ProLock Analyse

IOB - Indicator of Behavior (11)

Chronologie

Langue

en12

De campagne

ru10

Acteurs

Activités

Intérêt

Chronologie

Taper

Fournisseur

Produit

WordPress4
ThemeMakers Accio Responsive Parallax One Page Si ...2
Oracle PeopleSoft Enterprise HRMS2
Micgr Mic Blog2

Vulnérabilités

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadresse IPHostnameActeurCampagnesIdentifiedTaperConfiance
1185.212.128.8alinac4r1.ptr1.ruProLock31/05/2021verifiedÉlevé

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnérabilitésVecteur d'accèsTaperConfiance
1T1068CWE-264Execution with Unnecessary PrivilegespredictiveÉlevé
2TXXXXCWE-XXXxx XxxxxxxxxpredictiveÉlevé
3TXXXXCWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveÉlevé
4TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveÉlevé
5TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveÉlevé

IOA - Indicator of Attack (8)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTaperConfiance
1Filecategory.phppredictiveMoyen
2FileUnlock.exepredictiveMoyen
3Filexx-xxxxx/xxxxx-xxxxxx.xxxpredictiveÉlevé
4Filexx-xxxxxxx/xxxxxxxpredictiveÉlevé
5Filexx-xxxxxxx/xxxxxxx/xxx_xx_xxxxxxx/xx_xxxxx.xxxpredictiveÉlevé
6Argumentxxxx_xxpredictiveFaible
7ArgumentxxxxpredictiveFaible
8Argumentxxxx_xxxxx/xxxx_xxxx/xxxx_xxxxxpredictiveÉlevé

Références (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!