OnePercent تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (187)

اللغة

en	162
sv	14
de	8
it	2
es	2

البلد

us	144
sv	14
ru	8
ir	8
it	4

الفاعلين

OnePercent	6
RecordBreaker	1
Stantinko	1
Baldr	1
Dridex	1

الاهتمام

النوع

Not Defined	36
Content Management System	14
Operating System	12
Programming Language Software	6
Programming Tool Software	4

المجهز

Not Defined	44
Microsoft	8
Google	4
Cisco	4
F-Secure	2

منتج

Microsoft Windows	6
PHP	6
SWFTools	4
Cisco ASA	4
Adult Script Pro	2

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash الكشف عن المعلومات	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02	0.02016	CVE-2007-1192
2	Tiki TikiWiki tiki-editpage.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.05	0.01194	CVE-2004-1386
3	WPS Hide Login Plugin Secret Login Page options.php تجاوز الصلاحيات	6.9	6.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	0.02933	CVE-2021-24917
4	Apple Mac OS X TCP/IP Stack الحرمان من الخدمة	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.03667	CVE-2004-0171
5	MGB OpenSource Guestbook email.php حقن إس كيو إل	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.93	0.01302	CVE-2007-0354
6	Zipato Zipabox Smart Home Controller الكشف عن المعلومات	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00423	CVE-2018-15125
7	Samsung SCX-6x55X Syncthru Web Service الكشف عن المعلومات	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	0.00145	CVE-2021-42913
8	DZCP deV!L`z Clanportal config.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.63	0.00943	CVE-2010-0966
9	OpenSSH Authentication Username الكشف عن المعلومات	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.00	0.10737	CVE-2016-6210
10	Microsoft IIS سكربتات مشتركة	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.02	0.00548	CVE-2017-0055
11	Microsoft IIS IP/Domain Restriction تجاوز الصلاحيات	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.12	0.00817	CVE-2014-4078
12	PHP phpinfo سكربتات مشتركة	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.07	0.02101	CVE-2007-1287
13	PHP phpinfo سكربتات مشتركة	6.3	5.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.05	0.08985	CVE-2006-0996
14	Matt Martz & Andy Stratton Page Restrict Plugin طلب تزوير مشترك	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.00043	CVE-2024-24702
15	nginx تجاوز الصلاحيات	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	0.00241	CVE-2020-12440
16	Google Android Linkify.java addLinks تجاوز الصلاحيات	7.5	7.4	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	0.00098	CVE-2019-2003
17	Adobe Magento Mage-Messages Cookie سكربتات مشتركة	2.4	2.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.00187	CVE-2021-28556
18	GitHub Enterprise Server GraphQL API تجاوز الصلاحيات	8.0	7.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.00161	CVE-2022-23739
19	Mitsubishi Electric Factory Automation اجتياز الدليل	7.3	7.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.01117	CVE-2020-14523
20	TP-Link WR886N httpd Service PingIframeRpm.htm تلف الذاكرة	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00069	CVE-2021-44864

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	31.187.64.199	sophia.onebusinessdesign.info	OnePercent	26/08/2021	verified	عالي
2	80.82.67.221		OnePercent	26/08/2021	verified	عالي
3	XXX.XXX.XXX.XX		Xxxxxxxxxx	26/08/2021	verified	عالي
4	XXX.XXX.XXX.XXX		Xxxxxxxxxx	26/08/2021	verified	عالي
5	XXX.XXX.XXX.XXX		Xxxxxxxxxx	26/08/2021	verified	عالي
6	XXX.XX.XXX.XX		Xxxxxxxxxx	26/08/2021	verified	عالي
7	XXX.XXX.XXX.XXX		Xxxxxxxxxx	26/08/2021	verified	عالي

TTP - Tactics, Techniques, Procedures (10)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22	Path Traversal	predictive	عالي
2	T1059	CWE-94	Argument Injection	predictive	عالي
3	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	عالي
4	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
5	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
6	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
7	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
8	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
9	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
10	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (69)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	/+CSCOE+/logon.html	predictive	عالي
2	File	/download	predictive	متوسط
3	File	/forum/away.php	predictive	عالي
4	File	/port_3480/data_request	predictive	عالي
5	File	/uncpath/	predictive	متوسط
6	File	/userRpm/PingIframeRpm.htm	predictive	عالي
7	File	/wp-admin/options.php	predictive	عالي
8	File	adclick.php	predictive	متوسط
9	File	xxx_xxxxxxx.xxx	predictive	عالي
10	File	xxxxx/xxxxx.xxx?x=xx_xxx&x=xxxxx&x=xxxxx&x=xxxxx_xxxx_xxxxxxx&xxxxx=xxxx&xxxxx=x	predictive	عالي
11	File	xxx.xxx	predictive	واطئ
12	File	xxxxxxxxxxxxxxxxx.xxx	predictive	عالي
13	File	xxxx-xxxx.x	predictive	متوسط
14	File	xxxxxxxxxxx.xxx	predictive	عالي
15	File	xxx.xxx	predictive	واطئ
16	File	xxxxxxxxx-xxxxxxx.xxx	predictive	عالي
17	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	عالي
18	File	xxxxx.x	predictive	واطئ
19	File	xxxxxxx/xxx/xxx/xxx_xxxx.x	predictive	عالي
20	File	xxxxx.xxx	predictive	متوسط
21	File	xxxx.xxx	predictive	متوسط
22	File	xxx/xxxxxx.xxx	predictive	عالي
23	File	xxxxxxx/xxxxxx/xxxxxxx/xxxxxx/xxx.xxx	predictive	عالي
24	File	xxxxxxx.xxxx	predictive	متوسط
25	File	xxxxx.xxx	predictive	متوسط
26	File	xxxx	predictive	واطئ
27	File	xxxx.xxx	predictive	متوسط
28	File	xxxxxxx.xxx	predictive	متوسط
29	File	xxxxxxx_xxxxxx.xxx	predictive	عالي
30	File	xxxxxxxx.xx	predictive	متوسط
31	File	xxxxxxxx_xxxxxx.xxx	predictive	عالي
32	File	xxxxx.xxx	predictive	متوسط
33	File	xxxxxx.xxx	predictive	متوسط
34	File	xxxxxxxxxxxx.xxx	predictive	عالي
35	File	xxxx-xxxxxxxx.xxx	predictive	عالي
36	File	xxxxxx.xxx	predictive	متوسط
37	File	xxxxxx.xxx	predictive	متوسط
38	File	xxxxxx.xxx	predictive	متوسط
39	File	xxxxx/xxxxxxxx	predictive	عالي
40	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	عالي
41	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxxx.xxx	predictive	عالي
42	File	xx-xxxxxxxxx.xxx	predictive	عالي
43	Library	xxxxxxxxxxxx.xxx	predictive	عالي
44	Library	xxx/xxx.x	predictive	متوسط
45	Library	xxx/xxx.x	predictive	متوسط
46	Library	xxxxxxx.xxx	predictive	متوسط
47	Argument	xxxxx_xxxxxxxx	predictive	عالي
48	Argument	xxxxxxxx	predictive	متوسط
49	Argument	xxxxx	predictive	واطئ
50	Argument	xxx	predictive	واطئ
51	Argument	xxxxxxxx	predictive	متوسط
52	Argument	xxxxxxxxxxxxxxxxxxxxx	predictive	عالي
53	Argument	xxxx	predictive	واطئ
54	Argument	xxxxxxxxx xxxx	predictive	عالي
55	Argument	xxxxxx	predictive	واطئ
56	Argument	xxxx	predictive	واطئ
57	Argument	xxxxxxxxx	predictive	متوسط
58	Argument	xx	predictive	واطئ
59	Argument	xxxx	predictive	واطئ
60	Argument	xxxxxxx	predictive	واطئ
61	Argument	xxxxxxxx	predictive	متوسط
62	Argument	xxxx_xxxx	predictive	متوسط
63	Argument	xxx	predictive	واطئ
64	Argument	xxxxxx_xxxx	predictive	متوسط
65	Argument	xx_xx	predictive	واطئ
66	Argument	xxxxx_xx	predictive	متوسط
67	Argument	xxxxxxxx/xxxx	predictive	عالي
68	Argument	xxxxx	predictive	واطئ
69	Network Port	xxx/xxx (xxx)	predictive	عالي

المصادر (2)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Want to stay up to date on a daily basis?

Enable the mail alert feature now!