DNSLock Analyse
IOB - Indicator of Behavior (10)
Aktivitäten
Interesse
Schwachstellen
IOC - Indicator of Compromise (6)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
| ID | IP-Adresse | Hostname | Akteur | Kampagnen | Typ | Akzeptanz |
|---|---|---|---|---|---|---|
| 1 | 18.220.249.233 | ec2-18-220-249-233.us-east-2.compute.amazonaws.com | DNSLock | verifiziert | Medium | |
| 2 | 52.77.199.193 | ec2-52-77-199-193.ap-southeast-1.compute.amazonaws.com | DNSLock | verifiziert | Medium | |
| 3 | XX.XXX.XXX.XX | xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx | Xxxxxxx | verifiziert | Medium | |
| 4 | XX.XXX.XXX.XXX | xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx | Xxxxxxx | verifiziert | Medium | |
| 5 | XX.XXX.XX.XX | Xxxxxxx | verifiziert | High | ||
| 6 | XX.XXX.XXX.XXX | Xxxxxxx | verifiziert | High |
TTP - Tactics, Techniques, Procedures (2)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
| ID | Technique | Schwachstellen | Zugriffsart | Typ | Akzeptanz |
|---|---|---|---|---|---|
| 1 | T1059.007 | CWE-79 | Cross Site Scripting | prädiktiv | High |
| 2 | TXXXX | CWE-XXX | Xxxxxxxxxxxxx | prädiktiv | High |
Referenzen (2)
The following list contains external sources which discuss the actor and the associated activities: