Calypso Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (191)

Linguaggio

en	136
zh	36
it	6
ja	4
de	4

Nazione

us	106
cn	64
gb	6
ro	2
ir	2

Attori

Calypso	12
Cobalt Strike	3
RedLine Stealer	2
pupy	1
Microcin	1

Interesse

Genere

Not Defined	66
Content Management System	22
Operating System	14
Router Operating System	8
Web Server	6

Fornitore

Not Defined	54
Microsoft	8
Cisco	6
Apache	6
Virtual Programming	4

Prodotto

Microsoft Windows	8
Cisco Unified Communications Manager	4
Cisco Unified Communications Manager Session Manag ...	4
FreeBSD	4
Virtual Programming VP-ASP	4

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php escalazione di privilegi	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.91	CVE-2010-0966
2	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash rivelazione di un 'informazione	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
3	Cacti graph_settings.php escalazione di privilegi	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01498	0.02	CVE-2014-5261
4	Linux Kernel File Permission sysctl_net.c net_ctl_permissions escalazione di privilegi	5.1	4.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00042	0.00	CVE-2013-4270
5	Cacti Utility api_poller.php sql injection	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00422	0.02	CVE-2013-1434
6	cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar directory traversal	6.3	6.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00067	0.04	CVE-2022-4065
7	Redis Lua escalazione di privilegi	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.97053	0.00	CVE-2022-0543
8	Sourcecodester Online Project Time Management System Users.php save_employee sql injection	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00939	0.00	CVE-2022-26293
9	Atlassian JIRA Server/Data Center Dashboard Gadgets Preference Resource escalazione di privilegi	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00098	0.00	CVE-2020-36287
10	OpenVPN Access Server LDAP autenticazione debole	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00430	0.04	CVE-2020-8953
11	Navarino Infinity URL rivelazione di un 'informazione	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01867	0.00	CVE-2018-5386
12	jQuery dataType script.js Cross-Domain cross site scripting	5.2	4.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00660	0.04	CVE-2015-9251
13	Craig Patchett Fileseek FileSeek.cgi directory traversal	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04964	0.00	CVE-2002-0611
14	Cacti graph_settings.php sql injection	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00346	0.00	CVE-2014-5262
15	Cacti snmp.php escalazione di privilegi	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01280	0.02	CVE-2013-1435
16	Microsoft Windows Service Pack 3 escalazione di privilegi	5.3	5.1	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00000	0.00
17	Ideal BB.NET forums.aspx cross site scripting	3.5	3.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
18	DCP-Portal forums.php sql injection	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
19	Kayako SupportSuite User Registration cross site scripting	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.00
20	Dovecot escalazione di privilegi	6.5	6.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00275	0.04	CVE-2011-4318

Campagne (1)

These are the campaigns that can be associated with the actor:

Kazakhstan

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Campagne	Identified	Genere	Fiducia
1	5.183.178.181		Calypso	Kazakhstan	01/05/2022	verified	Alto
2	5.188.228.53	indppur1.example.com	Calypso	Kazakhstan	01/05/2022	verified	Alto
3	23.227.207.137	23-227-207-137.static.hvvc.us	Calypso		01/05/2022	verified	Alto
4	45.63.96.120	45.63.96.120.vultrusercontent.com	Calypso		01/05/2022	verified	Alto
5	XX.XX.XXX.XXX	xx.xx.xxx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx		01/05/2022	verified	Alto
6	XX.XXX.XXX.XXX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
7	XX.XXX.XXX.XXX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
8	XX.XXX.XXX.XXX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
9	XXX.XX.XX.XX	xxx.xx.xx.xx.xxxxxxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
10	XXX.XX.XXX.XXX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
11	XXX.XXX.XX.XX	xxx.xxx.xx.xx.xxxxxxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
12	XXX.XXX.XX.XX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
13	XXX.XXX.XXX.XXX		Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
14	XXX.XX.XXX.XXX	xxxxxx.xxxxxxxxxxxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
15	XXX.XXX.XXX.XX	xxxxxxx.xx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
16	XXX.XXX.X.XXX	xxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
17	XXX.XXX.XXX.XXX	xxxxx-xxxxxx.xxxxxxxxxxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto
18	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx	Xxxxxxxxxx	01/05/2022	verified	Alto

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1006	CWE-22	Path Traversal	predictive	Alto
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Alto
3	T1059	CWE-94	Argument Injection	predictive	Alto
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	Alto
5	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
6	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	Alto
7	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Alto
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	Alto
10	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Alto
11	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Alto
12	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Alto
14	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	Alto
15	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto
16	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Alto
17	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	Alto

IOA - Indicator of Attack (97)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	File	.htaccess	predictive	Media
2	File	/admin/user/manage/add	predictive	Alto
3	File	/api.php	predictive	Media
4	File	/export	predictive	Basso
5	File	/iisadmin	predictive	Media
6	File	/inc/jquery/uploadify/uploadify.php	predictive	Alto
7	File	/inc/parser/xhtml.php	predictive	Alto
8	File	/includes/lib/detail.php	predictive	Alto
9	File	/MIME/INBOX-MM-1/	predictive	Alto
10	File	/ptms/classes/Users.php	predictive	Alto
11	File	/public/plugins/	predictive	Alto
12	File	/xxxxxxx/xxxxxxxx/xxxx.xxx	predictive	Alto
13	File	/xxxxxxxx/xxxxxxx.xxx	predictive	Alto
14	File	/xxxxxxxx/xxx/xxxxxxxxx.xxx	predictive	Alto
15	File	/xxx-xxx/xxx.xxx	predictive	Alto
16	File	/xxx/xxxxxxxx.xxx	predictive	Alto
17	File	xxxxxxxxxxx.xxx	predictive	Alto
18	File	xxx_xxxxxx.xxx	predictive	Alto
19	File	xxxxxx.xxx	predictive	Media
20	File	xxx.xxx	predictive	Basso
21	File	xxxxxxxx_xxxxxxx.xxx	predictive	Alto
22	File	xxx.xxx	predictive	Basso
23	File	xxxxxxxxxx.xxx	predictive	Alto
24	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Alto
25	File	xxxxxx.xxx	predictive	Media
26	File	xxxxxxx_xxxxxx.xxx	predictive	Alto
27	File	xxxxxxxx.xxx	predictive	Media
28	File	xxxxxx.xxxx	predictive	Media
29	File	xxxxxx.xxx	predictive	Media
30	File	xxxx.xxx	predictive	Media
31	File	xxxxx_xxxxxxxx.xxx	predictive	Alto
32	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	Alto
33	File	xxxxx_xxxxxx.xxx	predictive	Alto
34	File	xxx/xxxxxx.xxx	predictive	Alto
35	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
36	File	xxxxx.xxx	predictive	Media
37	File	xxxx_xxxxxxxx.xxxx	predictive	Alto
38	File	xxxxxx/xxxxxxxxx.xxx	predictive	Alto
39	File	xxx/xxxx/xx/xxxxxx.xxx	predictive	Alto
40	File	xxx/xxxxxx_xxx.x	predictive	Alto
41	File	xxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxx	predictive	Alto
42	File	xxxxxxxx.xxx	predictive	Media
43	File	xxxxxxxx_xxxx.xxx	predictive	Alto
44	File	xxxxxxxxxxxx_xxxxxxxx.xxx.xxx	predictive	Alto
45	File	xxxxxx.xx	predictive	Media
46	File	xxxxxxxxx.xxx	predictive	Alto
47	File	xxxxxxxxxxxx.xxx	predictive	Alto
48	File	xxxxxxxxxxxxxxxx.xxx	predictive	Alto
49	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	Alto
50	File	xxxx.xxx	predictive	Media
51	File	xxxx-xxx	predictive	Media
52	File	xxxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx.xxxx	predictive	Alto
53	File	xxxxxxxxx.xxx	predictive	Alto
54	File	xxxxxxxxxxx.xxx	predictive	Alto
55	File	xxxxxxx.xxx	predictive	Media
56	File	xxxxxxxx.xxx	predictive	Media
57	File	xx-xxxxx.xxx	predictive	Media
58	Library	xxxxxxx.xxx	predictive	Media
59	Library	xxx/xxxxxx/xxxxxx.xxx	predictive	Alto
60	Library	xxx/xxx.xxx	predictive	Media
61	Library	xxxxxx/xxxxxxxxx/xxxxx.xxx	predictive	Alto
62	Argument	xxxx	predictive	Basso
63	Argument	xxxxxxxx	predictive	Media
64	Argument	xxxxx	predictive	Basso
65	Argument	xxx	predictive	Basso
66	Argument	xxxxxxxx	predictive	Media
67	Argument	xxxx[xxxx]	predictive	Media
68	Argument	xxxxx->xxxx	predictive	Media
69	Argument	xxxx	predictive	Basso
70	Argument	xxxxxxxx	predictive	Media
71	Argument	xxxxxx	predictive	Basso
72	Argument	xxxxxxx[xx_xxx_xxxx]	predictive	Alto
73	Argument	xxxx	predictive	Basso
74	Argument	xxxx/xxxx	predictive	Media
75	Argument	xxxx	predictive	Basso
76	Argument	xx	predictive	Basso
77	Argument	xxxxxxxxxx	predictive	Media
78	Argument	xxxxxxx	predictive	Basso
79	Argument	xxxxxx	predictive	Basso
80	Argument	xxx_xxxxx	predictive	Media
81	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	Alto
82	Argument	xxxxxxx	predictive	Basso
83	Argument	xxxxx	predictive	Basso
84	Argument	xxxxxxxxxxxxxx	predictive	Alto
85	Argument	xxxxxxxxxx	predictive	Media
86	Argument	xxx	predictive	Basso
87	Argument	xxxxxxx_xx	predictive	Media
88	Argument	xxxxxxxxx	predictive	Media
89	Argument	xxxxxx	predictive	Basso
90	Argument	xxxxxxxxx	predictive	Media
91	Argument	xxx	predictive	Basso
92	Argument	xxxx	predictive	Basso
93	Argument	xxxxxxxx	predictive	Media
94	Argument	xxxxxxxx/xxxxxxxx	predictive	Alto
95	Input Value	;xx xxx.xxx.x.xxx xxxx -x /xxx/xxxx;	predictive	Alto
96	Input Value	??x:\	predictive	Basso
97	Network Port	xxx/xxxx (xx-xxx)	predictive	Alto

Referenze (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!