Monero Análisis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (54)

Idioma

zh	36
en	16
ja	2

País

cn	50
us	4

Actores

Cobalt Strike	2
Monero	2
pupy	1
Tofsee	1

Interesar

Escribe

Not Defined	18
File Transfer Software	4
Database Software	4
JavaScript Library	4
Content Management System	4

Proveedor

Not Defined	34
Microsoft	4
Aladdin Knowledge Systems	2
D-Link	2
Cakefoundation	2

Producto

Samba	4
PostgreSQL	4
laravel-jqgrid	2
Aladdin Knowledge Systems eSafe Gateway	2
Micro Air Vehicle Link	2

Vulnerabilidad

#	Vulnerabilidad	Base	Temp	0day	Hoy	Exp	Con	EPSS	CTI	CVE
1	CakePHP offset sql injection	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00160	0.07	CVE-2023-22727
2	PHPMailer Phar Deserialization addAttachment escalada de privilegios	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00748	0.00	CVE-2020-36326
3	WordPress Editor divulgación de información	4.3	4.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00656	0.06	CVE-2021-29450
4	PostgreSQL escalada de privilegios	6.0	5.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00062	0.03	CVE-2017-12172
5	PbootCMS function.php parserIfLabel escalada de privilegios	8.0	7.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.52551	0.07	CVE-2022-32417
6	PHP PHAR phar_dir_read desbordamiento de búfer	8.2	8.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00083	0.05	CVE-2023-3824
7	GNUBOARD5 install_db.php sql injection	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00152	0.00	CVE-2020-18662
8	Axios Package Redirect escalada de privilegios	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00274	0.03	CVE-2020-28168
9	Workerman-ThinkPHP-Redis Controller.class.php cross site scripting	4.8	4.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00078	0.00	CVE-2021-43697
10	Aladdin Knowledge Systems eSafe Gateway Filter escalada de privilegios	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01622	0.00	CVE-2001-0521
11	Adminer escalada de privilegios	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00679	0.00	CVE-2018-7667
12	QuiXplorer index.php directory traversal	7.5	7.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.08521	0.00	CVE-2013-1641
13	Softnext SPAM SQR escalada de privilegios	7.2	7.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00143	0.07	CVE-2023-24835
14	Cakefoundation CakePHP Error Message divulgación de información	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00318	0.00	CVE-2011-3712
15	rap2hpoutre Laravel Log Viewer Base64 Encoding escalada de privilegios	7.4	7.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.06360	0.00	CVE-2018-8947
16	UniSharp laravel-filemanager download directory traversal	5.0	5.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.10627	0.03	CVE-2022-40734
17	exceedone Exment/laravel-admin sql injection	7.5	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00129	0.03	CVE-2022-37333
18	laravel-admin escalada de privilegios	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00156	0.03	CVE-2023-24249
19	Laravel destruct escalada de privilegios	7.6	7.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.05	CVE-2021-28254
20	laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00148	0.07	CVE-2021-4262

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	dirección IP	Hostname	Actor	Identified	Escribe	Confianza
1	37.187.154.37	ns320368.ip-37-187-154.eu	Monero	2019-12-15	verified	Alto
2	XX.XX.XXX.XXX		Xxxxxx	2019-12-15	verified	Alto
3	XX.XX.XX.XXX	xx.xx.xx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxx	2019-06-10	verified	Alto
4	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxx	2019-06-10	verified	Alto

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Clase	Vulnerabilidad	Vector de acceso	Escribe	Confianza
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	Alto
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	Alto
3	T1059.007	CAPEC-209	CWE-79	Cross Site Scripting	predictive	Alto
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
5	TXXXX	CAPEC-108	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
6	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Alto
7	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
8	TXXXX	CAPEC-50	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
9	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
10	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto
11	TXXXX	CAPEC-157	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	Alto
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (22)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Clase	Indicator	Escribe	Confianza
1	File	Controller.class.php	predictive	Alto
2	File	data/gbconfiguration.dat	predictive	Alto
3	File	dede\co_do.php	predictive	Alto
4	File	xxxxxxxx	predictive	Medio
5	File	xxxxxxxx.xxx	predictive	Medio
6	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	Alto
7	File	xxxxx.xxx	predictive	Medio
8	File	xxxxxxx_xx.xxx	predictive	Alto
9	File	xxx/xxxxxx/xxxxxxxx/xxxxx/xxxxxxxxx.xxxx	predictive	Alto
10	File	xxxxxx.xx	predictive	Medio
11	File	xxxx-xxxxxx.x	predictive	Alto
12	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	Alto
13	File	xxxx-xxxxxxxx.xxx	predictive	Alto
14	Argument	xxxxxx	predictive	Bajo
15	Argument	xxx	predictive	Bajo
16	Argument	x/xx/xxx	predictive	Medio
17	Argument	xxxxxx	predictive	Bajo
18	Argument	xxxxxxxx[]	predictive	Medio
19	Argument	xxxxxx	predictive	Bajo
20	Argument	xxxxx_xxxxxx	predictive	Medio
21	Argument	xxxxxxxx	predictive	Medio
22	Argument	xxxxxxx_xxx	predictive	Medio

Referencias (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!