solarmarker Analyse

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Langue

en	788
fr	112
ru	38
de	20
zh	18

De campagne

us	488
fr	128
gb	90
cn	62
de	62

Acteurs

Cobalt Strike	27
solarmarker	18
RecordBreaker	16
Raccoon	15
NetSupportManager RAT	11

Intérêt

Taper

Not Defined	330
Content Management System	72
Operating System	48
WordPress Plugin	38
Web Server	22

Fournisseur

Not Defined	340
Microsoft	62
Apache	24
SourceCodester	16
Apple	12

Produit

Microsoft Windows	30
WordPress	22
Apache HTTP Server	18
Microsoft SQL Server	8
Linux Kernel	8

Vulnérabilités

#	Vulnérabilité	Base	Temp	0day	Aujourd'hui	Exp	Con	EPSS	CTI	CVE
1	nginx elévation de privilèges	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	2.99	CVE-2020-12440
2	Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track cross site request forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00063	0.00	CVE-2022-47166
3	Bitcoin wallet.dat AES Encryption Padding chiffrement faible	7.1	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.07
4	Atmail Remote Code Execution	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00251	0.04	CVE-2013-5033
5	TikiWiki tiki-register.php elévation de privilèges	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01009	1.71	CVE-2006-6168
6	Genetechsolutions Pie Register User Account pie-register.php elévation de privilèges	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.08823	0.02	CVE-2014-8802
7	Microsoft Windows Sysmon Privilege Escalation	8.1	7.4	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00044	0.00	CVE-2022-41120
8	Microsoft Exchange Server Privilege Escalation	8.4	7.9	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00121	0.02	CVE-2022-21980
9	DZCP deV!L`z Clanportal config.php elévation de privilèges	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.68	CVE-2010-0966
10	WordPress WP_Query sql injection	6.3	6.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.93536	0.04	CVE-2022-21661
11	Palo Alto PAN-OS GlobalProtect Clientless VPN buffer overflow	8.8	8.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00112	0.03	CVE-2021-3056
12	WordPress sql injection	6.8	6.7	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00467	0.00	CVE-2022-21664
13	SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection	5.5	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00282	0.04	CVE-2023-0516
14	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.90	CVE-2007-0354
15	Apache HTTP Server mod_rewrite Redirect	6.7	6.7	$25k-$100k	$5k-$25k	Not Defined	Not Defined	0.00258	0.04	CVE-2020-1927
16	Host Discard Service elévation de privilèges	7.3	7.1	$0-$5k	$0-$5k	High	Workaround	0.01500	0.02	CVE-1999-0636
17	Popup Builder Plugin directory traversal	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00088	0.00	CVE-2021-25082
18	Topaz OFD Protection Module Warsaw core.exe elévation de privilèges	6.1	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.17	CVE-2023-5012
19	Foxit PDF Reader exportXFAData Local Privilege Escalation	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.07	CVE-2023-27363
20	Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed buffer overflow	8.3	8.2	$25k-$100k	$0-$5k	High	Official Fix	0.96869	0.13	CVE-2023-4966

IOC - Indicator of Compromise (36)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	adresse IP	Hostname	Acteur	Identified	Taper	Confiance
1	5.181.156.17	no-rdns.mivocloud.com	solarmarker	13/04/2024	verified	Élevé
2	37.120.233.92	no-rdns.m247.com	SolarMarker	01/08/2022	verified	Élevé
3	37.120.237.251		SolarMarker	01/08/2022	verified	Élevé
4	45.42.201.248		SolarMarker	01/08/2022	verified	Élevé
5	46.30.188.221	46.30.188.221.static.quadranet.com	solarmarker	26/08/2023	verified	Élevé
6	77.105.166.247	fleet-impulse.aeza.network	solarmarker	20/01/2024	verified	Élevé
7	78.135.73.148		solarmarker	15/10/2023	verified	Élevé
8	78.135.73.160		solarmarker	15/10/2023	verified	Élevé
9	XX.XXX.XX.XXX	xxxxxxxxx.xxxxxxx.xx	Xxxxxxxxxxx	02/03/2024	verified	Élevé
10	XX.XXX.XX.XXX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
11	XX.XX.XXX.XXX		Xxxxxxxxxxx	09/04/2024	verified	Élevé
12	XX.XXX.XXX.XXX		Xxxxxxxxxxx	09/08/2023	verified	Élevé
13	XX.XXX.XX.XX	xx-xx-xxx-xx-xx-xxxxxx.xxx.xxxxxx-xx-xxxx.xxx	Xxxxxxxxxxx	09/04/2024	verified	Élevé
14	XX.XXX.XXX.XXX		Xxxxxxxxxxx	05/03/2022	verified	Élevé
15	XX.XXX.XXX.XXX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
16	XX.XXX.XXX.XXX	xxxxxxxx.xxxxx.xxxx.xxxxxxx	Xxxxxxxxxxx	09/03/2024	verified	Élevé
17	XXX.XXX.XXX.XXX		Xxxxxxxxxxx	09/04/2024	verified	Élevé
18	XXX.XX.XX.XXX		Xxxxxxxxxxx	15/10/2023	verified	Élevé
19	XXX.XX.XX.XXX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
20	XXX.XX.XX.XXX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
21	XXX.XX.XX.XX		Xxxxxxxxxxx	07/11/2023	verified	Élevé
22	XXX.XX.XX.XXX		Xxxxxxxxxxx	15/10/2023	verified	Élevé
23	XXX.XX.XX.XXX		Xxxxxxxxxxx	23/05/2023	verified	Élevé
24	XXX.XX.XX.XXX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
25	XXX.XX.XXX.XX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
26	XXX.XX.XXX.XXX		Xxxxxxxxxxx	15/10/2023	verified	Élevé
27	XXX.XX.XXX.XX		Xxxxxxxxxxx	26/08/2023	verified	Élevé
28	XXX.XX.XXX.XX		Xxxxxxxxxxx	15/01/2023	verified	Élevé
29	XXX.XX.XXX.XXX		Xxxxxxxxxxx	15/10/2023	verified	Élevé
30	XXX.XX.XX.XXX	xx.xxxxxxxx.xxx	Xxxxxxxxxxx	24/08/2021	verified	Élevé
31	XXX.XX.XXX.XX		Xxxxxxxxxxx	22/06/2023	verified	Élevé
32	XXX.XX.XXX.XXX	xxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxxxxx	09/04/2024	verified	Élevé
33	XXX.XXX.XX.XX		Xxxxxxxxxxx	01/08/2022	verified	Élevé
34	XXX.XX.XX.XXX	xxxxxxxx.xxx	Xxxxxxxxxxx	09/08/2023	verified	Élevé
35	XXX.XXX.XXX.XXX		Xxxxxxxxxxx	07/11/2023	verified	Élevé
36	XXX.XXX.XXX.XXX		Xxxxxxxxxxx	22/06/2023	verified	Élevé

TTP - Tactics, Techniques, Procedures (27)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnérabilités	Vecteur d'accès	Taper	Confiance
1	T1006	CWE-21, CWE-22, CWE-23	Path Traversal	predictive	Élevé
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Élevé
3	T1059	CWE-94, CWE-1321	Argument Injection	predictive	Élevé
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	Élevé
5	T1068	CWE-250, CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	Élevé
6	T1078.001	CWE-259	Use of Hard-coded Password	predictive	Élevé
7	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	Élevé
8	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Élevé
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Élevé
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	Élevé
11	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Élevé
12	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Élevé
13	TXXXX	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	Élevé
14	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	Élevé
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Élevé
16	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Élevé
17	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	Élevé
18	TXXXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	Élevé
19	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	Élevé
20	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	Élevé
21	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	Élevé
22	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Élevé
23	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxxxxx	predictive	Élevé
24	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	Élevé
25	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Élevé
26	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Élevé
27	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	Élevé

IOA - Indicator of Attack (411)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Taper	Confiance
1	File	/api/baskets/{name}	predictive	Élevé
2	File	/api/RecordingList/DownloadRecord?file=	predictive	Élevé
3	File	/api2/html/	predictive	Moyen
4	File	/apiadmin/notice/add	predictive	Élevé
5	File	/apply.cgi	predictive	Moyen
6	File	/calendar/minimizer/index.php	predictive	Élevé
7	File	/classes/master.php?f=delete_order	predictive	Élevé
8	File	/cloud_config/router_post/register	predictive	Élevé
9	File	/debug/pprof	predictive	Moyen
10	File	/ecommerce/support_ticket	predictive	Élevé
11	File	/forms/nslookupHandler	predictive	Élevé
12	File	/Forms/tools_test_1	predictive	Élevé
13	File	/forum/away.php	predictive	Élevé
14	File	/forum/PostPrivateMessage	predictive	Élevé
15	File	/h/autoSaveDraft	predictive	Élevé
16	File	/h/calendar	predictive	Moyen
17	File	/holiday.php	predictive	Moyen
18	File	/home/cavesConsole	predictive	Élevé
19	File	/include/chart_generator.php	predictive	Élevé
20	File	/index.php	predictive	Moyen
21	File	/lam/tmp/	predictive	Moyen
22	File	/librarian/bookdetails.php	predictive	Élevé
23	File	/login/index.php	predictive	Élevé
24	File	/log_download.cgi	predictive	Élevé
25	File	/manager?action=getlogcat	predictive	Élevé
26	File	/mgmt/tm/util/bash	predictive	Élevé
27	File	/modules/profile/index.php	predictive	Élevé
28	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	Élevé
29	File	/oauth/idp/.well-known/openid-configuration	predictive	Élevé
30	File	/out.php	predictive	Moyen
31	File	/p1/p2/:name	predictive	Moyen
32	File	/param.file.tgz	predictive	Élevé
33	File	/patient/appointment.php	predictive	Élevé
34	File	/php-opos/index.php	predictive	Élevé
35	File	/php/ping.php	predictive	Élevé
36	File	/proc/<PID>/mem	predictive	Élevé
37	File	/product.php	predictive	Moyen
38	File	/product_list.php	predictive	Élevé
39	File	/protocol/iscgwtunnel/uploadiscgwrouteconf.php	predictive	Élevé
40	File	/ptms/?page=user	predictive	Élevé
41	File	/scripts/unlock_tasks.php	predictive	Élevé
42	File	/Service/ImageStationDataService.asmx	predictive	Élevé
43	File	/setup/finish	predictive	Élevé
44	File	/spip.php	predictive	Moyen
45	File	/SysInfo1.htm	predictive	Élevé
46	File	/sysinfo_json.cgi	predictive	Élevé
47	File	/xxxxxxxxx/xxxxxxxxxx.xxx	predictive	Élevé
48	File	/xxxxxx/xxxx/xxxxxxx/xxx_xxxxx/xxxxxxxxxx.xxx	predictive	Élevé
49	File	/xxxxxxxx/xxxx	predictive	Élevé
50	File	/xxxxxxx/	predictive	Moyen
51	File	/xxxxxx/xxxx.xxx	predictive	Élevé
52	File	/xxxx/x.xxx	predictive	Moyen
53	File	/xxx/xxx/xx	predictive	Moyen
54	File	/xxx/xxx/xxxxxx	predictive	Élevé
55	File	/xxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxxxxxxx.xxx	predictive	Élevé
56	File	/xxxxxxx/?/xxxxx/xxxx/xxx	predictive	Élevé
57	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	Élevé
58	File	/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxx.xxx	predictive	Élevé
59	File	/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxxxxxx/xxxxxx/xxxxx/	predictive	Élevé
60	File	/xx-xxxx/xxxxxx/x.x/xxxxx?xxx	predictive	Élevé
61	File	/xx-xxxx/xx/xx/xxxxxxxx	predictive	Élevé
62	File	xxxxx.xxx/xxxxx-x.x.xxx/xxxxxxx.xxx/xxxx.xxx	predictive	Élevé
63	File	xxxxxxxxx.xxx	predictive	Élevé
64	File	xxxxx/xxx.xxx	predictive	Élevé
65	File	xxxxx/xxxxxxx_xxxx.xxx	predictive	Élevé
66	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	Élevé
67	File	xxxxx/xxxxxxxxxx_xxxx.xxx	predictive	Élevé
68	File	xxxxx/xxxxxxx_xxxxxx.xxx	predictive	Élevé
69	File	xxxxx/xxxxxx_xxxxxxxx.xxx	predictive	Élevé
70	File	xxxxx/xxxxx.xxx	predictive	Élevé
71	File	xxxxx/xxxxxxxx_xxx.xxx	predictive	Élevé
72	File	xxxxxxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	Élevé
73	File	xxxxxxxxxxxxx/xxxxx.xxx	predictive	Élevé
74	File	xxxxx\xxxxx\xxxxxx_xxxx.xxx	predictive	Élevé
75	File	xxx_xxxxxxx.xxx	predictive	Élevé
76	File	xxxxxxx/xxxx.xxx	predictive	Élevé
77	File	xxxxxx/	predictive	Faible
78	File	xxxx-xxxx.x	predictive	Moyen
79	File	xxxx.xxx.xxx	predictive	Moyen
80	File	xxxxx-xxx.x	predictive	Moyen
81	File	xxxxx/xxx.x	predictive	Moyen
82	File	xxxxx-xxxx/xxxxxx.x	predictive	Élevé
83	File	xxxxxxx.xx	predictive	Moyen
84	File	xxxxxxxxxxxxxx.xxxx	predictive	Élevé
85	File	xx_xxxxx_xxxxx.xxx	predictive	Élevé
86	File	xxxxxx.x	predictive	Moyen
87	File	xxxx.x	predictive	Faible
88	File	x:\xxxxxxx xxxxx\xxxxx xxx\xxxxxx\xxxx.xxx	predictive	Élevé
89	File	xxxxxxxxxxxxxx.xxx	predictive	Élevé
90	File	xxxxxxxxxxx.xxx	predictive	Élevé
91	File	xxxxxxx.xxx	predictive	Moyen
92	File	xxxxxxxx_xxxx.xxx	predictive	Élevé
93	File	xxx_xx.xxx	predictive	Moyen
94	File	xxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxx.xxx	predictive	Élevé
95	File	xxx-xxx/xxxxxxx.xx	predictive	Élevé
96	File	xxx-xxx/xxxx	predictive	Moyen
97	File	xxx-xxx/xxxxx_xxx_xxx	predictive	Élevé
98	File	xxx-xxx/xxxxxxxx.xxx	predictive	Élevé
99	File	xxx/xxxxxxx.xx	predictive	Élevé
100	File	xxx/xxx?xxxx	predictive	Moyen
101	File	xxx/xxxxxxx.xx	predictive	Élevé
102	File	xxxxx_xxxxxx.xxx	predictive	Élevé
103	File	xxxxxx.xxx	predictive	Moyen
104	File	xxxxxxx.xxx	predictive	Moyen
105	File	xxx\xxxxxxxx\xxxxx\xxxxxx\xxx\xxxxxxxxxx.xxxx	predictive	Élevé
106	File	xxxxxx-xxxxxxx-xxxxx.xxx	predictive	Élevé
107	File	xxxxxxxxx.xxx.xxx	predictive	Élevé
108	File	xxxxx/xxxxx.xxx	predictive	Élevé
109	File	xxxx_xxxxx.xxx	predictive	Élevé
110	File	xxxxxxx.xxx	predictive	Moyen
111	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	Élevé
112	File	xxxxx/xxxx/xxxxxxxx	predictive	Élevé
113	File	xxxxxxx/xxx/xxxxxxxx.x	predictive	Élevé
114	File	xxx.xxx	predictive	Faible
115	File	xxxxxx/xxx/xxxx.xxx	predictive	Élevé
116	File	xxxxx.xxx	predictive	Moyen
117	File	xxxxx_xxxxxxxxxxxx.xxxxxx	predictive	Élevé
118	File	xx/xxxxx/xxxxxx_xxxxx.xxx	predictive	Élevé
119	File	xxxxxxxx/xxxxxx-xxxx.xxx	predictive	Élevé
120	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxxx_xxx_xxx.x	predictive	Élevé
121	File	xxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	Élevé
122	File	xxxx.xxx	predictive	Moyen
123	File	xxxxxxxxxxxxxxx.xxx	predictive	Élevé
124	File	xxx/xxxx/xxxx.x	predictive	Élevé
125	File	xxx/xxx/xxx_xxxxxxxx.x	predictive	Élevé
126	File	xxxxx_xxxxx_xxx.x	predictive	Élevé
127	File	xxxxxxxxxxx_xxxxx.xxx	predictive	Élevé
128	File	xxxxxxxxxx.xxx	predictive	Élevé
129	File	xxxxxx_xxx.xxx	predictive	Élevé
130	File	xxxxxxx.xxx	predictive	Moyen
131	File	xxx_xxxxxx.xxx	predictive	Élevé
132	File	xxxxxx/xxxxxxxxxxx	predictive	Élevé
133	File	xxxxxx/xxxxxxxxxxx	predictive	Élevé
134	File	xxxx-xxxxxxx.x	predictive	Élevé
135	File	xxxxxx/xxxxx/xxxx_xxxxxxxx_xxxxxx_xxxx.xxx	predictive	Élevé
136	File	xxxxxx/xxxx/xx/xxxxxxx/xxxxxx.xxx.xxx	predictive	Élevé
137	File	xxxxxx/xxxxxxxxxxx/xxxx_xxxxxxx.xxx	predictive	Élevé
138	File	xxxx.xxx	predictive	Moyen
139	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	Élevé
140	File	xx/xxx/xxxx_xxxxx.x	predictive	Élevé
141	File	xxx-xxxx.x	predictive	Moyen
142	File	xxx.xxx	predictive	Faible
143	File	xxx/xxxxxx.xxx	predictive	Élevé
144	File	xxxxxxxx/xxxxx-xx-xxxxxxxxx.xxx	predictive	Élevé
145	File	xxxxxxxx/xxxxxxxx.xxx	predictive	Élevé
146	File	xxxxxxxx/xxxxxxxx/xxxxx-xxxxxxxx-xxxxx.xxx	predictive	Élevé
147	File	xxxxx.xxx	predictive	Moyen
148	File	xxxxx.xxx	predictive	Moyen
149	File	xxxxx.xxx?xxx=xxxx&xxx=xxxxxxxx	predictive	Élevé
150	File	xxxxxx/xxxxxxxx.xxx	predictive	Élevé
151	File	xxxxxxx/xxxxxxxxxxxxx.xxxx	predictive	Élevé
152	File	xxxxxxxx.xxx	predictive	Moyen
153	File	xxxxxx.xxx/xxxxxx.xxx	predictive	Élevé
154	File	xxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx	predictive	Élevé
155	File	xxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	Élevé
156	File	xxxxx/xxx_xxx.x	predictive	Élevé
157	File	xxxxxxxxxxx/xxx.x	predictive	Élevé
158	File	xxxxxxxxxxx/xxxxxxxxxxxxx.x	predictive	Élevé
159	File	xxxxxxxx.x	predictive	Moyen
160	File	xxxxxxxxx/xxxxxx.xxxxx.xxx	predictive	Élevé
161	File	xxxxxxx/xxx_xxxxxxxx.x	predictive	Élevé
162	File	xxxxx.xxx	predictive	Moyen
163	File	xxxxx.xxx	predictive	Moyen
164	File	xxxxxxxxxx/xxxxxxx.x	predictive	Élevé
165	File	xxxxxxx-xx/xxxxxx/xxx.xx	predictive	Élevé
166	File	xxxxxxxxxxx.xxxxx.xxx	predictive	Élevé
167	File	xxx_xxxxx_xxxx.x	predictive	Élevé
168	File	xxxxxxxxx.xxx	predictive	Élevé
169	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	Élevé
170	File	xxxx.xxxxxx.xx	predictive	Élevé
171	File	xxx_xxxx.xxx	predictive	Moyen
172	File	xxxxx_xxxxxxxx_xxxxx.xxx	predictive	Élevé
173	File	xxxxxx/xxx_xxxxxx/x	predictive	Élevé
174	File	xxxxx/xxxxxx.xxx	predictive	Élevé
175	File	xxxxxxxxxx/xxxxxxxxx/xxxxxxxxxx/xxxxx_xxxxxx.xxxx	predictive	Élevé
176	File	xxx-xxxxxxxx.xxx	predictive	Élevé
177	File	xxxx-xxx/xxxx-xxx/xxx-xxxx.x	predictive	Élevé
178	File	xxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxx	predictive	Élevé
179	File	xxxx.x	predictive	Faible
180	File	xxxxxxxx.xx	predictive	Moyen
181	File	xxxxx/xxxxxxxxxxx/xxxxxxxxxx_xxxxxxxxxxx.xxx	predictive	Élevé
182	File	xxxxxxxx_xxx_xxxxxxxxxx.xxx	predictive	Élevé
183	File	xxxxx.xxx	predictive	Moyen
184	File	xxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]	predictive	Élevé
185	File	xxx_xxxxxxxxxxxx.xxx	predictive	Élevé
186	File	xxxxx_xxxxxx_xxxxxxxx.xxx	predictive	Élevé
187	File	xxxxx.xxx	predictive	Moyen
188	File	xxxxxxxx.xx	predictive	Moyen
189	File	xxxxxxxx.xxx	predictive	Moyen
190	File	xxxxx/xx/xxxxxxxxx/	predictive	Élevé
191	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	Élevé
192	File	xxxxxxx.xxx	predictive	Moyen
193	File	xxxxxx_xxxxxx.xxx	predictive	Élevé
194	File	xxxxxxxx.x	predictive	Moyen
195	File	xxxxxxxx.xxx	predictive	Moyen
196	File	xxxxxx.xx	predictive	Moyen
197	File	xxxxxx-xxxxxxxx.xxx	predictive	Élevé
198	File	xxxxxx-xxxxxxx.xxx	predictive	Élevé
199	File	xxxxxxxx/xxxxx/xxxxxxx.xx	predictive	Élevé
200	File	xxxxx.xxx	predictive	Moyen
201	File	xxxx-xxxxxx.x	predictive	Élevé
202	File	xxxx.xxx	predictive	Moyen
203	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	Élevé
204	File	xxxx.xxx	predictive	Moyen
205	File	xxxx.xxx	predictive	Moyen
206	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	Élevé
207	File	xxxxxxx.xxx	predictive	Moyen
208	File	xxx.xxx	predictive	Faible
209	File	xxx/xxxxxx/xxxxx/xxx.xx	predictive	Élevé
210	File	xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxx.xxxx	predictive	Élevé
211	File	xxx/xxxx/xxxx/xxx/xxxxxx/xxxxx/xx/xxxx/xxxxx.xxxx	predictive	Élevé
212	File	xxx.xxx	predictive	Faible
213	File	xxxxx.xxx	predictive	Moyen
214	File	xxxxxx.xxx	predictive	Moyen
215	File	xxxxxxxxxxx.xxx	predictive	Élevé
216	File	xxxxxx_xxx.xxx	predictive	Élevé
217	File	xxxxxxxxxx.xxx	predictive	Élevé
218	File	xxxxxxxx/xxxxxxxxx.xxxxxxx_xxxxxxxxx.xxx	predictive	Élevé
219	File	xxxxxx-xxxxxx.xxx	predictive	Élevé
220	File	xxxx-xxx	predictive	Moyen
221	File	xxxxxx/	predictive	Faible
222	File	xxxx-xxxxx.xxx	predictive	Élevé
223	File	xxxx-xxxxxxxx.xxx	predictive	Élevé
224	File	xxx-xxxxxxx.x	predictive	Élevé
225	File	xxxxxxxxx.xxx	predictive	Élevé
226	File	xxxxxxxxxx/xxxxxxxxxxx.xx	predictive	Élevé
227	File	xxxxxxxxx/xxxxx/xxxxxx.xx	predictive	Élevé
228	File	xxxx/xxxxxx_xxxxxxxx.xxx	predictive	Élevé
229	File	xxxx/xxxxx.xxx	predictive	Élevé
230	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	Élevé
231	File	xx\xxxxxxx\xxxx-xxxx.xxx	predictive	Élevé
232	File	xxxxxx.xxx	predictive	Moyen
233	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	Élevé
234	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	Élevé
235	File	xxx/xxx.x	predictive	Moyen
236	File	xxxxxx.xxx	predictive	Moyen
237	File	~/xxxx/xxx/xxxxxxx/xxxxxxxxxx/xxxxxx.xxx	predictive	Élevé
238	Library	/xxx/xxx/xxx/xxxx/xxxxxxxxxx/xxxxxx.xxx	predictive	Élevé
239	Library	/_xxx_xxx/xxxxx.xxx	predictive	Élevé
240	Library	xxxxxxxxxxxxxxxx.xxx	predictive	Élevé
241	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	Élevé
242	Library	xxxxx.xxx	predictive	Moyen
243	Library	xxxxxxxxxxxxxx.xxx	predictive	Élevé
244	Library	xxx/xxxxxxxxx/xxxx/xxxx_xxxxxxxxxxx.x	predictive	Élevé
245	Library	xxx/xxx-xxxxxxxxxx.xxx	predictive	Élevé
246	Library	xxx/xxxxxx.xx	predictive	Élevé
247	Library	xxxxxxx/xxx/xxxxxxx.xxx	predictive	Élevé
248	Library	xxx.xxx	predictive	Faible
249	Library	xxxxx.xxx	predictive	Moyen
250	Library	xxxxxxxxxxxxxx.xxxxx	predictive	Élevé
251	Argument	$_xxx	predictive	Faible
252	Argument	$_xxxxxx['xxxxxx_xxxxxxxx']	predictive	Élevé
253	Argument	-x	predictive	Faible
254	Argument	xxxxxxx_xxxxxx	predictive	Élevé
255	Argument	xxxxxx	predictive	Faible
256	Argument	xxxxxxx_xxxx	predictive	Moyen
257	Argument	xxxxxx_xxxx	predictive	Moyen
258	Argument	xxxxxx_xxxx	predictive	Moyen
259	Argument	xxxxxxxx	predictive	Moyen
260	Argument	xxxx_xxxx	predictive	Moyen
261	Argument	xxx_xxxx_xxxxx	predictive	Élevé
262	Argument	xxxxxxxxx	predictive	Moyen
263	Argument	xxx	predictive	Faible
264	Argument	xxx	predictive	Faible
265	Argument	xxxx	predictive	Faible
266	Argument	xxxxxxxxx	predictive	Moyen
267	Argument	xxxxxxx	predictive	Faible
268	Argument	xxxxxxx/xxxxxxxx/xxxx	predictive	Élevé
269	Argument	xxxxxxxxx	predictive	Moyen
270	Argument	xxxxxx	predictive	Faible
271	Argument	xxxxxxx	predictive	Faible
272	Argument	xxxxxxx	predictive	Faible
273	Argument	xxxxxxx/xxxxxxx/xxxxxxx_xxxxxxxxxx/xxxxxxx_xxxxxx/xxxxxxxx/xxxx_xxxxx	predictive	Élevé
274	Argument	xxxxxxxxx[x]	predictive	Moyen
275	Argument	xxxx/xxxx	predictive	Moyen
276	Argument	xxxxx	predictive	Faible
277	Argument	xxxxxxxxxxx	predictive	Moyen
278	Argument	xxxxxxxxxxxxxxxxx	predictive	Élevé
279	Argument	xxxx	predictive	Faible
280	Argument	xxxxxxxxxxx	predictive	Moyen
281	Argument	xxxxxxxxxxx/xxxxxxxx/xxx/xxxxx	predictive	Élevé
282	Argument	xxxxxxx	predictive	Faible
283	Argument	xxxxxx_xx	predictive	Moyen
284	Argument	xxxxxxx	predictive	Faible
285	Argument	xxxxx	predictive	Faible
286	Argument	xxxxxxxxxxxxxxx	predictive	Élevé
287	Argument	xxx_xx	predictive	Faible
288	Argument	xxxxx	predictive	Faible
289	Argument	xxxxx/xxxxx/xxxxx/xxxxxxxx	predictive	Élevé
290	Argument	xxxxxxxx-xxxxxx	predictive	Élevé
291	Argument	xxxxxxxx	predictive	Moyen
292	Argument	xxxxxxxx	predictive	Moyen
293	Argument	xxxx_xxxx	predictive	Moyen
294	Argument	xxx_xxx	predictive	Faible
295	Argument	xxxxxxxxxxx	predictive	Moyen
296	Argument	xxxx	predictive	Faible
297	Argument	xxxxxxxx	predictive	Moyen
298	Argument	xxxx	predictive	Faible
299	Argument	xxx	predictive	Faible
300	Argument	xxxx	predictive	Faible
301	Argument	xxxx	predictive	Faible
302	Argument	xxxx_xxxxx	predictive	Moyen
303	Argument	xx	predictive	Faible
304	Argument	xx	predictive	Faible
305	Argument	xx/xxxx_xxxxx/xxxxx/xxx/xxx/xxx_xx/xxxx_xxxxxx/xxxxxxxx/xxxxxxx	predictive	Élevé
306	Argument	xx/xxxx	predictive	Faible
307	Argument	xxxx/xxx/xxxxxxxx/xxxxx/xxxx/xxxx	predictive	Élevé
308	Argument	xxxxxxxxxxxxxxxx	predictive	Élevé
309	Argument	xx_xxxxx	predictive	Moyen
310	Argument	xxxxxx	predictive	Faible
311	Argument	xxxx_xx	predictive	Faible
312	Argument	xxxxxxxx[xx]	predictive	Moyen
313	Argument	xxxx/xxxxxx_xxxx	predictive	Élevé
314	Argument	xxxx/xxx_xxxxxxxxx	predictive	Élevé
315	Argument	xxxxxxxxxx	predictive	Moyen
316	Argument	xxxxxxxx_xxxx	predictive	Élevé
317	Argument	xxxxx	predictive	Faible
318	Argument	xxx_xxxx	predictive	Moyen
319	Argument	xxxxx/xxxxx_xxxxxxxx/xxxx	predictive	Élevé
320	Argument	xx_xxxxxx	predictive	Moyen
321	Argument	xxxx x xxxx	predictive	Moyen
322	Argument	xxxxxx xxxxxxx	predictive	Élevé
323	Argument	xxx_xx	predictive	Faible
324	Argument	xxx_xxxx	predictive	Moyen
325	Argument	xxxxxx	predictive	Faible
326	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	Élevé
327	Argument	x/x	predictive	Faible
328	Argument	xxxx	predictive	Faible
329	Argument	xxxx/xxx	predictive	Moyen
330	Argument	xxxxxxx	predictive	Faible
331	Argument	xxxxxx	predictive	Faible
332	Argument	xxx/xxxxxx/xxxxx/xxx/xxxxxx/xxxxxx/xxxxxxxx/xxxx	predictive	Élevé
333	Argument	xxxx	predictive	Faible
334	Argument	xxxxxxxxxxxxxx	predictive	Élevé
335	Argument	xxx	predictive	Faible
336	Argument	xxxxxx.xxxxxxx	predictive	Élevé
337	Argument	xx	predictive	Faible
338	Argument	xxxxx	predictive	Faible
339	Argument	xxxx	predictive	Faible
340	Argument	xxxxxxxx	predictive	Moyen
341	Argument	xxxxxxxx	predictive	Moyen
342	Argument	xxxx	predictive	Faible
343	Argument	xxxx_xxx	predictive	Moyen
344	Argument	xxxxxxxxxxxxx	predictive	Élevé
345	Argument	xxxxx_xxxx_xxxx	predictive	Élevé
346	Argument	xxxx_xxxx/xxxxx_xxxx	predictive	Élevé
347	Argument	xxxx_xx	predictive	Faible
348	Argument	xxxxxxxx	predictive	Moyen
349	Argument	xxxxxxx_xx/xxxx_xx	predictive	Élevé
350	Argument	xxxxxxxxx_	predictive	Moyen
351	Argument	xxxxxxx/xxxxx	predictive	Élevé
352	Argument	xxxxxxxxx_xx	predictive	Moyen
353	Argument	xxx_xxx	predictive	Faible
354	Argument	xxxxxx	predictive	Faible
355	Argument	xxxxxx	predictive	Faible
356	Argument	xxxxxxxxxx	predictive	Moyen
357	Argument	xxxxxx_xxx	predictive	Moyen
358	Argument	xxxxxx_xxxxxxxx	predictive	Élevé
359	Argument	xxxxxx	predictive	Faible
360	Argument	xxxxxxx_xx	predictive	Moyen
361	Argument	xxxx_xxxx	predictive	Moyen
362	Argument	xxxxxxxxxxx	predictive	Moyen
363	Argument	xxx	predictive	Faible
364	Argument	xxxx_xx	predictive	Faible
365	Argument	xxxx_xxxx	predictive	Moyen
366	Argument	xxxxxxx/xxxxxxx	predictive	Élevé
367	Argument	xxx_xxxx[x][]	predictive	Élevé
368	Argument	xxxxx	predictive	Faible
369	Argument	xx_xxxx	predictive	Faible
370	Argument	xxxxxxxxxxxxxxx	predictive	Élevé
371	Argument	xxxxx_xxxxx	predictive	Moyen
372	Argument	xxxxxxxx	predictive	Moyen
373	Argument	xxxx_xx	predictive	Faible
374	Argument	xxxxxxxxx	predictive	Moyen
375	Argument	xxxxx	predictive	Faible
376	Argument	xxx	predictive	Faible
377	Argument	xxxx	predictive	Faible
378	Argument	xxxx	predictive	Faible
379	Argument	xxxx-xxxxx	predictive	Moyen
380	Argument	xxxxxxxx	predictive	Moyen
381	Argument	xxxxxxxx	predictive	Moyen
382	Argument	xxxx xxxx	predictive	Moyen
383	Argument	xxxxxxxx	predictive	Moyen
384	Argument	xxxx	predictive	Faible
385	Argument	xxxx/xx/xxxx/xxx	predictive	Élevé
386	Argument	x-xxxxxxxxx-xxx	predictive	Élevé
387	Argument	_xxxxxx[xxxxxxxx_xxxx]	predictive	Élevé
388	Input Value	"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	Élevé
389	Input Value	%xx%xxxxxxxx%xx%xx	predictive	Élevé
390	Input Value	%xx	predictive	Faible
391	Input Value	' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxx	predictive	Élevé
392	Input Value	.%xx.../.%xx.../	predictive	Élevé
393	Input Value	../../../../../xxx/xxx/xxxxx/xxxx/xxxxxxxx/xxxxx/xxx.xxx	predictive	Élevé
394	Input Value	/%xx	predictive	Faible
395	Input Value	/../	predictive	Faible
396	Input Value	xxxxxxxxx--><xxxxxx%xx>xxxxx(xxxx)</xxxxxx><!--	predictive	Élevé
397	Input Value	xxxxxxxxxxxxxxxx	predictive	Élevé
398	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	Élevé
399	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxx	predictive	Élevé
400	Input Value	xxxxxxx -xxx	predictive	Moyen
401	Input Value	\x	predictive	Faible
402	Input Value	\|xxx${xxx}	predictive	Moyen
403	Network Port	xxxx	predictive	Faible
404	Network Port	xxxx	predictive	Faible
405	Network Port	xxxxx	predictive	Faible
406	Network Port	xxxx xxxx	predictive	Moyen
407	Network Port	xxx/xx (xxx xxxxxxxx)	predictive	Élevé
408	Network Port	xxx/xxx	predictive	Faible
409	Network Port	xxx/xxx	predictive	Faible
410	Network Port	xxx/xxxx	predictive	Moyen
411	Network Port	xxx/xxxx	predictive	Moyen

Références (8)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

https://tria.ge/210824-j7r4atcshe/behavioral2

◂ PrécédentAperçuSuivant ▸

Do you know our Splunk app?

Download it now for free!