Sload تحليل

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (454)

اللغة

en	450
es	2
de	2

البلد

us	4
de	2

الفاعلين

Sload	2
Baldr	1
Nemty	1
GandCrab v5	1
CoinMiner	1

الاهتمام

النوع

Not Defined	130
Web Browser	42
Forum Software	30
Operating System	26
Content Management System	22

المجهز

Not Defined	184
Oracle	26
Microsoft	24
Google	20
Adobe	18

منتج

Google Android	12
Mozilla Firefox	12
Adobe Flash Player	10
phpBB	10
Linux Kernel	8

الثغرات

#	الثغرة	Base	Temp	0day	اليوم	ق�	معالجة	CTI	EPSS	CVE
1	TAP Plugin اجتياز الدليل	7.0	6.8	$0-$5k	جاري الحساب	Not Defined	Official Fix	0.00	0.00406	CVE-2016-4986
2	Moodle Administration Page حقن إس كيو إل	7.2	7.2	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.08	0.00151	CVE-2022-40315
3	Oracle BI Publisher BI Publisher Security Local Privilege Escalation	7.2	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.01	0.94564	CVE-2019-2616
4	Chamilo LMS File Upload lp_upload.php import_package تجاوز الصلاحيات	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00743	CVE-2019-13082
5	Phplinkdirectory PHP Link Directory conf_users_edit.php طلب تزوير مشترك	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	0.00526	CVE-2011-0643
6	Apache Kylin Restful API توثيق ضعيف	4.8	4.8	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	0.97421	CVE-2020-13937
7	vBulletin decodeArguments تجاوز الصلاحيات	7.3	7.3	$0-$5k	$0-$5k	High	Not Defined	0.00	0.74237	CVE-2015-7808
8	vBulletin سكربتات مشتركة	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.01206	CVE-2004-1824
9	Tapatalk Plugin XMLRPC API unsubscribe_forum.php حقن إس كيو إل	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.00242	CVE-2014-2023
10	phpBB Perl ucp_pm_options.php message_options طلب تزوير مشترك	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00335	CVE-2015-1432
11	vBulletin حقن إس كيو إل	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00214	CVE-2014-5102
12	PunBB سكربتات مشتركة	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00199	CVE-2010-0455
13	vBulletin redirector.php Redirect	6.6	6.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.23	0.00141	CVE-2018-6200
14	vBulletin Vbulletin Forum Remote Code Execution	9.8	8.5	$0-$5k	$0-$5k	Unproven	Official Fix	0.00	0.00620	CVE-2012-4328
15	phpBB install.php تجاوز الصلاحيات	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	0.00642	CVE-2002-1707
16	PunBB register.php حقن إس كيو إل	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00543	CVE-2005-0569
17	vBulletin moderation.php حقن إس كيو إل	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.01	0.00284	CVE-2016-6195
18	vBulletin XMLRPC API breadcrumbs_create.php حقن إس كيو إل	6.3	6.3	$0-$5k	$0-$5k	High	Unavailable	0.02	0.00102	CVE-2014-2022
19	vBulletin visitormessage.php تجاوز الصلاحيات	7.5	7.4	$0-$5k	جاري الحساب	High	Unavailable	0.02	0.03157	CVE-2014-9463
20	PunBB Password Reset moderate.php تجاوز الصلاحيات	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	0.02283	CVE-2008-1484

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	عنوان بروتوكول الإنترنت	Hostname	ممثل	Identified	النوع	الثقة
1	2.59.117.6	server4.poyrazhosting.com	Sload	06/05/2022	verified	عالي
2	51.77.231.185	vps-06fdbf53.vps.ovh.net	Sload	06/05/2022	verified	عالي
3	51.254.205.84	84.ip-51-254-205.eu	Sload	06/05/2022	verified	عالي
4	XX.XXX.XXX.XXX		Xxxxx	12/04/2022	verified	عالي
5	XX.XXX.XXX.XX	xxx.xx	Xxxxx	06/05/2022	verified	عالي
6	XX.XX.XXX.XXX		Xxxxx	12/04/2022	verified	عالي
7	XXX.XXX.XXX.XX	xxxx.xxxx.xxx	Xxxxx	06/05/2022	verified	عالي
8	XXX.XXX.XXX.XXX		Xxxxx	06/05/2022	verified	عالي
9	XXX.XXX.XXX.XXX	xxxxxx-xxx.xxxxxxx.xxxxxx.xxx	Xxxxx	06/05/2022	verified	عالي
10	XXX.XXX.XX.XX	xxx-xx-xxxx.xxxxx.xxx	Xxxxx	12/04/2022	verified	عالي
11	XXX.XXX.XXX.XX	xxxxxxxxxxxxxxxx.xxxxxxxx.xxx	Xxxxx	06/05/2022	verified	عالي

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	الثغرات	متجه الوصول	النوع	الثقة
1	T1006	CWE-22	Path Traversal	predictive	عالي
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	عالي
3	T1059	CWE-94	Argument Injection	predictive	عالي
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	عالي
5	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
6	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	عالي
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	عالي
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	عالي
9	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	عالي
10	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	عالي
11	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	عالي
12	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	عالي
13	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
14	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	عالي
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	عالي
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	عالي
17	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	عالي
18	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	عالي
19	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	عالي
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	عالي

IOA - Indicator of Attack (183)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	الفئة	Indicator	النوع	الثقة
1	File	/admin	predictive	واطئ
2	File	/admin/launch_message.php	predictive	عالي
3	File	/admin/send_message.php	predictive	عالي
4	File	/categoriesServlet	predictive	عالي
5	File	/category.php	predictive	عالي
6	File	/cgi-bin/login_action.cgi	predictive	عالي
7	File	/dev/datum/	predictive	متوسط
8	File	/forms/web_runScript	predictive	عالي
9	File	/getImage	predictive	متوسط
10	File	/html/feed.php	predictive	عالي
11	File	/includes/rrdtool.inc.php	predictive	عالي
12	File	/job/(job-name)/api	predictive	عالي
13	File	/multi-vendor-shopping-script/product-list.php	predictive	عالي
14	File	/plugin/extended-choice-parameter/js/	predictive	عالي
15	File	/src/basic/fs-util.c	predictive	عالي
16	File	/wfo/control/emp_selector_pu	predictive	عالي
17	File	admin/conf_users_edit.php	predictive	عالي
18	File	admin/settings/update/	predictive	عالي
19	File	admin/tags.php	predictive	عالي
20	File	administrator.cfc	predictive	عالي
21	File	ajax/api/hook/decodeArguments	predictive	عالي
22	File	xxxxxxxx/xxxxxxxx/xxxx/xxxx.xx	predictive	عالي
23	File	xx_xxxxxxxxxx.xxx	predictive	عالي
24	File	xxxxxxx_xxxxxx.x	predictive	عالي
25	File	xxxxxx_xx.x	predictive	متوسط
26	File	xxxxxxxxxxx_xxxxxx.xxx	predictive	عالي
27	File	xxxx_xxxx.x	predictive	متوسط
28	File	xxxxxx/xxx.x	predictive	متوسط
29	File	xxxxxx/xxxx.x	predictive	عالي
30	File	xxxxxxxxxxx/xxxxxx/xxx.xxx	predictive	عالي
31	File	xxxxxxx.x	predictive	متوسط
32	File	xxx/xxxx/xxxxxxx/xx/xxxx.xxx	predictive	عالي
33	File	xxxxxx/xxxxx.x	predictive	عالي
34	File	xxxxxx/xx/xxxxx_xxxx.x	predictive	عالي
35	File	xxx_xx_xxx.x	predictive	متوسط
36	File	xxx_xx_xxxxxx.x	predictive	عالي
37	File	xxx_xxx.x	predictive	متوسط
38	File	xxxx-xxxxx/xxxxxxx-xxxxx.x	predictive	عالي
39	File	xxxxxx.xxx	predictive	متوسط
40	File	xxxxxxxxx.xxx	predictive	عالي
41	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	عالي
42	File	xxxxxxx/xxxxxxxxxx/xxx/xxxx/xx_xxxx.x	predictive	عالي
43	File	xxxxxxx/xxxxx/xxx/xxx-xxx/xxx-xxx-xxxxxxxx.x	predictive	عالي
44	File	xxxxxxx/xxx/xxxxxxxxxx/xxxxx.x	predictive	عالي
45	File	xxxxxxx/xxx/xxx/xxxxxxx.x	predictive	عالي
46	File	xxxxxxx/xxxxxxxxx/xxxxxxxxx.x	predictive	عالي
47	File	xxxxx_xxx_xxxxxx.x	predictive	عالي
48	File	xx_xxxxxxx.x	predictive	متوسط
49	File	xxxxx.xxx	predictive	متوسط
50	File	xxx/xxxxxxxx/xxx.x	predictive	عالي
51	File	xxx/xxxxxxxx/xxx_xxxxxxxxxxxx.x	predictive	عالي
52	File	xxx/xxxx/xxxx.x	predictive	عالي
53	File	xxxxx.x	predictive	واطئ
54	File	xxxxxxxxxx.xxx	predictive	عالي
55	File	xxxx.x	predictive	واطئ
56	File	xxxxxxxxxxxxx.xxx	predictive	عالي
57	File	xxxxxxxxxxxxxxxxxxx.xxx	predictive	عالي
58	File	xxxxxxxxxxx/xxxxxxxx/xxxxxxxxxx.xxx	predictive	عالي
59	File	xxxxxxxxx/xxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	عالي
60	File	xxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	عالي
61	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	عالي
62	File	xx/xxxxxx/xxxxxx.x	predictive	عالي
63	File	xx/xxxx/xxxxx.x	predictive	عالي
64	File	xxxxx.xxx	predictive	متوسط
65	File	xxxxxx/xxxxxxxxxxxxxx	predictive	عالي
66	File	xxxxxx.xxx	predictive	متوسط
67	File	xxxxx.xxx	predictive	متوسط
68	File	xxx/xxxxxxxxx-xxx	predictive	عالي
69	File	xx/xxxx/xx.x	predictive	متوسط
70	File	xx/xxx/xxxxxxxx.x	predictive	عالي
71	File	xx/xxx/xxx-xxxx.x	predictive	عالي
72	File	xxxxx.xxxx.xxx_xxxxxx	predictive	عالي
73	File	xxx/xx/xxxx/xxxxx.xxxxx	predictive	عالي
74	File	xxxxxxx/xxxxx/xxxx_xxxx.x	predictive	عالي
75	File	xxxxxxxx/xxxxxxx.xxx	predictive	عالي
76	File	xxxxxxxx/xxx/xxx_xx_xxxxxxx.xxx	predictive	عالي
77	File	xxxxxxx.xxx	predictive	متوسط
78	File	xxxxxxxxx.xxx	predictive	عالي
79	File	xxx-xxxx.x	predictive	متوسط
80	File	xxxxxx_xxxx.x	predictive	عالي
81	File	xxx.x/xxxxxx.x	predictive	عالي
82	File	xxxxxx/xxxxxxxx.xx	predictive	عالي
83	File	xxxxx.xxx	predictive	متوسط
84	File	xxxxxxxx.xxx	predictive	متوسط
85	File	xxx_xxxxx_xxxxxx.xxx	predictive	عالي
86	File	xx_xxxxxx.xxx	predictive	عالي
87	File	xxxxxx/xxxxxx.x	predictive	عالي
88	File	xxxxxxxxxx/xx.x	predictive	عالي
89	File	xxxx.xxx	predictive	متوسط
90	File	xxxxxx.xx	predictive	متوسط
91	File	xxxxx.xxx	predictive	متوسط
92	File	xxxxxxxx.xxx	predictive	متوسط
93	File	xxxxxxx/xxxxxx.x	predictive	عالي
94	File	xxxxxxx.xxx	predictive	متوسط
95	File	xxxxxx_xxx.x	predictive	متوسط
96	File	xxxxxxxxxxx.xxx	predictive	عالي
97	File	xxxxxxxx.xxx	predictive	متوسط
98	File	xxx.x	predictive	واطئ
99	File	xxxxxxxxx.xxx	predictive	عالي
100	File	xxxxxxx.xxx	predictive	متوسط
101	File	xxxxxxxxxx.xxx	predictive	عالي
102	File	xxxxxxxx.xxx	predictive	متوسط
103	File	xxxx/xxxx/	predictive	متوسط
104	File	xxxxxxx.x	predictive	متوسط
105	File	xxxxxx.x	predictive	متوسط
106	File	xxxxxx.xxx	predictive	متوسط
107	File	xxxxxxxxxx.xxx	predictive	عالي
108	File	xxxxxxx.xxx/xxxxxxx.xxxxxxxxxxxx/xxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxx.xx	predictive	عالي
109	File	xxxxxxxxxxx_xxxxx.xxx	predictive	عالي
110	File	xxxxxx.xxx	predictive	متوسط
111	File	xxxxxxxxxxxxxx.xxx	predictive	عالي
112	File	xxxxx_xxxxxxx.x	predictive	عالي
113	File	xxxxx_xxxxxxxx.x	predictive	عالي
114	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxxx.xxx	predictive	عالي
115	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	عالي
116	File	xx-xxxxxxxx/xx-xxxxxxxxx.xxx	predictive	عالي
117	File	xx-xxxx.xxx	predictive	متوسط
118	File	xxx/xxxxx/xxxxx.xxx	predictive	عالي
119	File	xx_xxxxxxx.x	predictive	متوسط
120	Library	xxx/xxxxxx.x	predictive	متوسط
121	Library	xxxxxx.xxx	predictive	متوسط
122	Library	xxxxxxxx.xxx	predictive	متوسط
123	Library	xxxxxx.xxx	predictive	متوسط
124	Library	xxx.xxx	predictive	واطئ
125	Argument	-x	predictive	واطئ
126	Argument	/xxx/xxxxxxxxxxx/xxxxxx/xx_xxxxxxxxxx.xxx?xxx=<xxxxx-xxx>/xxxxxxxx=x/xxxxxxx	predictive	عالي
127	Argument	xxxxxxxxx	predictive	متوسط
128	Argument	xxxxx_xx	predictive	متوسط
129	Argument	xxxx	predictive	واطئ
130	Argument	xxxxxxxxx	predictive	متوسط
131	Argument	xxxxxxxxxxxx$xxxxxx	predictive	عالي
132	Argument	xxxx_xxx	predictive	متوسط
133	Argument	xxxxx	predictive	واطئ
134	Argument	xxx	predictive	واطئ
135	Argument	xxxxxxxx	predictive	متوسط
136	Argument	xxx_xxxx	predictive	متوسط
137	Argument	xxxx_xxxx	predictive	متوسط
138	Argument	xx	predictive	واطئ
139	Argument	xx/xxxx	predictive	واطئ
140	Argument	xxxxxxxx/xxx	predictive	متوسط
141	Argument	xx_xxxxxxx_xxxx	predictive	عالي
142	Argument	xxxxxx	predictive	واطئ
143	Argument	xx_xxxxxxx	predictive	متوسط
144	Argument	xxxxxxxx	predictive	متوسط
145	Argument	xxxxxx	predictive	واطئ
146	Argument	xxxx	predictive	واطئ
147	Argument	x_xxx/xxxx	predictive	متوسط
148	Argument	xxxxxx	predictive	واطئ
149	Argument	xxxx_xxxx	predictive	متوسط
150	Argument	xxxxx_xxxx_xxx	predictive	عالي
151	Argument	xxx	predictive	واطئ
152	Argument	xx	predictive	واطئ
153	Argument	xxxxxxx	predictive	واطئ
154	Argument	x/xxxxx	predictive	واطئ
155	Argument	xxx.xx.xxx_xxx	predictive	عالي
156	Argument	xxxxxxxxx	predictive	متوسط
157	Argument	xxxxxxxxxxxxxxxxxxxx	predictive	عالي
158	Argument	xxxxxx_xxxx	predictive	متوسط
159	Argument	xxxxxx_xxxxxx	predictive	عالي
160	Argument	xxxxxxxxxx/xxxxxx/xxxxxxxx/xxxxxx_xxxxx/xxxxxx_xxx	predictive	عالي
161	Argument	xxxx	predictive	واطئ
162	Argument	xx	predictive	واطئ
163	Argument	xxxxxxxxxxxxxxxx	predictive	عالي
164	Argument	xxxxx	predictive	واطئ
165	Argument	xxx_xxx_xxxx	predictive	متوسط
166	Argument	xxxx	predictive	واطئ
167	Argument	xx	predictive	واطئ
168	Argument	xxxxxxxxxxxx	predictive	متوسط
169	Argument	xxxxx	predictive	واطئ
170	Argument	xxxxx/xxxxxxxx	predictive	عالي
171	Argument	xxxxxx	predictive	واطئ
172	Argument	xxx	predictive	واطئ
173	Argument	xxx	predictive	واطئ
174	Argument	xxxxxxxx/xxxxxxxx	predictive	عالي
175	Argument	xxxxx	predictive	واطئ
176	Argument	xxxxx/xxxxxx	predictive	متوسط
177	Argument	x/x	predictive	واطئ
178	Input Value	%x[xx]	predictive	واطئ
179	Input Value	..\	predictive	واطئ
180	Input Value	<xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	عالي
181	Input Value	xxxx	predictive	واطئ
182	Network Port	xxx/xx (xxx)	predictive	متوسط
183	Network Port	xxx/xx (xxxxxx)	predictive	عالي

المصادر (4)

The following list contains external sources which discuss the actor and the associated activities:

التالي ▸نظرة عامة◂ السابق

Might our Artificial Intelligence support you?

Check our Alexa App!