Duqu Analyse

IOB - Indicator of Behavior (1)

Sprache

en2

Land

Akteure

Aktivitäten

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-AdresseHostnameAkteurKampagnenIdentifiziertTypAkzeptanz
1182.253.220.29jtrustnet.comDuqu27.03.2022verifiziertHigh
2XXX.XXX.XX.XXXxxxxxxxx.xxxxxxxxxxxx.xxx.xxXxxx27.03.2022verifiziertHigh

TTP - Tactics, Techniques, Procedures (1)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlassifizierungSchwachstellenZugriffsartTypAkzeptanz
1T1505CAPEC-108CWE-89SQL InjectionprädiktivHigh

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasseIndicatorTypAkzeptanz
1Filecomersus_optaffiliateregistrationexec.aspprädiktivHigh
2ArgumentxxxxxxxxxprädiktivMedium

Referenzen (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!