DanaBot Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (39)

Sequenza temporale

Linguaggio

en36
de4

Nazione

us36
de2

Attori

DanaBot1
Conti1
Gootkit1
Gozi1
Cobalt Strike1

Attività

Interesse

Sequenza temporale

Genere

Not Defined12
Web Server4
Programming Language Software4
Operating System2
Network Encryption Software2

Fornitore

Not Defined16
Microsoft8
Crestron2
PEAR2
SuSE2

Prodotto

Microsoft IIS4
Crestron AM-1002
Crestron AM-1012
PEAR HTTP_Upload2
CRIU2

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConEPSSCTICVE
1Kodi Thumbnail directory traversal5.44.9$0-$5k$0-$5kHighNot Defined0.037200.04CVE-2017-5982
2Crestron AM-100/AM-101 HTTP Endpoint file_transfer.cgi escalazione di privilegi9.89.7$0-$5k$0-$5kProof-of-ConceptWorkaround0.973080.02CVE-2019-3929
3Crestron AM-100/AM-101 libAwgCgi.so PARSERtoCHAR buffer overflow9.99.7$0-$5k$0-$5kNot DefinedWorkaround0.016990.03CVE-2019-3930
4Apache Tomcat Chunked HTTP Request denial of service5.35.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.038440.00CVE-2014-0075
5Microsoft IIS IP/Domain Restriction escalazione di privilegi6.55.7$25k-$100k$0-$5kUnprovenOfficial Fix0.008170.32CVE-2014-4078
6WordPress URL Validator Redirect6.66.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.005090.03CVE-2018-10101
7Microsoft IIS cross site scripting5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.16CVE-2017-0055
8Microsoft Office RTF buffer overflow7.06.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.104180.00CVE-2018-0797
9Microsoft Office buffer overflow7.87.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.247270.00CVE-2016-3364
10CRIU Service Daemon rivelazione di un 'informazione6.76.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.00CVE-2015-5231
11vzctl DiskDescriptor.xml escalazione di privilegi5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000680.03CVE-2015-6927
12OpenStack Neutron escalazione di privilegi4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.001940.00CVE-2014-6414
13Kerberos Ticket randkey escalazione di privilegi4.23.7$0-$5k$0-$5kUnprovenOfficial Fix0.002650.02CVE-2014-5351
14Zabbix Configuration Script userparameter_mysql.conf sql injection7.26.5$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.021240.00CVE-2016-4338
15cPanel Script escalazione di privilegi5.34.8$0-$5k$0-$5kProof-of-ConceptUnavailable0.000000.03
16cPanel entropysearch.cgi Website rivelazione di un 'informazione5.34.8$0-$5k$0-$5kProof-of-ConceptUnavailable0.000000.00
17ZeroShell Net Services kerbynet escalazione di privilegi7.36.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.03
18BoZoN escalazione di privilegi6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.00
19Pagekit Password escalazione di privilegi6.35.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000000.00
20PEAR HTTP_Upload Upload.php escalazione di privilegi7.36.6$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.00

IOC - Indicator of Compromise (188)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDindirizzo IPHostnameAttoreCampagneIdentifiedGenereFiducia
15.8.55.205carpbaboon.comDanaBot31/05/2021verifiedAlto
25.9.224.217static.217.224.9.5.clients.your-server.deDanaBot04/08/2022verifiedAlto
35.189.253.131ykfygylyfdtuk.jhyDanaBot29/10/2023verifiedAlto
45.189.253.176svdjchfdmsohd.comDanaBot29/10/2023verifiedAlto
56.43.51.17Danabot02/03/2019verifiedAlto
68.209.99.230DanaBot18/12/2023verifiedAlto
78.222.178.224DanaBot28/03/2024verifiedAlto
823.106.122.14DanaBot04/08/2022verifiedAlto
923.106.123.224DanaBot20/04/2022verifiedAlto
1023.106.123.249DanaBot04/03/2022verifiedAlto
1123.254.129.180hwsrv-1035456.hostwindsdns.comDanaBot15/04/2022verifiedAlto
1223.254.133.7client-23-254-133-7.hostwindsdns.comDanaBot27/03/2022verifiedAlto
1323.254.134.53hwsrv-1045495.hostwindsdns.comDanaBot22/03/2022verifiedAlto
1423.254.144.209client-23-254-144-209.hostwindsdns.comDanaBot03/06/2023verifiedAlto
1523.254.164.106hwsrv-978595.hostwindsdns.comDanaBot09/03/2022verifiedAlto
1623.254.201.147WIN-FRBTX5I65I.comDanaBot06/03/2022verifiedAlto
1723.254.217.192hwsrv-982289.hostwindsdns.comDanaBot26/03/2022verifiedAlto
1823.254.226.52client-23-254-226-52.hostwindsdns.comDanaBot22/02/2022verifiedAlto
1923.254.226.136box.sostenibilidadsocia.onlineDanaBot22/03/2023verifiedAlto
2023.254.227.74hwsrv-1042388.hostwindsdns.comDanaBot04/06/2023verifiedAlto
2123.254.228.176client-23-254-228-176.hostwindsdns.comDanaBot18/04/2022verifiedAlto
2226.64.30.13Danabot02/03/2019verifiedAlto
2331.214.157.12mail.private-mail.nlDanaBot31/05/2021verifiedAlto
2434.16.181.00.181.16.34.bc.googleusercontent.comDanaBot18/12/2023verifiedMedia
2534.22.151.4545.151.22.34.bc.googleusercontent.comDanaBot28/03/2024verifiedMedia
2634.65.140.140140.140.65.34.bc.googleusercontent.comDanaBot24/03/2024verifiedMedia
2734.73.147.8686.147.73.34.bc.googleusercontent.comDanaBot24/03/2024verifiedMedia
2834.77.22.163163.22.77.34.bc.googleusercontent.comDanaBot28/03/2024verifiedMedia
2934.90.104.246246.104.90.34.bc.googleusercontent.comDanaBot12/01/2023verifiedMedia
3034.95.4.102102.4.95.34.bc.googleusercontent.comDanaBot27/12/2022verifiedMedia
3134.105.203.100100.203.105.34.bc.googleusercontent.comDanaBot05/01/2023verifiedMedia
3234.125.56.4040.56.125.34.bc.googleusercontent.comDanaBot13/03/2024verifiedMedia
3334.129.5.173173.5.129.34.bc.googleusercontent.comDanaBot13/08/2021verifiedMedia
3434.168.202.9191.202.168.34.bc.googleusercontent.comDanaBot28/03/2024verifiedMedia
3534.247.234.201ec2-34-247-234-201.eu-west-1.compute.amazonaws.comDanaBot12/01/2023verifiedMedia
3635.194.193.144144.193.194.35.bc.googleusercontent.comDanaBot12/01/2023verifiedMedia
3735.199.99.1616.99.199.35.bc.googleusercontent.comDanaBot05/01/2023verifiedMedia
3835.199.103.55.103.199.35.bc.googleusercontent.comDanaBot03/02/2023verifiedMedia
39XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx18/12/2023verifiedMedia
40XX.XXX.XXX.XXxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx05/01/2023verifiedMedia
41XX.XXX.XXX.XXxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx27/12/2022verifiedMedia
42XX.XXX.XX.Xx.xx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx24/03/2024verifiedMedia
43XX.XXX.XX.XXXxxx.xx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx13/08/2021verifiedMedia
44XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx24/03/2024verifiedMedia
45XX.XXX.XXX.XXxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx27/12/2022verifiedMedia
46XX.XXX.XX.XXxx.xx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx05/01/2023verifiedMedia
47XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx13/03/2024verifiedMedia
48XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx28/03/2024verifiedMedia
49XX.XXX.XXX.XXxx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxx18/12/2023verifiedMedia
50XX.XXX.XXX.XXXXxxxxxx23/06/2022verifiedAlto
51XX.XXX.XX.XXxxxxxxxxxx.xxxxx-xxxxxx.xxxXxxxxxx05/05/2021verifiedAlto
52XX.XX.XX.XXXXxxxxxx16/05/2022verifiedAlto
53XX.XXX.XXX.XXXXxxxxxx02/03/2019verifiedAlto
54XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxx16/05/2022verifiedMedia
55XX.XX.XXX.XXXxxxxxx.xxxxxxxxxx.xxxXxxxxxx29/10/2023verifiedAlto
56XX.XXX.XXX.XXXxxx.xxxxxxxxxxxxxx.xxxXxxxxxx25/06/2022verifiedAlto
57XX.XXX.XXX.XXXxxxxxx22/02/2022verifiedAlto
58XX.XXX.XXX.XXXXxxxxxx04/03/2022verifiedAlto
59XX.XXX.XXX.XXXXxxxxxx16/05/2022verifiedAlto
60XX.XXX.XX.XXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxxxxxx06/02/2024verifiedAlto
61XX.XXX.XXX.XXXxxxxxx25/03/2022verifiedAlto
62XX.XX.XXX.XXXXxxxxxx31/05/2021verifiedAlto
63XX.XXX.XX.XXXXxxxxxx18/12/2023verifiedAlto
64XX.XXX.XX.XXXXxxxxxx18/12/2023verifiedAlto
65XX.XXX.XXX.XXXxxxxxx18/12/2023verifiedAlto
66XX.XXX.XXX.XXxxxxxx18/12/2023verifiedAlto
67XX.XX.X.XXXXxxxxxx16/05/2022verifiedAlto
68XX.XXX.XXX.XXXxxxxx.xx-xx-xxx-xxx.xxXxxxxxx16/05/2022verifiedAlto
69XX.XXX.XX.XXxxxx.xx-xx-xxx-xx.xxxXxxxxxx16/05/2022verifiedAlto
70XX.XXX.XX.XXxxxxxx02/03/2019verifiedAlto
71XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xx-xxxxxxxxx-x.xxxxxxx.xxxxxxxxx.xxxXxxxxxx12/11/2022verifiedMedia
72XX.XX.XXX.XXxx.xxx.xx.xx.xxxxx.xx.xx.xxxxxxx.xxxxxxx.xxx.xxXxxxxxx16/05/2022verifiedAlto
73XX.XXX.XXX.XXXxxx.xxx.xxx.xx.xxxx.xx.xx.xxxxxxx.xxxxxxx.xxx.xxXxxxxxx02/03/2019verifiedAlto
74XX.XXX.XXX.XXXXxxxxxx02/03/2019verifiedAlto
75XX.XXX.XX.XXxx.xxx.xx.xx.xxxxxx.xxxxxxxxx.xxxXxxxxxx16/05/2022verifiedAlto
76XX.XX.XXX.XXXxxxxxxxxxxx.xxxXxxxxxx04/07/2022verifiedAlto
77XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xxxxx.xxx.xx.xxxXxxxxxx16/05/2022verifiedAlto
78XX.XXX.XX.XXXxxxxxx16/05/2022verifiedAlto
79XX.XX.XXX.XXXXxxxxxx16/05/2022verifiedAlto
80XX.XX.XX.XXxxx-xx-xx-xx.xxxx.xxx.xxxx.xxxxxx.xxxXxxxxxx16/05/2022verifiedAlto
81XX.XX.XX.XXXXxxxxxx10/02/2022verifiedAlto
82XX.XXX.XX.XXXxxxxxxxxx.xxxx.x-xxxxxxxxx.xxXxxxxxx16/05/2022verifiedAlto
83XX.XXX.XXX.XXXxxxxxx31/03/2022verifiedAlto
84XX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxx.xxxxxxxxxx.xx.xxXxxxxxx22/02/2022verifiedAlto
85XX.XX.X.XXXXxxxxxx16/05/2022verifiedAlto
86XX.XX.X.XXXXxxxxxx16/05/2022verifiedAlto
87XX.XXX.XX.XXXXxxxxxx10/02/2022verifiedAlto
88XX.XXX.XX.XXXXxxxxxx10/02/2022verifiedAlto
89XX.XXX.XX.XXXXxxxxxx02/03/2019verifiedAlto
90XX.XXX.XX.XXxxxxxxxx.xxxxx.xxxxxXxxxxxx15/02/2024verifiedAlto
91XX.XXX.XXX.XXXxxxxxx29/10/2023verifiedAlto
92XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxx.xxxxxxxxxxx.xxXxxxxxx02/03/2019verifiedAlto
93XX.XXX.XXX.XXXxxxxxxxxxxx-xxxxx.xxxx.xxxxxxxXxxxxxx18/12/2023verifiedAlto
94XX.XXX.XXX.XXxx.xxx.xxx.xx.xxxxx.xxxXxxxxxx10/02/2022verifiedMedia
95XXX.XXX.XXX.XXXXxxxxxx11/03/2022verifiedAlto
96XXX.XXX.XXX.Xxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx13/04/2022verifiedAlto
97XXX.XXX.XXX.XXxxxxxx-xxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxx04/04/2022verifiedAlto
98XXX.XXX.XX.XXXxxxxxx22/03/2023verifiedAlto
99XXX.XXX.XXX.XXXxxxxxx22/03/2023verifiedAlto
100XXX.XXX.XXX.XXxxxxxxxxxxxxxx.xxx-xx.xxxx.xx.xxXxxxxxx16/05/2022verifiedAlto
101XXX.XXX.XX.XXXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxxxxxx06/02/2024verifiedAlto
102XXX.XX.XXX.XXXxxxxxx16/05/2022verifiedAlto
103XXX.XX.XX.XXxx.xx.xx.xxx.xxxxx.xx.xx.xxxxxxx.xxxxxxx.xxx.xxXxxxxxx16/05/2022verifiedAlto
104XXX.XXX.XXX.XXXXxxxxxx31/03/2022verifiedAlto
105XXX.XXX.XXX.XXXXxxxxxx25/06/2022verifiedAlto
106XXX.XX.XX.XXXXxxxxxx13/03/2024verifiedAlto
107XXX.XXX.XXX.XXXXxxxxxx02/03/2019verifiedAlto
108XXX.XX.XXX.XXxxxxx-xxxxxx.xxxxxxxxxxxx.xxxXxxxxxx18/06/2022verifiedAlto
109XXX.XX.XXX.XXxxxxxx-xxx-xx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxx16/11/2023verifiedAlto
110XXX.XX.XXX.XXXxxxxxx-xxx-xx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx14/01/2022verifiedAlto
111XXX.XXX.XX.XXxxxxxxxxxxx-xxx-xxx-xx-xx.xxxx-xxxxxxx.xxxxxxx.xx.xxxxxxxxxx.xxxXxxxxxx16/05/2022verifiedAlto
112XXX.XX.XXX.XXXXxxxxxx02/03/2019verifiedAlto
113XXX.XX.XXX.XXXxxxxxxxxxxxx.xxxxxxxx.xxxxxxxxxxxxx.xxx.xxXxxxxxx10/02/2022verifiedAlto
114XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xx-xxxx.xxxxXxxxxxx31/05/2021verifiedAlto
115XXX.XXX.XX.XXXxxx-xxx-xx-xxx.xxxxxx.xxxx.xxXxxxxxx16/05/2022verifiedAlto
116XXX.XXX.XXX.XXXXxxxxxx16/05/2022verifiedAlto
117XXX.XX.XXX.XXxxxxxx16/05/2022verifiedAlto
118XXX.XX.XX.XXXxxxxxx20/04/2022verifiedAlto
119XXX.XXX.XXX.XXxxxxxx16/05/2022verifiedAlto
120XXX.XXX.XXX.XXxxxxxx.xxxxxxxxxxxxx.xx.xxxXxxxxxx04/10/2022verifiedAlto
121XXX.XX.XXX.XXXxxxxxx02/03/2019verifiedAlto
122XXX.XX.XX.XXXxxx-xx-xx-xxx.xxxxxx.xxxxxxx.xxxXxxxxxx29/10/2023verifiedAlto
123XXX.XX.XXX.XXXxxx-xx-xxx-xxx.xxxxxx.xxxx.xxXxxxxxx29/10/2023verifiedAlto
124XXX.XX.XXX.XXXxxx-xxx-xx-xxx.xxxxxxx-xxxXxxxxxx16/05/2022verifiedAlto
125XXX.XXX.XXX.XXxxx.xxxxxxx.xxxxXxxxxxx03/10/2023verifiedAlto
126XXX.XXX.X.XXXxxxxxx31/05/2021verifiedAlto
127XXX.XXX.X.XXXXxxxxxx31/05/2021verifiedAlto
128XXX.XXX.X.XXXXxxxxxx31/05/2021verifiedAlto
129XXX.XXX.X.XXXXxxxxxx31/05/2021verifiedAlto
130XXX.XXX.XXX.XXxxx.x.xxxxxxx.xxxxxXxxxxxx31/05/2021verifiedAlto
131XXX.XX.XXX.XXXXxxxxxx13/08/2021verifiedAlto
132XXX.XXX.XX.XXXxxx.xx.xxx.xxx.xx-xxxx.xxxxXxxxxxx10/02/2022verifiedAlto
133XXX.XX.XXX.XXxxxx-xxxxxxxxx.xxxxxx.xxxXxxxxxx16/05/2022verifiedAlto
134XXX.XX.XX.XXXxxxx.xxxxxxxx.xxXxxxxxx05/05/2021verifiedAlto
135XXX.XX.XX.XXXxxxx.xxxxxxxxxxxxx.xxxXxxxxxx05/05/2021verifiedAlto
136XXX.XX.XX.XXXxxxxxx21/12/2023verifiedAlto
137XXX.XX.XX.XXxxxxxx-xx.xxxx.xxxXxxxxxx13/03/2022verifiedAlto
138XXX.XX.XX.XXXxxxx.xxxxxxxxxx.xxxxxxXxxxxxx16/05/2022verifiedAlto
139XXX.XX.XXX.XXXxxx.xx.xxx.xxx.xxxxx.xxxXxxxxxx10/02/2022verifiedMedia
140XXX.XXX.XXX.XXXXxxxxxx22/02/2022verifiedAlto
141XXX.XXX.XX.XXXxxxxxx29/07/2022verifiedAlto
142XXX.XXX.XX.XXxxxxxxx.xxxxxxxxxxx.xx.xxXxxxxxx22/02/2022verifiedAlto
143XXX.XXX.XXX.XXXXxxxxxx10/02/2022verifiedAlto
144XXX.XXX.XX.XXXxxxxxx29/10/2023verifiedAlto
145XXX.XXX.XX.XXXXxxxxxx29/10/2023verifiedAlto
146XXX.XXX.XXX.XXxxxxxxx.xxxxx-xxxxxxx-xxxx.xxXxxxxxx29/10/2022verifiedAlto
147XXX.XXX.XXX.XXXxxxxxx31/05/2021verifiedAlto
148XXX.XX.XXX.XXxxx-xx-xxx-xx.xx.xxxxx.xxx.xxXxxxxxx20/04/2022verifiedAlto
149XXX.XX.XXX.XXxxxxxxxxx.xxXxxxxxx31/05/2021verifiedAlto
150XXX.XXX.XXX.XXXxxxxxx22/03/2023verifiedAlto
151XXX.X.XX.XXxxx-x-xx-xx-xxxx.xxxxxxxxxxxx.xxxXxxxxxx26/06/2022verifiedAlto
152XXX.X.XX.XXXxxx-x-xx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxxxx16/07/2022verifiedAlto
153XXX.XX.XXX.XXxxxxxx.xxxxxxxxxxxxxxxxxxxx.xxxXxxxxxx25/03/2022verifiedAlto
154XXX.XX.XXX.XXxx.xxx.xx.xxx.xx-xxxx.xxxxXxxxxxx31/05/2021verifiedAlto
155XXX.XX.XXX.XXxx.xxx.xx.xxx.xx-xxxx.xxxxXxxxxxx10/02/2022verifiedAlto
156XXX.XXX.XXX.Xxxxx.xxxxxx-xxxxx.xxxXxxxxxx14/01/2022verifiedAlto
157XXX.XXX.XXX.XXxxxxx-xxxxxx.xxxxxxxxxxxx.xxxXxxxxxx22/02/2022verifiedAlto
158XXX.XXX.XX.Xxxxxxxx.xxXxxxxxx26/06/2022verifiedAlto
159XXX.XXX.XXX.XXxxx-xxx-xxx-xx-xx.xxxxxxxx.xxxXxxxxxx05/05/2021verifiedAlto
160XXX.XXX.XXX.XXxxxxx-xxxxxx.xxxxxxxxxxxx.xxxXxxxxxx30/12/2022verifiedAlto
161XXX.XXX.XXX.XXXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx22/03/2022verifiedAlto
162XXX.XXX.XXX.XXXxxxxxxxxx.xxxXxxxxxx04/03/2023verifiedAlto
163XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx25/04/2022verifiedAlto
164XXX.XXX.XXX.XXXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx15/04/2022verifiedAlto
165XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx25/04/2022verifiedAlto
166XXX.XXX.XXX.Xxxxxxx-xxx-xxx-xxx-x.xxxxxxxxxxxx.xxxXxxxxxx04/08/2022verifiedAlto
167XXX.XXX.XXX.XXxxxxx-xxxxxx.xxxxxxxxxxxx.xxxXxxxxxx12/04/2022verifiedAlto
168XXX.XXX.XXX.XXXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx19/04/2022verifiedAlto
169XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx22/02/2022verifiedAlto
170XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx25/06/2022verifiedAlto
171XXX.XXX.XXX.XXXxxxxxx-xxx-xxx-xxx-xxx.xxxxxxxxxxxx.xxxXxxxxxx26/11/2022verifiedAlto
172XXX.XXX.XXX.XXxxxxxx-xxx-xxx-xxx-xx.xxxxxxxxxxxx.xxxXxxxxxx14/01/2022verifiedAlto
173XXX.XXX.XXX.XXXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx16/05/2022verifiedAlto
174XXX.XXX.XXX.XXxxxxx-xxxxxxx.xxxxxxxxxxxx.xxxXxxxxxx06/03/2022verifiedAlto
175XXX.XX.XX.XXxxxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxXxxxxxx22/02/2022verifiedAlto
176XXX.XX.XXX.XXXxxxxxx22/02/2022verifiedAlto
177XXX.XX.XXX.XXXxxxxxx10/02/2022verifiedAlto
178XXX.XXX.XXX.XXXxxxxxx16/05/2022verifiedAlto
179XXX.XXX.XXX.XXxxxxxxxxxx.xxxxxx-xx-xxxxx.xxxXxxxxxx03/10/2023verifiedAlto
180XXX.XXX.XXX.XXXxx--xxxxx-xxx.xxxxxxxXxxxxxx16/05/2022verifiedAlto
181XXX.XXX.XX.XXXxxxxxx15/02/2024verifiedAlto
182XXX.XXX.XX.XXXxxxxxx22/02/2022verifiedAlto
183XXX.XXX.XXX.XXxxxxx-xxxxx.xxxxxxx.xxxxXxxxxxx04/06/2023verifiedAlto
184XXX.XXX.XX.XXxxxxxx16/05/2022verifiedAlto
185XXX.XXX.XXX.XXxxxxxx02/03/2019verifiedAlto
186XXX.XXX.XXX.XXXxxxxxx16/05/2022verifiedAlto
187XXX.XX.XX.XXXXxxxxxx02/03/2019verifiedAlto
188XXX.XXX.XXX.XXXXxxxxxx16/05/2022verifiedAlto

TTP - Tactics, Techniques, Procedures (9)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitàAccesso al vettoreGenereFiducia
1T1006CWE-22Path TraversalpredictiveAlto
2T1059.007CWE-79Cross Site ScriptingpredictiveAlto
3TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
4TXXXXCWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
5TXXXX.XXXCWE-XXXXxxx XxxxxxxxpredictiveAlto
6TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveAlto
7TXXXXCWE-XXXxx XxxxxxxxxpredictiveAlto
8TXXXXCWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveAlto
9TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (21)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/cgi-bin/kerbynetpredictiveAlto
2File/uncpath/predictiveMedia
3FileDeliver_SendMail.class.phppredictiveAlto
4Filexxxxxxxxxxxxx.xxxpredictiveAlto
5Filexxxx_xxxxxxxx.xxxpredictiveAlto
6Filexxxxx.xxxpredictiveMedia
7Filexxxxxxxxx.xxpredictiveMedia
8Filexxxx.xxx/xxxxxxxxxxxxxx.xxxpredictiveAlto
9Filexxxxxxxxxxxxxxxx.xxpredictiveAlto
10Filexxxxxx.xxxpredictiveMedia
11Filexxxxxxxxxxxxx_xxxxx.xxxxpredictiveAlto
12ArgumentxxxxxxxxxxxxxpredictiveAlto
13Argumentxxxxx.xxxxpredictiveMedia
14ArgumentxxxxpredictiveBasso
15ArgumentxxxxxxxxpredictiveMedia
16ArgumentxxpredictiveBasso
17ArgumentxxxxpredictiveBasso
18ArgumentxxxxxxxxpredictiveMedia
19Argumentxxxxxxxx/xxxxxxxxpredictiveAlto
20Input Value%xx%xxxxx%xx/xxx/xxxxxx%xx%xxpredictiveAlto
21Input Value--predictiveBasso

Referenze (18)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!