Dkvn Analyse

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (63)

Sprache

en	56
pl	2
de	2
sv	2
it	2

Land

us	58
au	2

Akteure

Dkvn	3
Zbot	1
Emotet	1

Interesse

Typ

Not Defined	12
Content Management System	6
Operating System	2
Cloud Software	2
Chat Software	2

Hersteller

Not Defined	14
Cloudera	2
DZCP	2
Microsoft	2
LogicBoard	2

Produkt

Unix	2
magmi	2
Cloudera HUE	2
DZCP deV!L`z Clanportal	2
Andys Chat	2

Schwachstellen

#	Schwachstelle	Base	Temp	0day	Heute	Aus	Mas	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash Information Disclosure	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php erweiterte Rechte	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.72	CVE-2010-0966
3	magmi ajax_gettime.php Cross Site Scripting	5.2	5.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00195	0.00	CVE-2017-7391
4	Audacity DLL Loader avformat-55.dll erweiterte Rechte	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.00	CVE-2017-1000010
5	Ashley Brown iWeb Server Encoded URL Directory Traversal	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01582	0.03	CVE-2003-0475
6	Cisco IOS Point-to-Point Tunneling Protocol Server Memory Information Disclosure	5.3	5.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00264	0.02	CVE-2016-6398
7	Magento GraphQL API Cross Site Request Forgery	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00070	0.03	CVE-2021-21027
8	Cloudera HUE LdapBackend schwache Authentisierung	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00081	0.00	CVE-2019-7319
9	Microsoft Windows CredSSP schwache Authentisierung	6.2	5.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.70801	0.02	CVE-2018-0886
10	Splunk Enterprise splunk-launch.conf erweiterte Rechte	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00042	0.00	CVE-2017-18348
11	Spidersales viewCart.asp SQL Injection	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00219	0.04	CVE-2004-0348
12	jforum User erweiterte Rechte	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.06	CVE-2019-7550
13	Active Web Softwares Active Business Directory default.asp SQL Injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.00	CVE-2008-5972
14	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	3.25
15	Maran PHP Shop prod.php SQL Injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00137	0.03	CVE-2008-4879
16	X-CMS PHP member_news.php SQL Injection	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00153	0.00	CVE-2018-18887
17	Ecommerce Online Store Kit shop.php SQL Injection	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03763	0.04	CVE-2004-0300
18	StashCat Backend Database Stored Remote Code Execution	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00060	0.00	CVE-2017-11136
19	PHPWind goto.php Redirect	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00348	0.04	CVE-2015-4134
20	BXCP index.php SQL Injection	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00307	0.00	CVE-2006-0821

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP-Adresse	Hostname	Akteur	Identifiziert	Typ	Akzeptanz
1	45.40.183.1	ip-45-40-183-1.ip.secureserver.net	Dkvn	12.04.2022	verifiziert	High
2	XX.XXX.XXX.X	xxxxx.xxxxxxx.xxx	Xxxx	12.04.2022	verifiziert	High
3	XXX.XX.XXX.XXX	xx.xxxxxxx.xxx.xx	Xxxx	12.04.2022	verifiziert	High
4	XXX.XXX.XXX.XXX	xx-xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxx.xxx	Xxxx	12.04.2022	verifiziert	High
5	XXX.XXX.XXX.XXX	xxxxxx.xxx	Xxxx	12.04.2022	verifiziert	High

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Schwachstellen	Zugriffsart	Typ	Akzeptanz
1	T1006	CWE-22	Path Traversal	prädiktiv	High
2	T1059	CWE-94	Argument Injection	prädiktiv	High
3	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	prädiktiv	High
4	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	prädiktiv	High
5	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	prädiktiv	High
6	TXXXX	CWE-XX	Xxx Xxxxxxxxx	prädiktiv	High
7	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	prädiktiv	High
8	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	prädiktiv	High

IOA - Indicator of Attack (31)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Klasse	Indicator	Typ	Akzeptanz
1	File	$SPLUNK_HOME/etc/splunk-launch.conf	prädiktiv	High
2	File	/etc/master.passwd	prädiktiv	High
3	File	/etc/passwd	prädiktiv	Medium
4	File	/forum/away.php	prädiktiv	High
5	File	xxxxxx_xx.x	prädiktiv	Medium
6	File	xxxx/xxxxxxxxxxxxxxx.xxx	prädiktiv	High
7	File	xxxxxxx.xxx	prädiktiv	Medium
8	File	xxxxxxxx.xxx	prädiktiv	Medium
9	File	xxxx.xxx	prädiktiv	Medium
10	File	xxx/xxxxxx.xxx	prädiktiv	High
11	File	xxxxx.xxx	prädiktiv	Medium
12	File	xxxxx-xxx-xxxxxx/xxxxx/xxx/xxxx_xxxxxxx.xxx	prädiktiv	High
13	File	xxxxxx/xxxxxx_xxxx.xxx	prädiktiv	High
14	File	xxxx.xxx	prädiktiv	Medium
15	File	xxxxxxxx.xxx	prädiktiv	Medium
16	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	prädiktiv	High
17	File	xxxx.xxx	prädiktiv	Medium
18	File	xxxxxxxx.xxx	prädiktiv	Medium
19	File	xxxxxxxx.xxx	prädiktiv	Medium
20	Library	xxxxxxxx-xx.xxx	prädiktiv	High
21	Argument	xxxxxx	prädiktiv	Low
22	Argument	xxxxxxxx	prädiktiv	Medium
23	Argument	xxx	prädiktiv	Low
24	Argument	xxxxx	prädiktiv	Low
25	Argument	xx	prädiktiv	Low
26	Argument	xxxxxx	prädiktiv	Low
27	Argument	xxx	prädiktiv	Low
28	Argument	xxxx	prädiktiv	Low
29	Argument	xxx	prädiktiv	Low
30	Argument	xxxxxx	prädiktiv	Low
31	Input Value	%xx%xx%xx	prädiktiv	Medium

Referenzen (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!