Tspy Análisis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (3)

Idioma

en	4

País

ru	2
ar	2

Actores

Tspy	2
Quasar RAT	1
Remcos	1
Nanocore RAT	1

Interesar

Escribe

SSH Server Software	4

Proveedor

Dropbear	2
Matt Johnston	2

Producto

Dropbear SSH	2
Matt Johnston Dropbear SSH Server	2

Vulnerabilidad

#	Vulnerabilidad	Base	Temp	0day	Hoy	Exp	Con	EPSS	CTI	CVE
1	social-warfare Plugin Stored cross site scripting	5.2	5.0	$0-$5k	$0-$5k	Functional	Official Fix	0.97235	0.02	CVE-2019-9978
2	Matt Johnston Dropbear SSH Server desbordamiento de búfer	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00340	0.02	CVE-2005-4178
3	Dropbear SSH Shell Command Restriction escalada de privilegios	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02835	0.07	CVE-2016-3116

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	dirección IP	Hostname	Actor	Identified	Escribe	Confianza
1	31.220.56.187		Tspy	2022-04-08	verified	Alto
2	89.38.241.133	reverse.burz.store.ro	Tspy	2022-04-08	verified	Alto
3	XXX.XX.XXX.XXX	xxx.xx-xxx-xx-xxx.xx	Xxxx	2022-04-08	verified	Alto
4	XXX.XX.XX.XXX		Xxxx	2022-04-08	verified	Alto
5	XXX.XXX.XXX.XXX	xx-xx.xxxxxxxxxx.xxx	Xxxx	2022-04-08	verified	Alto
6	XXX.XXX.XX.XX	xxxxxxx-xxx.xxxxxx.xxx	Xxxx	2022-04-08	verified	Alto

TTP - Tactics, Techniques, Procedures (1)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilidad	Vector de acceso	Escribe	Confianza
1	T1059.007	CWE-79	Cross Site Scripting	predictive	Alto

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Clase	Indicator	Escribe	Confianza
1	File	wp-admin/admin-post.php?swp_debug=load_options	predictive	Alto
2	Argument	xxx_xxx	predictive	Bajo

Referencias (6)

The following list contains external sources which discuss the actor and the associated activities:

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!