Bublik تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (7)

اللغة

en	8

البلد

us	4
ne	4

الفاعلين

Bublik	1

الاهتمام

النوع

Groupware Software	2
Operating System	2
Not Defined	2

المجهز

Synacor	2
Microsoft	2
Saifor	2

منتج

Synacor Zimbra Collaboration Suite	2
Microsoft Windows	2
Saifor CVMS HUB	2

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	EPSS	CTI	CVE
1	Saifor CVMS HUB HTTP Parameter secciones.xhtml حقن إس كيو إل	7.5	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00087	0.00	CVE-2018-6792
2	Synacor Zimbra Collaboration Suite Header ProxyServlet.java تجاوز الصلاحيات	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00732	0.00	CVE-2021-35209
3	Synacor Zimbra Collaboration Suite Calendar Invite ZmMailMsgView.js سكربتات مشتركة	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00155	0.03	CVE-2021-35208
4	Dropbear svr-auth.c recv_msg_userauth_request User الكشف عن المعلومات	5.3	5.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00302	0.05	CVE-2018-15599
5	ProFTPD mod_sftp/mod_sftp_pam kbdint.c resp_count الحرمان من الخدمة	7.5	7.1	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.01980	0.05	CVE-2013-4359
6	Microsoft Windows Token Security Feature تجاوز الصلاحيات	7.1	6.8	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00046	0.00	CVE-2020-0981

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	66.23.234.229	host.double-six.net	Bublik	28/06/2023	verified	عالي
2	66.128.53.179		Bublik	22/07/2021	verified	عالي
3	XX.XX.XX.XXX	xxxx.xxxxxx.xxx	Xxxxxx	28/06/2023	verified	عالي
4	XXX.XX.XX.XXX		Xxxxxx	22/07/2021	verified	عالي
5	XXX.XXX.XX.XX		Xxxxxx	05/05/2022	verified	عالي
6	XXX.XXX.X.XX	xxxx-xxxx-xxxx-xxx-xx-xxxx.xxxxxxxx.xxx	Xxxxxx	22/07/2021	verified	عالي
7	XXX.XXX.XXX.XX		Xxxxxx	28/04/2022	verified	عالي
8	XXX.XX.XXX.XX	xxxxx.xx	Xxxxxx	22/07/2021	verified	عالي
9	XXX.XX.XXX.XXX	x-xxxx.x-xxxxxx.xxx	Xxxxxx	05/05/2022	verified	عالي

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الفئة	الثغرات	متجه الوصول	النوع	الثقة
1	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
2	TXXXX.XXX	CAPEC-209	CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	عالي
3	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
4	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
5	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (6)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	/cvms-hub/privado/seccionesmib/secciones.xhtml	predictive	عالي
2	File	kbdint.c	predictive	متوسط
3	File	xxxxxxxxxxxx.xxxx	predictive	عالي
4	File	xxx-xxxx.x	predictive	متوسط
5	File	xxxxxxxxxxxxx.xx	predictive	عالي
6	Argument	x-xxxx	predictive	واطئ

المصادر (6)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!