Iran Unknown تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (376)

اللغة

en	314
es	22
fr	8
sv	6
ru	6

البلد

us	274
ru	24
es	18
pt	14
fr	8

الفاعلين

Cobalt Strike	2
SideWinder	1
SystemBC	1
TA505	1
Scar	1

الاهتمام

النوع

Not Defined	104
Content Management System	32
Operating System	26
WordPress Plugin	14
Router Operating System	12

المجهز

Not Defined	84
Microsoft	28
Apache	12
Oracle	10
Google	8

منتج

Microsoft Windows	20
WordPress	10
Apache HTTP Server	6
Oracle MySQL Server	6
Magento	4

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	TikiWiki tiki-register.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	7.88	0.01009	CVE-2006-6168
2	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	4.05	0.00000
3	AWStats Config awstats.pl سكربتات مشتركة	4.3	4.1	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.16	0.00587	CVE-2006-3681
4	Tiki Admin Password tiki-login.php توثيق ضعيف	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	4.91	0.00936	CVE-2020-15906
5	Serendipity exit.php تجاوز الصلاحيات	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.13	0.00000
6	Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track طلب تزوير مشترك	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00062	CVE-2022-47166
7	SPIP spip.php سكربتات مشتركة	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.19	0.00132	CVE-2022-28959
8	nginx تجاوز الصلاحيات	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	0.00241	CVE-2020-12440
9	Lars Ellingsen Guestserver guestbook.cgi سكربتات مشتركة	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	0.00169	CVE-2005-4222
10	SourceCodester Library Management System index.php حقن إس كيو إل	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.07	0.00114	CVE-2022-2492
11	Composer URL تجاوز الصلاحيات	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.06299	CVE-2021-29472
12	Openads adclick.php Remote Code Execution	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.46	0.01871	CVE-2007-2046
13	MGB OpenSource Guestbook email.php حقن إس كيو إل	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	1.01	0.01302	CVE-2007-0354
14	WordPress WP_Query حقن إس كيو إل	6.3	6.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	0.93536	CVE-2022-21661
15	Magento Search Module حقن إس كيو إل	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00070	CVE-2021-21024
16	ZoneMinder Language Privilege Escalation	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.38401	CVE-2022-29806
17	WordPress AdServe adclick.php حقن إس كيو إل	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.03	0.00073	CVE-2008-0507
18	SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php تجاوز الصلاحيات	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	0.00045	CVE-2024-1875
19	Google Chrome Intents Remote Code Execution	6.3	6.0	$25k-$100k	$5k-$25k	High	Official Fix	0.04	0.00404	CVE-2021-38000
20	Nordex Control 2 SCADA Wind Farm Portal Application سكربتات مشتركة	4.3	4.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	0.00277	CVE-2015-6477

حملات (1)

These are the campaigns that can be associated with the actor:

Albanian Government

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	حملات	Identified	النوع	الثقة
1	46.30.189.66		Iran Unknown	Albanian Government	09/09/2022	verified	عالي
2	51.89.181.64	ip64.ip-51-89-181.eu	Iran Unknown		21/11/2022	verified	عالي
3	66.219.22.235	core96.hostingmadeeasy.com	Iran Unknown		12/10/2022	verified	عالي
4	83.171.238.62	558.cluster-nbg1.de	Iran Unknown		12/10/2022	verified	عالي
5	XX.XXX.XXX.XXX		Xxxx Xxxxxxx		21/11/2021	verified	عالي
6	XXX.XX.X.XX	xxxxxx.xx.x.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
7	XXX.XX.XXX.XXX	xxxxxxxx.xx	Xxxx Xxxxxxx		21/11/2022	verified	عالي
8	XXX.XXX.XXX.XXX	xxxx-xxxxxxx.xxxxx.xxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
9	XXX.XXX.XXX.XXX	xxxxxx.xxx.xxx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
10	XXX.XX.XXX.XX		Xxxx Xxxxxxx		21/11/2021	verified	عالي
11	XXX.XX.XXX.XX	xxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx		21/11/2021	verified	عالي
12	XXX.X.XX.XXX	xxxxxx.xxx.xx.x.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
13	XXX.XX.XXX.X		Xxxx Xxxxxxx		21/11/2022	verified	عالي
14	XXX.XX.XX.XXX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
15	XXX.XXX.XX.XXX	xxx.xxx.xx.xxx.xxxxxx.xxxxxxxx.xxx	Xxxx Xxxxxxx		12/10/2022	verified	عالي
16	XXX.XXX.XX.XXX	xxxxxxx.xxxxxxx.xx.xx	Xxxx Xxxxxxx		12/10/2022	verified	عالي
17	XXX.XX.XXX.XX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي
18	XXX.XX.XXX.XX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	عالي

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22	Path Traversal	predictive	عالي
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	عالي
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
4	T1059	CWE-94	Argument Injection	predictive	عالي
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	عالي
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
7	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	عالي
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
10	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
11	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	عالي
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
13	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
14	TXXXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	عالي
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	عالي
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	عالي
18	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي
19	TXXXX	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	عالي
20	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	عالي
21	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (173)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	//etc/RT2870STA.dat	predictive	عالي
2	File	/admin/maintenance/view_designation.php	predictive	عالي
3	File	/administration/theme.php	predictive	عالي
4	File	/api/index.php	predictive	عالي
5	File	/boafrm/formFilter	predictive	عالي
6	File	/cgi-bin/webproc	predictive	عالي
7	File	/check_availability.php	predictive	عالي
8	File	/clinic/medical_records_view.php	predictive	عالي
9	File	/coreframe/app/pay/admin/index.php	predictive	عالي
10	File	/dashboard/Cinvoice/manage_invoice	predictive	عالي
11	File	/forum/away.php	predictive	عالي
12	File	/importexport.php	predictive	عالي
13	File	/index.php	predictive	متوسط
14	File	/mobileredir/openApp.jsp	predictive	عالي
15	File	/ofrs/admin/?page=requests/manage_request	predictive	عالي
16	File	/search	predictive	واطئ
17	File	/spip.php	predictive	متوسط
18	File	/usr/www/ja/mnt_cmd.cgi	predictive	عالي
19	File	/wp-admin/admin-ajax.php	predictive	عالي
20	File	active.log	predictive	متوسط
21	File	activenews_view.asp	predictive	عالي
22	File	xxxxxxx.xxx	predictive	متوسط
23	File	xxxxx.xxx	predictive	متوسط
24	File	xxxxxxx/xxxx/xxxxxx.xxx	predictive	عالي
25	File	xxxxxxxxxxxx.xxx	predictive	عالي
26	File	xxxxxxxx.xxx	predictive	متوسط
27	File	xxx_xxxxxxx.xxx	predictive	عالي
28	File	xxxxxxxxxx.xxx	predictive	عالي
29	File	xxxx-xxxx.x	predictive	متوسط
30	File	xxxxx.xxx	predictive	متوسط
31	File	xxxx_xxxx_xx.xx	predictive	عالي
32	File	xxxxxxx.xx	predictive	متوسط
33	File	xxxxx/xxxx-xxxx.x	predictive	عالي
34	File	xxxxxxxxxxx.xxx	predictive	عالي
35	File	xxx.xxx	predictive	واطئ
36	File	xxxxxxx.xxx	predictive	متوسط
37	File	xxx-xxx/xxx_xxx_xxxxxx.xxx	predictive	عالي
38	File	xxx-xxx/xxxxx/xxxxx/xxxxx/xxx_xxxx/xxxx_xxxx/	predictive	عالي
39	File	xxxxx.xxx	predictive	متوسط
40	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	عالي
41	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	عالي
42	File	xxxxxxxxx/xxx/xxxxx/xxxxx/xxxxx.xxx	predictive	عالي
43	File	xxxxx.xxxx	predictive	متوسط
44	File	xxxxxxx.xxx	predictive	متوسط
45	File	xxxxxx.xxx	predictive	متوسط
46	File	xxxxx.xxx	predictive	متوسط
47	File	xx/xxxxx/xxxxxx_xxxxx.xxx	predictive	عالي
48	File	xxxx.xxx	predictive	متوسط
49	File	xxxxxxx.xxx	predictive	متوسط
50	File	xxx/xxx-xxxxx.x	predictive	عالي
51	File	xxxxxxx.xxx	predictive	متوسط
52	File	xxxx/xxxx	predictive	متوسط
53	File	xxx_xxxx.xxx	predictive	متوسط
54	File	xxxx.xxx	predictive	متوسط
55	File	xxxxxxxxx.xxx	predictive	عالي
56	File	xx/xxx/xxxx_xxxxx.x	predictive	عالي
57	File	xxxxxx.xxx	predictive	متوسط
58	File	xxx/xxxxxx.xxx	predictive	عالي
59	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	عالي
60	File	xxxxx.xxxx	predictive	متوسط
61	File	xxxxx.xxx	predictive	متوسط
62	File	xxxxxx.xxx	predictive	متوسط
63	File	xxxx_xxxx.xxx	predictive	عالي
64	File	xxxxxx/xxxxxx.x	predictive	عالي
65	File	xxxxxxx.xxx	predictive	متوسط
66	File	xxxxx_xx.xxxx	predictive	عالي
67	File	xxxxxx_xxxx.xxx	predictive	عالي
68	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	عالي
69	File	xxxx.xxx	predictive	متوسط
70	File	xxxx_xxxx.xxx	predictive	عالي
71	File	xxx_xxxx.xxx	predictive	متوسط
72	File	xxxxxx.x	predictive	متوسط
73	File	xxxxxxxxx.xxx.xxx	predictive	عالي
74	File	xxxxxxx_xxxxxx_xxx.xxxx	predictive	عالي
75	File	xxxxxxxxxxxxx.xxx	predictive	عالي
76	File	xxxxx/xxxxxxx.xxx	predictive	عالي
77	File	xxxxxxxx.xxx	predictive	متوسط
78	File	xxxxxxxx.xxx	predictive	متوسط
79	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	عالي
80	File	xxxxxxxxxxxxxxx.xxx	predictive	عالي
81	File	xxxxxx.xxx	predictive	متوسط
82	File	xxxxxxxxxxxxx.xxx	predictive	عالي
83	File	xxxxxx_xxxx.xxx	predictive	عالي
84	File	xxxxx.xxxx	predictive	متوسط
85	File	xxxx-xxxxxx.x	predictive	عالي
86	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	عالي
87	File	xxxxxxxxxxx.xxx	predictive	عالي
88	File	xxxx.xxx	predictive	متوسط
89	File	xxxxxxx-xxxxxxx.xxx	predictive	عالي
90	File	xxxx.x	predictive	واطئ
91	File	xxxx-xxxxxxxx.xxx	predictive	عالي
92	File	xxxx-xxxxx.xxx	predictive	عالي
93	File	xxxx-xxxxxxxx.xxx	predictive	عالي
94	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	عالي
95	File	xxx_xxxxxx.xxx	predictive	عالي
96	File	xxxxxxxx.xxx	predictive	متوسط
97	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	عالي
98	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	عالي
99	File	xx-xxxxxxxx/xx/xxxxxxxxxxxx	predictive	عالي
100	File	xx-xxxxxxxx/xxxxxxxx/xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	عالي
101	File	xxxx.xxx	predictive	متوسط
102	File	xxxxxxxxxxx.xxx	predictive	عالي
103	File	\xxxxx\xxxxx\xxxxxxxxx.xxx	predictive	عالي
104	File	~/xxxxxxxx/xxxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	عالي
105	Argument	xxxxxx/xxxxxxxx	predictive	عالي
106	Argument	xxxx	predictive	واطئ
107	Argument	xxxxx	predictive	واطئ
108	Argument	xxxxxxxxx	predictive	متوسط
109	Argument	xxxxxxxxxxxxxx	predictive	عالي
110	Argument	xxxxxxxx	predictive	متوسط
111	Argument	xxx	predictive	واطئ
112	Argument	xxxxxxxxxx	predictive	متوسط
113	Argument	xxxxx	predictive	واطئ
114	Argument	xxx_xx	predictive	واطئ
115	Argument	xxxxxxxxxx	predictive	متوسط
116	Argument	xxx	predictive	واطئ
117	Argument	xxxx_xx	predictive	واطئ
118	Argument	xxxxx/xxx_xxxxx/xxxxx/xxxxxxxxxxx	predictive	عالي
119	Argument	xxxxxx	predictive	واطئ
120	Argument	xxxxxxxxxxxx/xxxxxxxxxxx	predictive	عالي
121	Argument	xxxxxxxxx[x]	predictive	متوسط
122	Argument	xxxxxxxxxxx/xxxx/xxxxxxx	predictive	عالي
123	Argument	xxxx	predictive	واطئ
124	Argument	xxxxxxx	predictive	واطئ
125	Argument	xxxx	predictive	واطئ
126	Argument	xxxx	predictive	واطئ
127	Argument	xxxxxx[xxxxxxx]	predictive	عالي
128	Argument	xxxxxxxxxxx	predictive	متوسط
129	Argument	xxxxxxx	predictive	واطئ
130	Argument	xxxx	predictive	واطئ
131	Argument	xx	predictive	واطئ
132	Argument	xxxxxxxxx	predictive	متوسط
133	Argument	xx_xxxxxxxx	predictive	متوسط
134	Argument	xx_xxxxx	predictive	متوسط
135	Argument	xx_xxxx	predictive	واطئ
136	Argument	xxxxxxxxxx	predictive	متوسط
137	Argument	xxxxx[xxxxx][xx]	predictive	عالي
138	Argument	xxxxxxxx	predictive	متوسط
139	Argument	xxxxxxxx	predictive	متوسط
140	Argument	xxxxxxxx	predictive	متوسط
141	Argument	xxxx	predictive	واطئ
142	Argument	xxxxxx	predictive	واطئ
143	Argument	xxxxxxxxxx	predictive	متوسط
144	Argument	xxxxxx xxxxx	predictive	متوسط
145	Argument	xxxxxx	predictive	واطئ
146	Argument	xxxx_xx	predictive	واطئ
147	Argument	xxxxxxxxxxx	predictive	متوسط
148	Argument	xxxx	predictive	واطئ
149	Argument	xxxxxxxx	predictive	متوسط
150	Argument	xxxx_xxx	predictive	متوسط
151	Argument	xxxxxxxxx	predictive	متوسط
152	Argument	xxxxxxx_xx	predictive	متوسط
153	Argument	xxxxxxxx	predictive	متوسط
154	Argument	xxxxxxxxxxx/xxxx	predictive	عالي
155	Argument	xxxxxxxx_xxx/xxxxxx_xx	predictive	عالي
156	Argument	xxxxxxxx	predictive	متوسط
157	Argument	xxxxxx	predictive	واطئ
158	Argument	xxxxxxxxxxxx	predictive	متوسط
159	Argument	xxxxxxx	predictive	واطئ
160	Argument	xxxxx_xxx	predictive	متوسط
161	Argument	xxxxx	predictive	واطئ
162	Argument	xxxxx	predictive	واطئ
163	Argument	xxxxx	predictive	واطئ
164	Argument	xxxxxxxxxxxxxxx	predictive	عالي
165	Argument	xxxxxxxxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxx	predictive	عالي
166	Argument	xxx	predictive	واطئ
167	Argument	xxxxxxxx/xxxx	predictive	عالي
168	Argument	xx_xxxx_xxxxxx_xxxxxxxxxx	predictive	عالي
169	Input Value	"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	عالي
170	Input Value	<xxx xxxxxx=xxxxx(xxxx)>	predictive	عالي
171	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxx	predictive	عالي
172	Network Port	xxx/xxxxx	predictive	متوسط
173	Network Port	xxx/xxx, xxx/xxx, xxx/xxxx, xxx/xxxx	predictive	عالي

المصادر (5)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Interested in the pricing of exploits?

See the underground prices here!