Rakos تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (396)

اللغة

en	308
ru	38
zh	12
ja	8
es	6

البلد

us	208
ru	84
pl	16
cn	16
me	6

الفاعلين

Rakos	9
Locky	6
Cobalt Strike	6
TrickBot	4
RedLine Stealer	4

الاهتمام

النوع

Not Defined	152
Content Management System	24
Programming Language Software	14
Router Operating System	10
WordPress Plugin	10

المجهز

Not Defined	120
Cisco	10
Apache	10
HP	8
Siemens	6

منتج

WordPress	10
phpMyAdmin	8
Devilz Clanportal	6
Linux Kernel	4
unrar-free	4

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash الكشف عن المعلومات	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02	0.02016	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.63	0.00943	CVE-2010-0966
3	Zyxel NAS326/NAS542 Web Server تجاوز الصلاحيات	9.8	9.8	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.03	0.00068	CVE-2023-4473
4	nginx تجاوز الصلاحيات	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	0.00241	CVE-2020-12440
5	Microsoft IIS سكربتات مشتركة	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.02	0.00548	CVE-2017-0055
6	DZCP deV!L`z Clanportal browser.php الكشف عن المعلومات	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	1.31	0.02733	CVE-2007-1167
7	MikroTik RouterOS Winbox/HTTP Interface تجاوز الصلاحيات	7.8	7.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	0.00055	CVE-2023-30799
8	Laravel Framework Token Encrypter.php decrypt تجاوز الصلاحيات	6.8	6.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.62418	CVE-2018-15133
9	Linux Kernel fbcon vt.c KD_FONT_OP_COPY الكشف عن المعلومات	5.0	4.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00042	CVE-2020-28974
10	Devilz Clanportal File Upload ثغرات غير معروفة	5.3	4.4	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.08	0.05362	CVE-2006-6338
11	Devilz Clanportal index.php حقن إس كيو إل	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00	0.00784	CVE-2006-3347
12	Microsoft IIS IP/Domain Restriction تجاوز الصلاحيات	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.12	0.00817	CVE-2014-4078
13	WordPress WP_Query class-wp-query.php حقن إس كيو إل	8.5	8.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.02	0.00318	CVE-2017-5611
14	SourceCodester Petrol Pump Management Software product.php تجاوز الصلاحيات	4.7	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.00045	CVE-2024-2058
15	CKFinder File Name تجاوز الصلاحيات	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00155	CVE-2019-15862
16	Elementor Plugin تجاوز الصلاحيات	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00000	CVE-2024-24934
17	guzzlehttp psr7 Header Parser تجاوز الصلاحيات	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01	0.00095	CVE-2022-24775
18	DrayTek Vigor 2960 Web Management Interface mainfunction.cgi تجاوز الصلاحيات	7.4	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	0.00273	CVE-2023-1162
19	BeCustom Plugin طلب تزوير مشترك	6.5	6.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04	0.00122	CVE-2022-3747
20	Cisco IOS XE Web UI Remote Code Execution	9.9	9.7	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.09	0.89428	CVE-2023-20198

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	5.34.180.64	vds-merkyl-88517.itldc-customer.net	Rakos	31/05/2021	verified	عالي
2	5.34.183.231	vds-454576.hosted-by-itldc.com	Rakos	31/05/2021	verified	عالي
3	46.8.44.55		Rakos	31/05/2021	verified	عالي
4	XXX.XX.XX.XX	xxx.xxxxxxx.xxx	Xxxxx	31/05/2021	verified	عالي
5	XXX.XX.XX.XX	xxxxxxx-xxxxxx.xxxxxx-xx.xxxxx.xxx	Xxxxx	31/05/2021	verified	عالي
6	XXX.XX.XXX.XXX	xxx.xx.xxx.xxx.xxxxxxxxx-xxx	Xxxxx	31/05/2021	verified	عالي
7	XXX.XX.XXX.XXX	xxxxx-xxxxxxxxxxxxxxxx-xxxxxx.xxxxxx-xx-xxxxx.xxx	Xxxxx	31/05/2021	verified	عالي
8	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxx-xxx	Xxxxx	31/05/2021	verified	عالي
9	XXX.XXX.XXX.XXX	xxxxxxxxxxx.xxxxxx.xxx	Xxxxx	31/05/2021	verified	عالي
10	XXX.XX.XXX.XX	xxxxxxx.xxx	Xxxxx	31/05/2021	verified	عالي
11	XXX.XX.XXX.XX	xx.xxxxx-xxxxxxxx.xxx	Xxxxx	31/05/2021	verified	عالي

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	عالي
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	عالي
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
4	T1059	CWE-94	Argument Injection	predictive	عالي
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	عالي
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
7	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	عالي
8	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	عالي
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
11	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	عالي
14	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	عالي
16	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي
17	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	عالي
18	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	عالي
19	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	عالي
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (208)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	//proc/kcore	predictive	متوسط
2	File	/addWhiteListDomain.imss	predictive	عالي
3	File	/admin/app/product.php	predictive	عالي
4	File	/anony/mjpg.cgi	predictive	عالي
5	File	/cgi-bin/wlogin.cgi	predictive	عالي
6	File	/cobbler-api	predictive	متوسط
7	File	/customer_support/index.php	predictive	عالي
8	File	/forum/away.php	predictive	عالي
9	File	/inc/parser/xhtml.php	predictive	عالي
10	File	/include/makecvs.php	predictive	عالي
11	File	/index.php	predictive	متوسط
12	File	/login/index.php	predictive	عالي
13	File	/preview.php	predictive	متوسط
14	File	/protocol/index.php	predictive	عالي
15	File	/requests.php	predictive	عالي
16	File	/search-result.php	predictive	عالي
17	File	/secret_coder.sql	predictive	عالي
18	File	/shop.php	predictive	متوسط
19	File	/uncpath/	predictive	متوسط
20	File	/view_order.php	predictive	عالي
21	File	/wp-admin/admin.php?page=wp_file_manager_properties	predictive	عالي
22	File	add.php	predictive	واطئ
23	File	adminer.php	predictive	متوسط
24	File	adm_config_report.php	predictive	عالي
25	File	xxxxx.xxx	predictive	متوسط
26	File	xxx/xx-xxxxx-xxxxxxx/xxx-xx-xxxxx-xxxxxxx.xxx	predictive	عالي
27	File	xxxx-xxxx.x	predictive	متوسط
28	File	xxx.xxx	predictive	واطئ
29	File	xxxxx.xxxxxxxxx.xxx	predictive	عالي
30	File	xxxxxxxxxx.xxx	predictive	عالي
31	File	xxxxxxxxx.xxx	predictive	عالي
32	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
33	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	عالي
34	File	xxxxxx/xx/xx_xxxxx.x	predictive	عالي
35	File	xxxx:x.x/xx:x/xx:x/xx:x/xx:x/x:x/x:x/x:x/x:x	predictive	عالي
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	عالي
37	File	xxxxxxx.xxx	predictive	متوسط
38	File	xxxxxx.xxx	predictive	متوسط
39	File	xxxx_xxxx.xxx	predictive	عالي
40	File	xxxxxxx/xxx/xxxxxxxx/xx.x	predictive	عالي
41	File	xxxxxxx/xxx/xx/xx.x	predictive	عالي
42	File	xxxxxxxxxxxx.xxx	predictive	عالي
43	File	xxxx.xxx	predictive	متوسط
44	File	xxxxx.xxx	predictive	متوسط
45	File	xxxxxxxx_xxx_xxx_xxxx.xxx	predictive	عالي
46	File	xxxxxx.xxx	predictive	متوسط
47	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	عالي
48	File	xxxxxxxxxxxx.xxx	predictive	عالي
49	File	xxxxxxxxxx.xxx	predictive	عالي
50	File	xxxxxxxxx.xxx	predictive	عالي
51	File	xxxx.xxx	predictive	متوسط
52	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	عالي
53	File	xx_xxxxxxx.x	predictive	متوسط
54	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	عالي
55	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxx.xxx	predictive	عالي
56	File	xxxxxxx/xxxxxxxxx/xxxxxxxxxxxxx.xxx	predictive	عالي
57	File	xxxxxxxxxx.xx/xxx-xxxxx.xxx	predictive	عالي
58	File	xxx/xxxxxx.xxx	predictive	عالي
59	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	عالي
60	File	xxxxx.xxx	predictive	متوسط
61	File	xx.xxx	predictive	واطئ
62	File	xxxxxx.x	predictive	متوسط
63	File	xxxx.xxx	predictive	متوسط
64	File	xx.xxx	predictive	واطئ
65	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	عالي
66	File	xxxxx_xx.xxxx	predictive	عالي
67	File	xxxxxx.xxx	predictive	متوسط
68	File	xxxxxxxxxxxxx.xxx	predictive	عالي
69	File	xxxxxxxxxxxx.xxx	predictive	عالي
70	File	xxxxxxxx_xxxxxxx.xxx	predictive	عالي
71	File	xxxx.xxx	predictive	متوسط
72	File	xxxxxxx/xxxxxx/xxxxxx/xxxxxxxxx.xxx#xxx	predictive	عالي
73	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxxx.xxx	predictive	عالي
74	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxx.xxx	predictive	عالي
75	File	xxxxxxxxxx_xxxxxxx.xxx	predictive	عالي
76	File	xxxxxxx-xxxxx.xx	predictive	عالي
77	File	xxxxx_xxxxxxxx.xxx	predictive	عالي
78	File	xxxx/xxxxxxx/xxxxx.xxx	predictive	عالي
79	File	xxxxx.xxx	predictive	متوسط
80	File	xxxxxxx.xxx	predictive	متوسط
81	File	xxxxxx.xxx/xxxx_xxxx_xxxx.xxx	predictive	عالي
82	File	xxxxxxxx/xxxxxx-xxxxx/xxxxxxxxxxx/xxxx.xx	predictive	عالي
83	File	xxxx.xxx	predictive	متوسط
84	File	xxxxxxx/xxxxxx.xxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	عالي
85	File	xxxxx.xxx	predictive	متوسط
86	File	xxxxx-xxxx.xxx	predictive	عالي
87	File	xxxxxxx.xxx	predictive	متوسط
88	File	xxxxxxxx.xxx	predictive	متوسط
89	File	xxxxxxx_xxxx.xxx	predictive	عالي
90	File	xxxxxxx.xxx	predictive	متوسط
91	File	xxxxx.xxx	predictive	متوسط
92	File	xxxxxxxx.xxx	predictive	متوسط
93	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	عالي
94	File	xxxx.xx	predictive	واطئ
95	File	xxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xx	predictive	عالي
96	File	xxxxxxxxxxxxxxxx.xx	predictive	عالي
97	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	عالي
98	File	xxx/xxxxxx_xxx.xxx	predictive	عالي
99	File	xxxxxxxxxxxx.xxx	predictive	عالي
100	File	xxxxx.x	predictive	واطئ
101	File	xxxxxxxxxxx.xxx	predictive	عالي
102	File	xxxxxxxx/xxxxxxxx	predictive	عالي
103	File	xxxxxxxx.xxx	predictive	متوسط
104	File	xxxxxxxxxx.xxx	predictive	عالي
105	File	xxxxxxx.xxx	predictive	متوسط
106	File	xx_xxxxxxxx.xxx	predictive	عالي
107	File	xxxxx.xxx	predictive	متوسط
108	File	xxxxxxxx.xxx	predictive	متوسط
109	File	xx-xxxxx/xxxxxxx.xxx	predictive	عالي
110	File	xx-xxxxxx.xxx	predictive	عالي
111	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	عالي
112	File	xx-xxxxxxxx/xxxx.xxx	predictive	عالي
113	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	عالي
114	File	xx-xxxxxxxx.xxx	predictive	عالي
115	File	~/xxxxxxxxx/	predictive	متوسط
116	Library	xxxxxxx.xxx	predictive	متوسط
117	Library	xxxxxxxxxxxx.xxx	predictive	عالي
118	Library	xxxx.xxx.xxx	predictive	متوسط
119	Library	xxxxxx.xxx	predictive	متوسط
120	Library	xxxxxxxxxxx.xxx	predictive	عالي
121	Library	xxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxx	predictive	عالي
122	Library	xxxxxxx/xxx/xxxxxxxxx/xxxxx_xxxxxxx.xxx	predictive	عالي
123	Library	xxx/xx_xxx.x	predictive	متوسط
124	Library	xxxxxxxx.x	predictive	متوسط
125	Argument	xx/xx	predictive	واطئ
126	Argument	xx_xxxxx_xxx_xxxx	predictive	عالي
127	Argument	xxxxxx	predictive	واطئ
128	Argument	xxxxxxxxxxxxxxxxxxxxx	predictive	عالي
129	Argument	xxxxxxxx	predictive	متوسط
130	Argument	xxx	predictive	واطئ
131	Argument	xxxx/xxxxx/xxxxx_xxxxxxxxxxx	predictive	عالي
132	Argument	xxxxxx[xxxx]	predictive	متوسط
133	Argument	xxxxxxxxxxx(xxxxxx)	predictive	عالي
134	Argument	xxxx/xxxxxx/xxx	predictive	عالي
135	Argument	xxxxxx	predictive	واطئ
136	Argument	xxxxx/xxxxx/xxxxx/xxxxxxxx	predictive	عالي
137	Argument	xxxxx xxxxx	predictive	متوسط
138	Argument	xxxxx	predictive	واطئ
139	Argument	xxxx	predictive	واطئ
140	Argument	xxxxxxxx	predictive	متوسط
141	Argument	xxxxxx_xxxxxx_xx	predictive	عالي
142	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxx/xxxxxxx	predictive	عالي
143	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxx	predictive	عالي
144	Argument	xxxxxxxxxxxx	predictive	متوسط
145	Argument	xxxxxxxxxxxxxx($xxx)	predictive	عالي
146	Argument	xxxxx_xx	predictive	متوسط
147	Argument	xxx_xxxx	predictive	متوسط
148	Argument	xxxx	predictive	واطئ
149	Argument	xxxx xxxxxxx	predictive	متوسط
150	Argument	xxxx_xxxx	predictive	متوسط
151	Argument	xxxx	predictive	واطئ
152	Argument	xxxx	predictive	واطئ
153	Argument	xx	predictive	واطئ
154	Argument	xx	predictive	واطئ
155	Argument	xxxxx	predictive	واطئ
156	Argument	xxxxx	predictive	واطئ
157	Argument	xxxxxx	predictive	واطئ
158	Argument	xxxx	predictive	واطئ
159	Argument	xxxxxx	predictive	واطئ
160	Argument	xxxx	predictive	واطئ
161	Argument	xxxxxx	predictive	واطئ
162	Argument	xxxxx[xxxxx][xx]	predictive	عالي
163	Argument	xxxxx	predictive	واطئ
164	Argument	xx/xx/xx/xx/x	predictive	عالي
165	Argument	xxxx	predictive	واطئ
166	Argument	xxxxxxxx	predictive	متوسط
167	Argument	xxxx_xxxx	predictive	متوسط
168	Argument	xxxxxx	predictive	واطئ
169	Argument	xxxx	predictive	واطئ
170	Argument	xxxx_xxxx	predictive	متوسط
171	Argument	xxxxxxxx	predictive	متوسط
172	Argument	xxxxxx	predictive	واطئ
173	Argument	xxxx	predictive	واطئ
174	Argument	xxxxxxxx	predictive	متوسط
175	Argument	xxxxx	predictive	واطئ
176	Argument	xxxxxxx_xx	predictive	متوسط
177	Argument	xxxxxxx_xxxxx	predictive	عالي
178	Argument	xxx	predictive	واطئ
179	Argument	xxx=xxxx	predictive	متوسط
180	Argument	xxxxxxxx	predictive	متوسط
181	Argument	xxxxxx_xxxx	predictive	متوسط
182	Argument	xxxxxxxxxx	predictive	متوسط
183	Argument	xxxxxx	predictive	واطئ
184	Argument	xxxxxxxx/xxxxxxxxx	predictive	عالي
185	Argument	xxxxxx	predictive	واطئ
186	Argument	xxxxxxxx_xxxx	predictive	عالي
187	Argument	xxxxxxxxxx_xxxx	predictive	عالي
188	Argument	xxx	predictive	واطئ
189	Argument	xxx	predictive	واطئ
190	Argument	xxxx-xxxxx	predictive	متوسط
191	Argument	xxxxxxxxx	predictive	متوسط
192	Argument	xxxxxxxx/xxxxxxxx	predictive	عالي
193	Argument	xxxxxxxx:xxxxxxxx	predictive	عالي
194	Argument	xxxx_xxxxx	predictive	متوسط
195	Argument	xxxx	predictive	واطئ
196	Argument	x-xxxx-xxxxx	predictive	متوسط
197	Argument	xxxxx_xxxxxxxxxx_xxxxx	predictive	عالي
198	Input Value	../	predictive	واطئ
199	Input Value	>><xxx/xxx/xxxxxxx=xxxxx(x)>	predictive	عالي
200	Input Value	xxxx.xxx"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>)	predictive	عالي
201	Input Value	xxxxxxx	predictive	واطئ
202	Input Value	xxxxxxxxx:xxxxxxxx	predictive	عالي
203	Pattern	\|xx xx xx\|	predictive	متوسط
204	Network Port	xxx	predictive	واطئ
205	Network Port	xxx/xx (xxxxxx)	predictive	عالي
206	Network Port	xxx/xxxxx	predictive	متوسط
207	Network Port	xxx/xxxxx	predictive	متوسط
208	Network Port	xxx xxxxxx xxxx	predictive	عالي

المصادر (2)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Do you need the next level of professionalism?

Upgrade your account now!