CosmicDuke Analyse
IOB - Indicator of Behavior (5)
Aktivitäten
Interesse
Schwachstellen
IOC - Indicator of Compromise (10)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
| ID | IP-Adresse | Hostname | Akteur | Kampagnen | Identifiziert | Typ | Akzeptanz |
|---|---|---|---|---|---|---|---|
| 1 | 46.246.120.178 | CosmicDuke | 01.01.2021 | verifiziert | High | ||
| 2 | 91.224.141.235 | CosmicDuke | 01.01.2021 | verifiziert | High | ||
| 3 | XX.XXX.XXX.XX | xx-xxxxxx-xx-xxx-xxx-xx.xxxxxx.xx | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | |
| 4 | XXX.XX.XXX.XX | xxxxxxx-xxxx-xxx.xxxx-xxxxxxx.xxx | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | |
| 5 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | ||
| 6 | XXX.XX.XXX.XXX | xxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | |
| 7 | XXX.XXX.XXX.XX | xxx.xxxxxxxxxxxx.xx | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | |
| 8 | XXX.XXX.XX.XXX | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | ||
| 9 | XXX.XXX.XXX.XX | xxx-xxx-xxx-xx.xxxxxx.xxxxxxx.xxx | Xxxxxxxxxx | 01.01.2021 | verifiziert | High | |
| 10 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01.01.2021 | verifiziert | High |
TTP - Tactics, Techniques, Procedures (1)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
| ID | Technique | Schwachstellen | Zugriffsart | Typ | Akzeptanz |
|---|---|---|---|---|---|
| 1 | T1068 | CWE-264 | Execution with Unnecessary Privileges | prädiktiv | High |
Referenzen (2)
The following list contains external sources which discuss the actor and the associated activities: