CDRThief Analisi

IOB - Indicator of Behavior (10)

Sequenza temporale

Linguaggio

zh8
en2

Nazione

cn10

Attori

Attività

Interesse

Sequenza temporale

Genere

Fornitore

Prodotto

PHP2
Jitsi Meet2
OpenSSH2
eEye Retina WiFi Scanner2
Atlassian JIRA Server2

Vulnerabilità

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDindirizzo IPHostnameAttoreCampagneIdentifiedGenereFiducia
134.94.199.142142.199.94.34.bc.googleusercontent.comCDRThief31/05/2021verifiedMedia
235.236.173.187187.173.236.35.bc.googleusercontent.comCDRThief31/05/2021verifiedMedia
3XXX.XX.XXX.XXXxxxxxxx31/05/2021verifiedAlto
4XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
5XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
6XXX.XXX.XX.XXXXxxxxxxx31/05/2021verifiedAlto

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitàAccesso al vettoreGenereFiducia
1T1006CWE-22Path TraversalpredictiveAlto
2TXXXX.XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveAlto
3TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
4TXXXX.XXXCWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveAlto

IOA - Indicator of Attack (3)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/WEB-INF/web.xmlpredictiveAlto
2Filexxxxxxxx/xxxx_xxxxpredictiveAlto
3Argumentxxx_xxxpredictiveBasso

Referenze (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!