CosmicDuke Analyse
IOB - Indicator of Behavior (5)
Activités
Intérêt
Vulnérabilités
IOC - Indicator of Compromise (10)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
ID | adresse IP | Hostname | Acteur | Campagnes | Identified | Taper | Confiance |
---|---|---|---|---|---|---|---|
1 | 46.246.120.178 | CosmicDuke | 01/01/2021 | verified | Élevé | ||
2 | 91.224.141.235 | CosmicDuke | 01/01/2021 | verified | Élevé | ||
3 | XX.XXX.XXX.XX | xx-xxxxxx-xx-xxx-xxx-xx.xxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | |
4 | XXX.XX.XXX.XX | xxxxxxx-xxxx-xxx.xxxx-xxxxxxx.xxx | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | |
5 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | ||
6 | XXX.XX.XXX.XXX | xxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | |
7 | XXX.XXX.XXX.XX | xxx.xxxxxxxxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | |
8 | XXX.XXX.XX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | ||
9 | XXX.XXX.XXX.XX | xxx-xxx-xxx-xx.xxxxxx.xxxxxxx.xxx | Xxxxxxxxxx | 01/01/2021 | verified | Élevé | |
10 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Élevé |
TTP - Tactics, Techniques, Procedures (1)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
ID | Technique | Vulnérabilités | Vecteur d'accès | Taper | Confiance |
---|---|---|---|---|---|
1 | T1068 | CWE-264 | Execution with Unnecessary Privileges | predictive | Élevé |
Références (2)
The following list contains external sources which discuss the actor and the associated activities: