Moon تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

اللغة

en	918
de	40
fr	26
es	10
pl	4

البلد

de	40
fr	24
gb	20
es	10
pl	4

الفاعلين

Moon	4
Carbanak	1
Confucius	1
Cerber	1
LokiBot	1

الاهتمام

النوع

Not Defined	240
Operating System	76
Smartphone Operating System	30
Router Operating System	30
Business Process Management Software	26

المجهز

Not Defined	126
IBM	62
Microsoft	42
Oracle	26
Linux	24

منتج

Linux Kernel	24
Juniper Junos	24
Microsoft Windows	22
Google Android	14
Apple iOS	12

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	Microsoft IIS سكربتات مشتركة	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.02	0.00548	CVE-2017-0055
2	Microsoft IIS IP/Domain Restriction تجاوز الصلاحيات	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.12	0.00817	CVE-2014-4078
3	IBM Cognos Disclosure Management EdrawSoft ActiveX Component تجاوز الصلاحيات	10.0	8.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00	0.00452	CVE-2013-0501
4	VMware vSphere Client Certificate تشفير ضعيف	4.8	4.2	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	0.00059	CVE-2014-1210
5	Cisco IOS Service Module تجاوز الصلاحيات	7.8	7.0	$25k-$100k	جاري الحساب	Proof-of-Concept	Official Fix	0.00	0.00042	CVE-2013-5522
6	Sun Solaris tcsh Remote Code Execution	8.8	8.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.00122	CVE-2003-1024
7	IBM Cognos TM1 API الحرمان من الخدمة	5.3	4.6	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	0.00228	CVE-2013-0484
8	IBM AIX TLS تجاوز الصلاحيات	3.7	3.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	0.00368	CVE-2016-0266
9	Automatedsolutions Modbus/TCP Master OPC Server تلف الذاكرة	10.0	9.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.68790	CVE-2010-4709
10	Microsoft MS-DOS/Windows Carbon Copy 32 الكشف عن المعلومات	3.3	3.2	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.02	0.00000
11	IBM Tivoli Monitoring Express Enterprise Portal kde.dll تلف الذاكرة	10.0	9.0	$25k-$100k	جاري الحساب	Proof-of-Concept	Official Fix	0.00	0.90916	CVE-2007-2137
12	Cisco Call Manager سكربتات مشتركة	4.3	3.9	$5k-$25k	جاري الحساب	Proof-of-Concept	Official Fix	0.00	0.00257	CVE-2007-4633
13	Asterisk PBX res_http_websocket.so الحرمان من الخدمة	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.61746	CVE-2018-17281
14	Red Hat Enterprise Linux Desktop 389 Directory Server Password الكشف عن المعلومات	7.5	7.3	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.00647	CVE-2016-5405
15	IBM AIX rmsock Kernel الكشف عن المعلومات	4.2	4.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00055	CVE-2018-1655
16	Citrix Receiver Desktop Lock Screen Lock تجاوز الصلاحيات	6.8	6.6	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.00	0.00419	CVE-2016-9111
17	IBM Cognos TM1 admin تجاوز الصلاحيات	4.3	4.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.00112	CVE-2016-0381
18	Juniper Junos srxpfe الحرمان من الخدمة	6.8	6.7	$5k-$25k	جاري الحساب	Not Defined	Official Fix	0.00	0.00112	CVE-2019-0052
19	Microsoft IIS FTP Server تلف الذاكرة	7.5	7.2	$25k-$100k	$0-$5k	High	Official Fix	0.07	0.96872	CVE-2010-3972
20	Microsoft Internet Explorer تلف الذاكرة	6.9	6.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.05	0.09181	CVE-2014-8985

IOC - Indicator of Compromise (20)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	46.148.18.154	goodmail.pro	Moon	12/02/2022	verified	عالي
2	69.197.128.34	mail1.mvlashstore.top	Moon	12/02/2022	verified	عالي
3	78.128.92.137		Moon	12/02/2022	verified	عالي
4	82.68.206.125	82-68-206-125.dsl.in-addr.zen.co.uk	Moon	12/02/2022	verified	عالي
5	XX.XXX.XXX.XX		Xxxx	12/02/2022	verified	عالي
6	XX.XXX.XXX.XXX		Xxxx	12/02/2022	verified	عالي
7	XX.XXX.XXX.XXX		Xxxx	12/02/2022	verified	عالي
8	XXX.X.XX.XX	xxxx-x-x.xxxx.xxx	Xxxx	12/02/2022	verified	عالي
9	XXX.XXX.XXX.XXX	xxxxxxxxx.xx-xxx-xxx-xxx.xx	Xxxx	12/02/2022	verified	عالي
10	XXX.XXX.XXX.XX	xxxxxxxx.xxxxxxxxxx.xxx	Xxxx	12/02/2022	verified	عالي
11	XXX.XXX.XXX.XX		Xxxx	12/02/2022	verified	عالي
12	XXX.XXX.XXX.XX	xxxxx.xxxxxxxxxxx.xxx	Xxxx	12/02/2022	verified	عالي
13	XXX.XXX.XXX.XX	xxxxxxxxx.xx	Xxxx	12/02/2022	verified	عالي
14	XXX.XXX.XX.XXX	xxxxxxxx.xxxxxx.xxx.xx	Xxxx	12/02/2022	verified	عالي
15	XXX.XX.X.XX		Xxxx	12/02/2022	verified	عالي
16	XXX.XX.XX.XXX		Xxxx	12/02/2022	verified	عالي
17	XXX.XX.XXX.X		Xxxx	12/02/2022	verified	عالي
18	XXX.XX.XXX.XXX	xxxxxxxxxxxxxxx.xxx	Xxxx	12/02/2022	verified	عالي
19	XXX.XXX.XX.XX		Xxxx	12/02/2022	verified	عالي
20	XXX.XX.XXX.XXX	xxxx.xxxxxx.xxxxxxxxxxxxx.xx	Xxxx	12/02/2022	verified	عالي

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22	Path Traversal	predictive	عالي
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	عالي
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
4	T1059	CWE-94	Argument Injection	predictive	عالي
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	عالي
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
7	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	عالي
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
10	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
11	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	عالي
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	عالي
14	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
15	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	عالي
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
17	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي
18	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	عالي
19	TXXXX.XXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	عالي
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (196)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	/appLms/ajax.server.php	predictive	عالي
2	File	/config/pw_changeusers.html	predictive	عالي
3	File	/dev/dri/card1	predictive	عالي
4	File	/etc/cmh/cmh.conf	predictive	عالي
5	File	/etc/shadow	predictive	متوسط
6	File	/includes/plugins/mobile/scripts/login.php	predictive	عالي
7	File	/monitor/data/Upgrade/	predictive	عالي
8	File	/port_3480	predictive	متوسط
9	File	/proc/kcore/	predictive	متوسط
10	File	/Site/Troubleshooting/DiagnosticReport.asp	predictive	عالي
11	File	/systemlog.log	predictive	عالي
12	File	/tmp	predictive	واطئ
13	File	/uncpath/	predictive	متوسط
14	File	admin/src/containers/InputModalStepperProvider/index.js	predictive	عالي
15	File	admin\db\DoSql.php	predictive	عالي
16	File	admsession.php	predictive	عالي
17	File	apcupsd_status.php	predictive	عالي
18	File	AppOpsService.java	predictive	عالي
19	File	app\contacts\contact_addresses.php	predictive	عالي
20	File	app\contacts\contact_edit.php	predictive	عالي
21	File	app\messages\messages_thread.php	predictive	عالي
22	File	arch/powerpc/mm/mmu_context_book3s64.c	predictive	عالي
23	File	BaseWidgetProvider.java	predictive	عالي
24	File	xxxxxx/xxxxxxx.x	predictive	عالي
25	File	xxxxxx.x	predictive	متوسط
26	File	xxxxxxxxxxxxx.xxxxx.xxx	predictive	عالي
27	File	xxxx.xxx	predictive	متوسط
28	File	xxxxxxxxx/xxxxxxxxxx/xxxxxx	predictive	عالي
29	File	xxxxxx/xx_xxxx.xxxx	predictive	عالي
30	File	xxxxxxx.xxx	predictive	متوسط
31	File	xxxx/xxxxxxxxxxxx.xxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
32	File	xxxxxxxx.x	predictive	متوسط
33	File	xxxxxxx.xxx	predictive	متوسط
34	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
35	File	xxxx_xxxxxxx.xxx	predictive	عالي
36	File	xxx/xxxxxxx.xxx	predictive	عالي
37	File	xxxxxxx/xxx/xxx-xxxx.x	predictive	عالي
38	File	xxxxxxx/xxx/xxxxxx/xxxxxx.x	predictive	عالي
39	File	xxxxxxx/xxxxx/xx-xxxxxxx.x	predictive	عالي
40	File	xxxxxxx/xxx/xxx/xxx/xxxx_xxx.x	predictive	عالي
41	File	xxxxxxx/xxx/xxx/xxx/xxxx_xxx/xxxx_xxx_xxx.x	predictive	عالي
42	File	xxxxxxx/xxx/xxxxxxxxxx/xxxxx.x	predictive	عالي
43	File	xxxxxxx/xxx/xxxxx/xxx.x	predictive	عالي
44	File	xxxxxxx/xxx/xxxxx/xxx-xxx.x	predictive	عالي
45	File	xxxxxxx/xxx/xxxx/xxxx.x	predictive	عالي
46	File	xxxxxxx/xxx/xxxx/xxxxxx.x	predictive	عالي
47	File	xxxxxxx/xxx/xxxx/xxxxxxxxx.x	predictive	عالي
48	File	xxxxxxx/xxx/xxxx/xxxxx.x	predictive	عالي
49	File	xxxxxxxx.xxx	predictive	متوسط
50	File	xxxxxxxxxxxx.xxx	predictive	عالي
51	File	xxx_xxxxxxxx.xx	predictive	عالي
52	File	xxxx_xxxxxxxxx.x	predictive	عالي
53	File	xxxx/xxxxxxxxxx.xx	predictive	عالي
54	File	xxxxxxxx/xxxxxxx.x	predictive	عالي
55	File	xx/xxxxx/xxxxx-xxxxxx.x	predictive	عالي
56	File	xx/xxxxx/xxxxxx.x	predictive	عالي
57	File	xxxxxxxxx.xxxxxxxx.xxxxx.xxx.xxx	predictive	عالي
58	File	xxxxxxxx_xxxxxx.xx	predictive	عالي
59	File	xxx_xxxx.xx	predictive	متوسط
60	File	xxx_xxxxxx.xxx	predictive	عالي
61	File	xxxx/xxxxx/xx/xxxxx	predictive	عالي
62	File	xx/xxxxxxx/xxxxxx_xxx.x	predictive	عالي
63	File	xx/xxxx/xxx_xxxxxx.x	predictive	عالي
64	File	xx/xxx/xxx-xxxx.x	predictive	عالي
65	File	xx/xxxxxx/xxxxxx.x	predictive	عالي
66	File	xxxxxxxx-xxxxx-xxxxxxxx.x	predictive	عالي
67	File	xxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxx	predictive	عالي
68	File	xxxxx.xxx	predictive	متوسط
69	File	xxxxx.xxx?x=xxxxxx-xxxxxx	predictive	عالي
70	File	xxxxxx/xxxxxxx/xxxxx.x	predictive	عالي
71	File	xxxxxx/xxxxx.x	predictive	عالي
72	File	xxxx/xxx/x/xxx_xxxxxx.x	predictive	عالي
73	File	xxxx/xxx/x/xxx_xxxx.x	predictive	عالي
74	File	xxxxxx.x	predictive	متوسط
75	File	xxxxx.xxxx	predictive	متوسط
76	File	xxxx.xxx.xxx	predictive	متوسط
77	File	xxxx.xxx	predictive	متوسط
78	File	xxxx.xxx?x=xxxxx	predictive	عالي
79	File	xxxx.xxx?x=xxxxx	predictive	عالي
80	File	xxxx.xxx?x=xxxxx&xxxx=x	predictive	عالي
81	File	xxxxxxx.x	predictive	متوسط
82	File	xx_xxxx.x	predictive	متوسط
83	File	xxxxxx/xxxxx.xxx	predictive	عالي
84	File	xxxxxxxx.x	predictive	متوسط
85	File	xxxxxxxxx.xxx	predictive	عالي
86	File	xxxxxxx.xxx	predictive	متوسط
87	File	xxx_xx_xxx.xx	predictive	عالي
88	File	xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
89	File	xxx_xxxxxx.xxxx	predictive	عالي
90	File	xxxxx.xxx	predictive	متوسط
91	File	xxxxxxxxxxx.xxx	predictive	عالي
92	File	xxxxxxxxxxxxxx.xxx	predictive	عالي
93	File	xxxxxxxxxx.xxx	predictive	عالي
94	File	xxxxxxxxxxxxxx.xxx	predictive	عالي
95	File	xxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxx	predictive	عالي
96	File	xxxxx_xxx.xxx	predictive	عالي
97	File	xxxxxx/xxx_xxxxxxx.xxx	predictive	عالي
98	File	xxxxx.xxx	predictive	متوسط
99	File	xxxxx.xx	predictive	متوسط
100	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
101	File	xxxxx.xx	predictive	متوسط
102	File	xxx/xxx_xxx_xxxxxxxx.x	predictive	عالي
103	File	xxx_xxxx_xxxxxxxxx.xx	predictive	عالي
104	File	xxx.x	predictive	واطئ
105	File	xxxxxxxx/xxxx/xxxxxx.x	predictive	عالي
106	File	xxxxxx_xxxxxxxx.xxx	predictive	عالي
107	File	xxxxxx_xxxxxxxxx.xxx	predictive	عالي
108	File	xxxxxxxxxx.xxx	predictive	عالي
109	File	xxxxx/xxxx/xxx_xxxxxx.x	predictive	عالي
110	File	xxxxxx.xxx	predictive	متوسط
111	File	xxxxxxxxxx/xxxxxx_xxxxxxxx_xxxxxxx_xxxxxxx_xxxxxxx_xxxxxxxx.xxx	predictive	عالي
112	File	xxxxxxxxxxxxxx.xxxxxxx.xxxxxxx.xxx	predictive	عالي
113	File	xxxxxx.xxx	predictive	متوسط
114	File	xxxx.x	predictive	واطئ
115	File	xxxxxxxxx.x	predictive	متوسط
116	File	xxxxxxx.xxx	predictive	متوسط
117	File	xx/xxxxxx/xxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
118	File	xxx_xxxxxx.x	predictive	متوسط
119	File	xxxxxxxxxx_xxxxxxxxx.xxx	predictive	عالي
120	File	xxx_xxxxxxxxx.x	predictive	عالي
121	File	xxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
122	File	xxx/xxxxxxx/xxxx/xxxx/xxxx.xxx	predictive	عالي
123	File	xxxx/xxxx_xxxxxxxxx.x	predictive	عالي
124	Library	xxxxxx.xxx	predictive	متوسط
125	Library	xxxxxx.xxx	predictive	متوسط
126	Library	xxxxxxxxx.xxx	predictive	عالي
127	Library	xxx.xxx	predictive	واطئ
128	Library	xxxxxx.xxx	predictive	متوسط
129	Library	xxxxxxx.xxx	predictive	متوسط
130	Library	xxxxxxxxxxxx.xxxxxx.xxx	predictive	عالي
131	Library	xxxxxxx.xxx	predictive	متوسط
132	Library	xxxxxx.xxx	predictive	متوسط
133	Argument	$xxxxx	predictive	واطئ
134	Argument	$xxxxxx.xxxxxxxx	predictive	عالي
135	Argument	xxxxxx-xxxxxxxx	predictive	عالي
136	Argument	xxxxxxxxxxx	predictive	متوسط
137	Argument	xxx	predictive	واطئ
138	Argument	xxxx	predictive	واطئ
139	Argument	xxxxxxx_xxxx	predictive	متوسط
140	Argument	xxxxxx.xxxx[]/xxxxxx.xxxxx[]	predictive	عالي
141	Argument	xxxxxx	predictive	واطئ
142	Argument	xxxxxxxxx/xxx-xxxxxx	predictive	عالي
143	Argument	xxxxx	predictive	واطئ
144	Argument	xxxxxxxx	predictive	متوسط
145	Argument	xxxxxxxx	predictive	متوسط
146	Argument	xxxxxx_xxx	predictive	متوسط
147	Argument	xxxxxx_xxxxxx	predictive	عالي
148	Argument	xxxx_xxxxxxxx	predictive	عالي
149	Argument	xx	predictive	واطئ
150	Argument	xx_xxxxx_xxxxxxxxxx	predictive	عالي
151	Argument	xxxx	predictive	واطئ
152	Argument	xx-x	predictive	واطئ
153	Argument	xxxxx	predictive	واطئ
154	Argument	xxxxx	predictive	واطئ
155	Argument	xxxxxx	predictive	واطئ
156	Argument	x_xxxx	predictive	واطئ
157	Argument	xxxxxxxxxx	predictive	متوسط
158	Argument	xxxxxxxxx	predictive	متوسط
159	Argument	xxxxxxxxxxx	predictive	متوسط
160	Argument	x_xx_x_x	predictive	متوسط
161	Argument	xxxxx	predictive	واطئ
162	Argument	xxxxx_xxxxxx	predictive	متوسط
163	Argument	xxxxxxxx	predictive	متوسط
164	Argument	xxxxxx_xxxx	predictive	متوسط
165	Argument	xxx	predictive	واطئ
166	Argument	xxxxxxxxxxxx	predictive	متوسط
167	Argument	xxxxxx/xxxxxx/xxx	predictive	عالي
168	Argument	xxxxxxx	predictive	واطئ
169	Argument	xxxxxxx/xx/xxxxxxxxxxx/xxxx_xx	predictive	عالي
170	Argument	xxxxxxxx	predictive	متوسط
171	Argument	xxxxxx_xxxx	predictive	متوسط
172	Argument	xxx	predictive	واطئ
173	Argument	xxxx_xxxxxxxx	predictive	عالي
174	Argument	xxxxxx xxxxx xx	predictive	عالي
175	Argument	xxxxxx xxxxxxx	predictive	عالي
176	Argument	xxxxxxxxxx	predictive	متوسط
177	Argument	xxxxxxxxxxx	predictive	متوسط
178	Argument	xxxxx	predictive	واطئ
179	Argument	xxx	predictive	واطئ
180	Argument	xxx	predictive	واطئ
181	Argument	xxxx-xxxxx	predictive	متوسط
182	Argument	xxxxxxxx	predictive	متوسط
183	Input Value	..	predictive	واطئ
184	Input Value	../	predictive	واطئ
185	Input Value	/../	predictive	واطئ
186	Input Value	xxx.xxxx.%xxx.%xxx	predictive	عالي
187	Input Value	xxxxxxxx	predictive	متوسط
188	Input Value	::$xxxxx_xxxxxxxxxx	predictive	عالي
189	Input Value	{"x":(xxxxxxxx(){xxxxxxx(x)})()}	predictive	عالي
190	Pattern	\|xx\|xx\|xx\|	predictive	متوسط
191	Pattern	\|xx xx xx xx xx\|	predictive	عالي
192	Network Port	xxx xxxxx	predictive	متوسط
193	Network Port	xxxxxxxxxx xxxxxxx	predictive	عالي
194	Network Port	xxx/xxxx	predictive	متوسط
195	Network Port	xxx/xxxx	predictive	متوسط
196	Network Port	xxx xxxxxx xxxx	predictive	عالي

المصادر (3)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Interested in the pricing of exploits?

See the underground prices here!