RevengeRAT تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

اللغة

en	924
zh	26
ru	24
sv	8
de	6

البلد

us	408
cn	292
vn	252
ru	28
gb	10

الفاعلين

Mirai	3
Indexsinas	2
Venom RAT	1
RevengeRAT	1
AsyncRAT	1

الاهتمام

النوع

Not Defined	234
Operating System	68
Content Management System	52
WordPress Plugin	32
Router Operating System	28

المجهز

Not Defined	228
Microsoft	60
Apple	32
Oracle	24
Google	20

منتج

Microsoft Windows	36
Linux Kernel	14
Google Android	14
Apple iOS	12
Apple macOS	12

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	Tiki Admin Password tiki-login.php توثيق ضعيف	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	4.63	0.00936	CVE-2020-15906
2	PHP phpinfo سكربتات مشتركة	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.07	0.02101	CVE-2007-1287
3	AWStats Config awstats.pl Privilege Escalation	5.0	4.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.00000
4	DZCP deV!L`z Clanportal config.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.62	0.00943	CVE-2010-0966
5	TikiWiki tiki-register.php تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	7.60	0.01009	CVE-2006-6168
6	Microsoft Windows win32k.sys xxxMenuWindowProc الحرمان من الخدمة	5.5	5.0	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.04	0.00000
7	Apple CUPS Interface سكربتات مشتركة	4.3	4.1	$5k-$25k	$0-$5k	High	Official Fix	0.02	0.00864	CVE-2014-2856
8	Apache Superset External URL Redirect	4.9	4.9	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	0.00436	CVE-2021-28125
9	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	3.83	0.00000
10	MGB OpenSource Guestbook email.php حقن إس كيو إل	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.92	0.01302	CVE-2007-0354
11	Pligg cloud.php حقن إس كيو إل	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.59	0.00000
12	Ivanti Secure Access Client Local Privilege Escalation	8.1	8.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.00043	CVE-2023-35080
13	Oracle PeopleSoft Enterprise PeopleTools Integration Broker تجاوز الصلاحيات	6.5	5.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.05	0.00799	CVE-2017-3548
14	nginx تجاوز الصلاحيات	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.07	0.00241	CVE-2020-12440
15	AWStats awstats.pl تجاوز الصلاحيات	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.08	0.00000
16	Pirelli DRG A115 v3 ADSL Router DNS تجاوز الصلاحيات	7.3	6.6	$0-$5k	$0-$5k	Functional	Workaround	0.02	0.00000
17	NotificationX Plugin SQL Statement حقن إس كيو إل	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	0.02414	CVE-2022-0349
18	Minio Environment Variable الكشف عن المعلومات	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.94322	CVE-2023-28432

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	6.43.51.17		RevengeRAT	19/11/2019	verified	عالي
2	10.0.2.15		RevengeRAT	19/11/2019	verified	عالي
3	38.132.101.45		RevengeRAT	16/02/2024	verified	عالي
4	45.147.230.231		RevengeRAT	01/08/2022	verified	عالي
5	XX.XXX.XXX.X		Xxxxxxxxxx	14/04/2022	verified	عالي
6	XX.XXX.XX.X	xxxx.xxxxxxxx.xx	Xxxxxxxxxx	14/04/2022	verified	عالي
7	XXX.XXX.XX.XX		Xxxxxxxxxx	14/04/2022	verified	عالي
8	XXX.XXX.XX.XXX		Xxxxxxxxxx	14/04/2022	verified	عالي
9	XXX.X.X.X	xxxxxxxxx	Xxxxxxxxxx	19/11/2019	verified	عالي
10	XXX.XX.XXX.XXX		Xxxxxxxxxx	19/11/2019	verified	عالي
11	XXX.XXX.XX.XX		Xxxxxxxxxx	14/04/2022	verified	عالي
12	XXX.XX.XX.XXX	xxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xx	Xxxxxxxxxx	28/06/2023	verified	عالي
13	XXX.XX.XX.XXX		Xxxxxxxxxx	19/11/2019	verified	عالي
14	XXX.XXX.XXX.XX		Xxxxxxxxxx	14/04/2022	verified	عالي
15	XXX.XXX.XX.XX		Xxxxxxxxxx	14/04/2022	verified	عالي
16	XXX.XXX.XX.XXX		Xxxxxxxxxx	14/04/2022	verified	عالي
17	XXX.XXX.XX.XXX		Xxxxxxxxxx	14/04/2022	verified	عالي
18	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxx.xxx	Xxxxxxxxxx	14/04/2022	verified	عالي

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22, CWE-23, CWE-24, CWE-29	Path Traversal	predictive	عالي
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
3	T1059	CWE-94, CWE-1321	Argument Injection	predictive	عالي
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	عالي
5	T1068	CWE-264, CWE-266, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	عالي
6	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	عالي
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
9	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
10	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	عالي
11	TXXXX.XXX	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	عالي
12	TXXXX	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	عالي
14	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	عالي
16	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	عالي
17	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	عالي
18	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي
19	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	عالي
20	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	عالي
21	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	عالي
22	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	عالي
23	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	عالي

IOA - Indicator of Attack (326)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	$HOME/.terminfo	predictive	عالي
2	File	/admin/	predictive	واطئ
3	File	/admin/admin_user.php	predictive	عالي
4	File	/admin/category/save	predictive	عالي
5	File	/admin/list_ipAddressPolicy.php	predictive	عالي
6	File	/admin/subject.php	predictive	عالي
7	File	/auth/auth.php?user=1	predictive	عالي
8	File	/boaform/device_reset.cgi	predictive	عالي
9	File	/cgi-bin/cstecgi.cgi	predictive	عالي
10	File	/cgi-bin/cstecgi.cgi?action=login	predictive	عالي
11	File	/cgi-bin/cstecgi.cgi?action=login&flag=1	predictive	عالي
12	File	/cgi-bin/wlogin.cgi	predictive	عالي
13	File	/cgi/cpaddons_report.pl	predictive	عالي
14	File	/common/dict/list	predictive	عالي
15	File	/debug/pprof	predictive	متوسط
16	File	/DXR.axd	predictive	متوسط
17	File	/forum/away.php	predictive	عالي
18	File	/goform/goform_get_cmd_process	predictive	عالي
19	File	/HNAP1/	predictive	واطئ
20	File	/importexport.php	predictive	عالي
21	File	/Interface/DevManage/VM.php	predictive	عالي
22	File	/main/doctype.php	predictive	عالي
23	File	/main/webservices/additional_webservices.php	predictive	عالي
24	File	/mc	predictive	واطئ
25	File	/mgmt/	predictive	واطئ
26	File	/net/bluetooth/rfcomm/core.C	predictive	عالي
27	File	/oauth/idp/.well-known/openid-configuration	predictive	عالي
28	File	/opt/zimbra/jetty/webapps/zimbra/public	predictive	عالي
29	File	/pdf	predictive	واطئ
30	File	/preview.php	predictive	متوسط
31	File	/register.php	predictive	عالي
32	File	/remote/put_file	predictive	عالي
33	File	/server-status	predictive	عالي
34	File	/setting/NTPSyncWithHost	predictive	عالي
35	File	/spip.php	predictive	متوسط
36	File	/squashfs-root/etc_ro/custom.conf	predictive	عالي
37	File	/terminal/handle-command.php	predictive	عالي
38	File	/xxxxxx-xxxxxxxx-xxxx/	predictive	عالي
39	File	/xxxxxxx/xxxx.xxx	predictive	عالي
40	File	/xxxxxxxx/xxx.xxx	predictive	عالي
41	File	/xxx/xxx/xxxx-xx/xx	predictive	عالي
42	File	/xxx/xxx/xxxx/xxxx-xxx-xxxxxxxx	predictive	عالي
43	File	/xxx/xxxxxxxx.xxx	predictive	عالي
44	File	xxxxxxxxxxx.xxx	predictive	عالي
45	File	xxxxxx/xxxx/xxxxxx.xxxx	predictive	عالي
46	File	xxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
47	File	xxxxxxx.xxx	predictive	متوسط
48	File	xxx.xxx	predictive	واطئ
49	File	xxxxx.xxx?x=xxxxxx&x=xxxxxx&x=xxxxxx	predictive	عالي
50	File	xxxxx/xxxxxxxxxxxxxxx.xxx	predictive	عالي
51	File	xxxxx/xxxxxxx/xxxxxxx_xxxx_xxxx.xxx	predictive	عالي
52	File	xxxxx/xxxx/xxxxxx/xxxxxxx/xxxxxx/xxxx_xxxxxxxxxx.xxx	predictive	عالي
53	File	xxxxxxx.xxx	predictive	متوسط
54	File	xxxxx_xxxxxx.xxx	predictive	عالي
55	File	xxxxxxxx.xxx	predictive	متوسط
56	File	xxx/xxxx.xx	predictive	متوسط
57	File	xxx/xxxxxxxx/xxxxxxxxxxx.xxx	predictive	عالي
58	File	xxx/xxxxxxx/xxxxxxxxxxx_xxxxxx.xx	predictive	عالي
59	File	xxxx/xxx/xxxxxx/xxx-xxxxxx.x	predictive	عالي
60	File	xxxxxxx.x	predictive	متوسط
61	File	xxxxxxxx.xxxx	predictive	عالي
62	File	xxxxxxxxxxxxxxxx.xxxx	predictive	عالي
63	File	xxx-xxxxxxx-xxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxxxxx/xxxx/xxxxxxxxxx.xxxx	predictive	عالي
64	File	xxxxxxx.xx	predictive	متوسط
65	File	xxxxxxx/xxxxx/xxxx/	predictive	عالي
66	File	xxx/xxxxx	predictive	متوسط
67	File	xxxxxx.x	predictive	متوسط
68	File	xxxxx/xxx-xxxxxx.x	predictive	عالي
69	File	xxxxxxx/xxxxxxx/xxxxxxx.xxxx?xxxx	predictive	عالي
70	File	xxxx.x	predictive	واطئ
71	File	xxx-xxx/xxxxxxx_xxxxxxxx	predictive	عالي
72	File	xxx-xxx/xxxxx/xxxxx/xxxxx/xxx_xxxx/xxxx_xxxx/	predictive	عالي
73	File	xxxxxxxx/xxxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxx.xxx	predictive	عالي
74	File	xxxxx.xxx	predictive	متوسط
75	File	xxx.xxx?xxx=xxxxx_xxxx	predictive	عالي
76	File	xxxxxx/xxx.x	predictive	متوسط
77	File	xxxxxx/xxx.x	predictive	متوسط
78	File	xxxxx-xxxxxxx.xxx	predictive	عالي
79	File	xxxxxx.xxx	predictive	متوسط
80	File	xxxxxx.xxx	predictive	متوسط
81	File	xxxxxx/x.x	predictive	متوسط
82	File	xxxx/xxxxxx.xxxx	predictive	عالي
83	File	xxxxxxxx.xxx	predictive	متوسط
84	File	xxxxxxx.xxx	predictive	متوسط
85	File	xxxxxxx.xxx	predictive	متوسط
86	File	xxxxx.xxx	predictive	متوسط
87	File	xxxxxxxxxxxxxxxx-xxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxxxxxx/xxx/xxxxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
88	File	xxxxxxx/xxx/xxx/xxx_xxxxxx.x	predictive	عالي
89	File	xxxxxxx/xxxx/xxxxxx/xxx.x	predictive	عالي
90	File	xxxxxxx/xxxxx/xxxxx/xxxxxx-xxx.x	predictive	عالي
91	File	xxxxx.xxx	predictive	متوسط
92	File	xxxxx_xx.xx	predictive	متوسط
93	File	xxxxxxx.x	predictive	متوسط
94	File	xx/xxx/xxxxxx/xxxxxxx.x	predictive	عالي
95	File	xxxx.xxx	predictive	متوسط
96	File	xxxxxx/xxxxx/xxxx.xxxxxxxx.xxx	predictive	عالي
97	File	xxxxxxxxxx.xxx	predictive	عالي
98	File	xx-xxxxxxx/xxxxxxx	predictive	عالي
99	File	xxxxxx/xxxxxxxxxxxxx	predictive	عالي
100	File	xxxx.xxx	predictive	متوسط
101	File	xxxx_xxxxxxx.xxx.xxx	predictive	عالي
102	File	xxxxxxxxx.xxx	predictive	عالي
103	File	xxxx.xxx	predictive	متوسط
104	File	xxxx.x	predictive	واطئ
105	File	xxxx_xxxx.x	predictive	متوسط
106	File	xxxxxx_xxxxxxx.xxxx	predictive	عالي
107	File	xxx/xxxxxx.xxx	predictive	عالي
108	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	عالي
109	File	xxxxx.xxx	predictive	متوسط
110	File	xxxxx.xxx	predictive	متوسط
111	File	xxxxx.xxx?x=xxxx://	predictive	عالي
112	File	xxxxxxxx.xxx	predictive	متوسط
113	File	xxxxxxx.x	predictive	متوسط
114	File	xxxxxxxxxxxxxxxx.xxx	predictive	عالي
115	File	xxxxxxxxxxxxx.xxx	predictive	عالي
116	File	xxxxx.x	predictive	واطئ
117	File	xxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx	predictive	عالي
118	File	xxx/xxxxxx.xxx	predictive	عالي
119	File	xxxxxxx.xx	predictive	متوسط
120	File	xxxxx.xxx	predictive	متوسط
121	File	xxxxxxxxxx/xx.x	predictive	عالي
122	File	xxxx.xxx	predictive	متوسط
123	File	xxxxxxxxxxxx.xxx	predictive	عالي
124	File	xxxxxxxx.xxx	predictive	متوسط
125	File	xxxx/xxxxxxxxxx.xxx	predictive	عالي
126	File	xxxxxx.xxx	predictive	متوسط
127	File	xxxxx.xxx.xxx	predictive	عالي
128	File	xxx_xxxxx.xxxx/xxx_xxxxxxxx.xxxx	predictive	عالي
129	File	xxx/xxxxxxxxx/xxx_xxxxxxxxx.x	predictive	عالي
130	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	عالي
131	File	xxx/xxxxx/xxx_xx.x	predictive	عالي
132	File	xxx/xxxx/xxxx_xxxx.x	predictive	عالي
133	File	xxxxxxxx.xxx	predictive	متوسط
134	File	xxxxxx.xxx	predictive	متوسط
135	File	xxx_xxxx.xxx	predictive	متوسط
136	File	xxx/xx/xxx/xxxxxxxxxx	predictive	عالي
137	File	xxxxx.xxx	predictive	متوسط
138	File	xxxxxxxx-xxxxxxxx.xxx	predictive	عالي
139	File	xxxxxxxxxxx.xxxx	predictive	عالي
140	File	xxxxxxx.xxx	predictive	متوسط
141	File	xxxxxxx-xxxxxx.xxx	predictive	عالي
142	File	xxxxxx/xxxxxxxxxx/xxx/xxxx.xxx	predictive	عالي
143	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	عالي
144	File	xxxxxxx.xxx	predictive	متوسط
145	File	xxxxxxx_xxxx.xxx	predictive	عالي
146	File	xxx.xxxxx.xxx	predictive	عالي
147	File	xxxxx.xxx	predictive	متوسط
148	File	xxxxx.xxx	predictive	متوسط
149	File	xxxxxxxx.xxx	predictive	متوسط
150	File	xxxxxxxxxx.xxx	predictive	عالي
151	File	xxxxxxxxxxxx.xxx	predictive	عالي
152	File	xxxxxxx.xx	predictive	متوسط
153	File	xxx.xxx	predictive	واطئ
154	File	xx_xxx.xx	predictive	متوسط
155	File	xxxxxx.xx	predictive	متوسط
156	File	xxxxxx.xxx	predictive	متوسط
157	File	xxxxxx-xxxxx.xxx	predictive	عالي
158	File	xxxxxx_xxxxxxxxx.xxx	predictive	عالي
159	File	xxxx_xxxxxxx.xxx	predictive	عالي
160	File	xx_xxxxx_xxxx.xxx	predictive	عالي
161	File	xxxxxxxx_xxxxxxxxx.xxx	predictive	عالي
162	File	xxx.xxxx	predictive	متوسط
163	File	xxx/xxxx/xxxx/xx/xxxxx/xxxxx/xxxx/xxxxxxxxxxxx.xxxx	predictive	عالي
164	File	xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	عالي
165	File	xxxxxxxx.xxx	predictive	متوسط
166	File	xxx_xxxxxxx.x	predictive	عالي
167	File	xxxx-xxxxx.xxx	predictive	عالي
168	File	xxxx-xxxxxxxx.xxx	predictive	عالي
169	File	xxxxx_xxx_xxxxxxx.xxx	predictive	عالي
170	File	xxxxx.xxx	predictive	متوسط
171	File	xxxxxxxxxxxxxxxxx.xxxxx	predictive	عالي
172	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	عالي
173	File	xxxx_xxxxx.xxx	predictive	عالي
174	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	عالي
175	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	عالي
176	File	xx/xxxxxxxxx/xx	predictive	عالي
177	File	xxxxxx.xxx	predictive	متوسط
178	File	xxxxx.xxxxxx.xxxxxxx.xxx	predictive	عالي
179	File	xxxxxx\xxxxxx\xxxxxxxxx-xxxxxx-xxxxxxx\xxx\xxxxxxx\xxxxxxxxxxxxx.xxx	predictive	عالي
180	File	xxxxx.xxx	predictive	متوسط
181	File	xxxxxx.xxx	predictive	متوسط
182	File	xxxxxx.xxx	predictive	متوسط
183	File	xxxxxx.xxx	predictive	متوسط
184	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	عالي
185	File	xx-xxxxxxx/xxxxxxx/xxxx-xx-xxxx/	predictive	عالي
186	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	عالي
187	File	xx/xx/xxxxx	predictive	متوسط
188	File	xxxx.xx	predictive	واطئ
189	File	\xx_xxxx\xxx\xxxxxxxx\xxxxxxxx_xxxxxxx.xx	predictive	عالي
190	Library	/_xxx_xxx/xxxxx.xxx	predictive	عالي
191	Library	xx/xxx/xxxx_xxxxxx.xxx	predictive	عالي
192	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	عالي
193	Library	xxxxxxxx.xxx	predictive	متوسط
194	Library	xxxxxxx/xxx/xxxxxx.xxx.xxx	predictive	عالي
195	Library	xxxxxxx.xxx	predictive	متوسط
196	Library	xxxxxx_xxxxxxxx.xxx	predictive	عالي
197	Library	xxxxxxx-xxxxxx.xxx	predictive	عالي
198	Library	xxx.xxx	predictive	واطئ
199	Library	xxx/xxxx.x	predictive	متوسط
200	Library	xxx/xxxxxxx.x	predictive	عالي
201	Library	xxx/xx/xxxxx/xxxxxxxxxx/xxxx.xx	predictive	عالي
202	Library	xxx/xxx.x	predictive	متوسط
203	Library	xxxxxx.xxx	predictive	متوسط
204	Library	xxxxx.xxx	predictive	متوسط
205	Library	xxxxxx.xxx.xxx.xxx	predictive	عالي
206	Library	xxxxxxx.xxx	predictive	متوسط
207	Library	xxxxxx.xxx	predictive	متوسط
208	Argument	xx/xx	predictive	واطئ
209	Argument	xxxxxx	predictive	واطئ
210	Argument	xxxxx	predictive	واطئ
211	Argument	xxxxxxxxxxxxx	predictive	عالي
212	Argument	xxxxxxxxxxxxxx	predictive	عالي
213	Argument	xxxxxxxx	predictive	متوسط
214	Argument	xxxx_xxx	predictive	متوسط
215	Argument	xxxxx	predictive	واطئ
216	Argument	xxxxxx	predictive	واطئ
217	Argument	xxxxxxx	predictive	واطئ
218	Argument	xxxxxxxxxx	predictive	متوسط
219	Argument	xxx	predictive	واطئ
220	Argument	xxx_xxxx	predictive	متوسط
221	Argument	xxxxxxx	predictive	واطئ
222	Argument	xxxxxxx xxxx/xxxxxxxxxxx	predictive	عالي
223	Argument	xxxxxxxxxxxxxxxx	predictive	عالي
224	Argument	xxxxxxxxxx	predictive	متوسط
225	Argument	xxxxx	predictive	واطئ
226	Argument	xxxxxxxxx_xxxxxx/xxxxxxxxx_xxxxxx	predictive	عالي
227	Argument	xxxx	predictive	واطئ
228	Argument	xxxxxxxxx	predictive	متوسط
229	Argument	xxxxxxx	predictive	واطئ
230	Argument	xxxxxx	predictive	واطئ
231	Argument	xxxxxxxxxxxx	predictive	متوسط
232	Argument	xxxxx	predictive	واطئ
233	Argument	xxx	predictive	واطئ
234	Argument	xxxx	predictive	واطئ
235	Argument	xxxx	predictive	واطئ
236	Argument	xxxxxxxx	predictive	متوسط
237	Argument	xxxxxxxx/xxxxxxx/xxxxx	predictive	عالي
238	Argument	xxxx_xxxxxx	predictive	متوسط
239	Argument	xxxxxxxxxxxxxxxx	predictive	عالي
240	Argument	xxxxxxxxx/xxxxxxxx/xxxxxxxx	predictive	عالي
241	Argument	xx_xxxx	predictive	واطئ
242	Argument	xxxxx.xxxxxxxxx/xxxxx.xxxxxxxxxx	predictive	عالي
243	Argument	xxxxxxx	predictive	واطئ
244	Argument	xxxxx	predictive	واطئ
245	Argument	xxxxxxxxx/xxxxxx	predictive	عالي
246	Argument	xx=xxxxxx)	predictive	متوسط
247	Argument	xxxx	predictive	واطئ
248	Argument	xxxxxxx	predictive	واطئ
249	Argument	xxxx	predictive	واطئ
250	Argument	xxxx_xxxx	predictive	متوسط
251	Argument	xxxx	predictive	واطئ
252	Argument	xx	predictive	واطئ
253	Argument	xx	predictive	واطئ
254	Argument	xxxxxxxxx	predictive	متوسط
255	Argument	xxx	predictive	واطئ
256	Argument	xxxxxxx	predictive	واطئ
257	Argument	xxxxxxxxxxxxxx	predictive	عالي
258	Argument	xxxxxxx	predictive	واطئ
259	Argument	xxxx	predictive	واطئ
260	Argument	xxxx_xxxx	predictive	متوسط
261	Argument	xxxxxxx	predictive	واطئ
262	Argument	xxxxxxxxx	predictive	متوسط
263	Argument	xxx_xxxxxxx_xxx	predictive	عالي
264	Argument	xxxxxxxxx	predictive	متوسط
265	Argument	xxxxx_xxxxxx_xxx/xxxxx_xxxx_xxxxxxxx	predictive	عالي
266	Argument	xxxxxxxxx	predictive	متوسط
267	Argument	xxxxxxxxxx/xxxxxxx/xxxxxxxxxxxxx	predictive	عالي
268	Argument	xxx_xxx	predictive	واطئ
269	Argument	xx_xx	predictive	واطئ
270	Argument	xx	predictive	واطئ
271	Argument	xxxxxx/xxxxx/xxxx	predictive	عالي
272	Argument	xx	predictive	واطئ
273	Argument	xxxx/xxxxxx/xxxx_xx/xxxxxxxx_xx	predictive	عالي
274	Argument	xxxxxxxx	predictive	متوسط
275	Argument	xxxxx_xxxx_xxxx	predictive	عالي
276	Argument	xxxx_xxxx_xxxx	predictive	عالي
277	Argument	xxx/xxxx	predictive	متوسط
278	Argument	xxxxxxxxxxxxxxx	predictive	عالي
279	Argument	xxxxxxxxxxxx	predictive	متوسط
280	Argument	xxxx_xxx	predictive	متوسط
281	Argument	xxxxxx	predictive	واطئ
282	Argument	xxxxxxxxxx	predictive	متوسط
283	Argument	xxxxxxxx_xxxxxx_xxxxx	predictive	عالي
284	Argument	xxxx_xxxx	predictive	متوسط
285	Argument	xxxxxx_xx	predictive	متوسط
286	Argument	xxxxxxxxx	predictive	متوسط
287	Argument	xxx	predictive	واطئ
288	Argument	xxxxxxxxxxx	predictive	متوسط
289	Argument	xxxxxxxx_xxxxxxx_xxxxxxx/xxxxxxxx_xxxxxx_xxxxxxx	predictive	عالي
290	Argument	xxxx_xx	predictive	واطئ
291	Argument	xxxxxxx[]	predictive	متوسط
292	Argument	xxx_xxxxx	predictive	متوسط
293	Argument	xxxxxx	predictive	واطئ
294	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	عالي
295	Argument	xxxxxxxx/xxxx	predictive	عالي
296	Argument	xxxxxxxxxxxxxxx	predictive	عالي
297	Argument	xxxxxxxxxx_xxxx_xxxxxx	predictive	عالي
298	Argument	xx	predictive	واطئ
299	Argument	xxxxxx	predictive	واطئ
300	Argument	xxx	predictive	واطئ
301	Argument	xxxxxxxx	predictive	متوسط
302	Argument	xxxxxxxx	predictive	متوسط
303	Argument	xxxxxxxx/xxxxxxxx	predictive	عالي
304	Argument	xxxxxxxxx	predictive	متوسط
305	Argument	xxx_xxxx	predictive	متوسط
306	Argument	xxxx	predictive	واطئ
307	Argument	xx	predictive	واطئ
308	Argument	xxx	predictive	واطئ
309	Argument	x-xxxxxxxxx-xxx	predictive	عالي
310	Argument	x-xxxxxxxxx-xxxx	predictive	عالي
311	Argument	xxx	predictive	واطئ
312	Argument	xxxx	predictive	واطئ
313	Argument	_xx/_xxxxx	predictive	متوسط
314	Input Value	"><xxxxxx xxx="xxxxx://xx.xxx/xxxxxxxxxx"></xxxxxx>	predictive	عالي
315	Input Value	%xx	predictive	واطئ
316	Input Value	%xxxxxxxx%xxxxxxx%xxxxxxxx.xxxxxxxxxxxx%xxxxx,%xxxxx,%xxxxx%xx%xx%xx/xxxxxx%xx	predictive	عالي
317	Input Value	../../../xxx/xxxxxx	predictive	عالي
318	Input Value	/%xx	predictive	واطئ
319	Input Value	<xxxxxx>xxxxx('xxxxxxxx.xxxxxx='+xxxxxxxx.xxxxxx)</xxxxxx>.xxxxx	predictive	عالي
320	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	عالي
321	Input Value	<xxxxx/xxx=x xxxxxxx=xxxxx(xxxxxxxx.xxxxxx)>	predictive	عالي
322	Input Value	xxxxxx	predictive	واطئ
323	Input Value	\x	predictive	واطئ
324	Pattern	\|xx\|	predictive	واطئ
325	Network Port	xxx/xxx (xxx)	predictive	عالي
326	Network Port	xxx xxxxxx xxxx	predictive	عالي

المصادر (6)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

https://www.fortinet.com/blog/threat-research/malware-analysis-revenge-rat-sample.html

التالي ▸نظرة عامة◂ السابق

Do you need the next level of professionalism?

Upgrade your account now!