URLZone Analyse

IOB - Indicator of Behavior (16)

Zeitverlauf

Sprache

en14
de2

Land

us12
ru2

Akteure

Aktivitäten

Interesse

Zeitverlauf

Typ

Hersteller

Produkt

ThinkPHP2
Server2
GNU wget2
JForum2
Huawei HarmonyOS2

Schwachstellen

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-AdresseHostnameAkteurKampagnenIdentifiziertTypAkzeptanz
135.188.197.118118.197.188.35.bc.googleusercontent.comURLZone10.03.2022verifiziertMedium
2XX.XX.XX.XXXXxxxxxx10.03.2022verifiziertHigh
3XX.XX.XXX.XXXXxxxxxx10.03.2022verifiziertHigh
4XX.XX.XX.XXXXxxxxxx10.03.2022verifiziertHigh
5XXX.XXX.XX.XXXXxxxxxx10.03.2022verifiziertHigh

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSchwachstellenZugriffsartTypAkzeptanz
1T1068CWE-269Execution with Unnecessary PrivilegesprädiktivHigh
2TXXXXCWE-XXXxx XxxxxxxxxprädiktivHigh
3TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxprädiktivHigh

IOA - Indicator of Attack (6)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasseIndicatorTypAkzeptanz
1Filedata/gbconfiguration.datprädiktivHigh
2Fileinc/filebrowser/browser.phpprädiktivHigh
3Filexxxxx.xxxprädiktivMedium
4ArgumentxxxxxxxxxxxxxprädiktivHigh
5ArgumentxxxxprädiktivLow
6ArgumentxxxxxxxxxxprädiktivMedium

Referenzen (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!