxpredictiveواطئ
319Argumentxxxxpredictiveواطئ
320Argumentxxxxpredictiveواطئ
321Argumentxxxxxpredictiveواطئ
322Argumentxxxpredictiveواطئ
323Argumentxxpredictiveواطئ
324Input Value.%xx.../.%xx.../predictiveعالي
325Input Value../predictiveواطئ
326Input Value../..predictiveواطئ
327Input Value/xx *predictiveواطئ
328Input Valuex\"><xxxxxx>xxxxx(x)</xxxxxx>predictiveعالي
329Input Value<xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>predictiveعالي
330Input Valuex' xxxxx xxxxx(x) xxx 'xxxx'='xxxxpredictiveعالي
331Input Valuexxxxxxxx.+xxxpredictiveعالي
332Input Value…/.predictiveواطئ
333Network Portxxx xxxxxx xxxxpredictiveعالي

المصادر (46)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

التالي ▸نظرة عامة◂ السابق

Do you know our Splunk app?

Download it now for free!