ERMAC Analisi

IOB - Indicator of Behavior (1000)

Sequenza temporale

Linguaggio

en760
zh210
ru16
es4
de4

Nazione

cn674
us156
la74
ru22
gb12

Attori

Attività

Interesse

Sequenza temporale

Genere

Fornitore

Prodotto

Microsoft Windows36
Linux Kernel32
Google Android14
Qt12
Apache Tomcat12

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConCTIEPSSCVE
1Microsoft Windows win32k.sys xxxMenuWindowProc denial of service5.55.0$5k-$25k$0-$5kProof-of-ConceptUnavailable0.040.00000
2TikiWiki tiki-register.php escalazione di privilegi7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix9.000.01009CVE-2006-6168
3Microsoft Edge Scripting Engine buffer overflow6.05.4$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.090.95140CVE-2018-0777
4Tiki Admin Password tiki-login.php autenticazione debole8.07.7$0-$5k$0-$5kNot DefinedOfficial Fix4.150.00936CVE-2020-15906
5Tenda D820R ADSL2-2+ Modem DNS escalazione di privilegi7.36.6$0-$5k$0-$5kFunctionalWorkaround0.040.00000
6MPlayer buffer overflow10.09.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00201CVE-2011-2162
7Lars Ellingsen Guestserver guestbook.cgi cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.120.00169CVE-2005-4222
8Oracle PeopleSoft Enterprise PeopleTools Integration Broker escalazione di privilegi6.55.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.050.00799CVE-2017-3548
9Tesla Model 3 bsa_server buffer overflow4.64.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00000CVE-2023-32157
10ImageMagick File Open popen escalazione di privilegi9.88.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.030.72301CVE-2016-5118
11LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable5.200.00000
12Kubernetes kubelet pprof rivelazione di un 'informazione7.37.2$0-$5k$0-$5kNot DefinedOfficial Fix0.070.55583CVE-2019-11248
13nginx escalazione di privilegi6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.230.00241CVE-2020-12440
14Apache Log4j Chainsaw/SocketAppender denial of service5.55.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00260CVE-2023-26464
15Apache ZooKeeper SASL Quorum Peer Authentication escalazione di privilegi7.37.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.00367CVE-2023-44981
16Teltonika RUT9XX autologin.cgi escalazione di privilegi8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00572CVE-2018-17532
17TERUTEN WebCube Update escalazione di privilegi8.68.5$0-$5k$0-$5kNot DefinedOfficial Fix0.060.00424CVE-2022-23764
18Apple CUPS Interface cross site scripting4.34.1$5k-$25k$0-$5kHighOfficial Fix0.020.00864CVE-2014-2856

IOC - Indicator of Compromise (209)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDindirizzo IPHostnameAttoreCampagneIdentifiedGenereFiducia
13.68.135.109ec2-3-68-135-109.eu-central-1.compute.amazonaws.comERMAC13/02/2024verifiedMedia
24.178.96.222ERMAC10/02/2024verifiedAlto
35.42.67.10ERMAC06/02/2024verifiedAlto
45.42.67.89ERMAC23/02/2024verifiedAlto
55.42.92.98.ERMAC24/01/2024verifiedAlto
65.42.92.165benderrdp.ruERMAC09/02/2024verifiedAlto
75.42.199.3ERMAC20/01/2023verifiedAlto
85.42.199.22ERMAC20/01/2023verifiedAlto
95.42.199.91ERMAC20/01/2023verifiedAlto
105.182.87.142showy-push.aeza.networkERMAC17/01/2024verifiedAlto
115.199.162.93ERMAC27/02/2024verifiedAlto
125.199.168.141ERMAC24/03/2024verifiedAlto
135.199.169.206ERMAC26/02/2024verifiedAlto
1418.139.243.205ec2-18-139-243-205.ap-southeast-1.compute.amazonaws.comERMAC03/02/2024verifiedMedia
1518.159.210.80ec2-18-159-210-80.eu-central-1.compute.amazonaws.comERMAC25/01/2024verifiedMedia
1620.0.153.70ERMAC27/02/2024verifiedAlto
1720.65.178.69ERMAC28/02/2024verifiedAlto
1820.77.71.31ERMAC04/03/2024verifiedAlto
1920.82.182.10ERMAC28/02/2024verifiedAlto
2020.108.0.165ERMAC11/10/2023verifiedAlto
2120.121.42.245ERMAC26/02/2024verifiedAlto
2220.151.153.84ERMAC08/02/2024verifiedAlto
2320.166.248.109ERMAC26/02/2024verifiedAlto
2420.199.14.181ERMAC24/01/2024verifiedAlto
2520.210.252.118ERMAC11/10/2023verifiedAlto
2620.241.69.111ERMAC09/02/2024verifiedAlto
2720.249.63.72ERMAC11/10/2023verifiedAlto
2820.251.169.136ERMAC28/02/2024verifiedAlto
2931.41.244.187ERMAC11/10/2023verifiedAlto
3031.129.99.52ERMAC22/03/2024verifiedAlto
3134.16.134.132132.134.16.34.bc.googleusercontent.comERMAC19/02/2024verifiedMedia
3235.90.154.240ec2-35-90-154-240.us-west-2.compute.amazonaws.comERMAC11/10/2023verifiedMedia
3335.91.53.224ec2-35-91-53-224.us-west-2.compute.amazonaws.comERMAC11/10/2023verifiedMedia
3437.60.235.110vmi1631602.contaboserver.netERMAC02/02/2024verifiedAlto
3537.140.242.93ERMAC23/02/2024verifiedAlto
3638.180.94.161ERMAC26/01/2024verifiedAlto
3738.242.209.185vmi1543263.contaboserver.netERMAC15/12/2023verifiedAlto
3840.119.24.133ERMAC26/02/2024verifiedAlto
3943.129.215.239ERMAC15/12/2023verifiedAlto
4045.15.159.44sore-direction.aeza.networkERMAC27/02/2024verifiedAlto
4145.77.68.12045.77.68.120.vultrusercontent.comERMAC15/12/2023verifiedAlto
4245.93.201.92ERMAC20/01/2023verifiedAlto
43XX.XXX.XX.XXXxxxx04/03/2024verifiedAlto
44XX.XXX.XX.XXXXxxxx25/01/2024verifiedAlto
45XX.XXX.XX.XXXXxxxx25/01/2024verifiedAlto
46XX.XXX.XX.XXXXxxxx25/01/2024verifiedAlto
47XX.XXX.X.XXXXxxxx19/02/2024verifiedAlto
48XX.XXX.XX.XXXxxxx04/08/2022verifiedAlto
49XX.XXX.XXX.XXxxxxxx.xxxxxxxx.xxXxxxx11/10/2023verifiedAlto
50XX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxx24/01/2024verifiedAlto
51XX.XX.XXX.Xxx-xx-xxx-x.xxxxx.xxxxXxxxx11/10/2023verifiedAlto
52XX.XXX.XX.XXXXxxxx14/02/2024verifiedAlto
53XX.XXX.XX.XXXxxxx22/03/2024verifiedAlto
54XX.XXX.XX.XXXxxxx11/10/2023verifiedAlto
55XX.XXX.XX.XXXxxxx29/08/2022verifiedAlto
56XX.XXX.XX.XXXXxxxx24/12/2023verifiedAlto
57XX.XXX.XXX.XXxx.xxx.xxx.xx.xxxx.xxxxxxxxxxxx.xxxXxxxx11/10/2023verifiedAlto
58XX.XX.XXX.XXXxxxx31/01/2024verifiedAlto
59XX.XXX.X.XXXXxxxx14/02/2024verifiedAlto
60XX.XX.XX.XXxxxxxx-xx.xxxxxxxxx.xxxXxxxx15/12/2023verifiedAlto
61XX.XX.XX.XXXxxxxxx-xx.xxxxx-xxxxx.xxXxxxx04/01/2024verifiedAlto
62XX.XXX.XXX.XXxxxx13/02/2024verifiedAlto
63XX.XXX.XXX.XXXxxxx19/02/2024verifiedAlto
64XX.XXX.XXX.XXXxxxx20/02/2024verifiedAlto
65XX.XXX.XXX.XXXxxxxx-xxxx.xxxx.xxxxxxxXxxxx17/01/2024verifiedAlto
66XX.XXX.XXX.XXxxxx12/02/2024verifiedAlto
67XX.XXX.XXX.XXxxxxxxxxx-xxxxxxxxx.xxxx.xxxxxxxXxxxx24/11/2023verifiedAlto
68XX.XXX.XXX.XXXxxxxx.xxxxxxxxxxxxx.xxxXxxxx24/01/2024verifiedAlto
69XX.XXX.XX.XXxx-xxx-xx-xx.xxxxx.xxxxxxx.xxxxxx.xxXxxxx15/12/2023verifiedAlto
70XX.XX.X.XXXxxxx31/01/2024verifiedAlto
71XX.XXX.XX.XXXXxxxx30/01/2024verifiedAlto
72XX.XXX.XX.XXXXxxxx14/10/2023verifiedAlto
73XX.XX.XX.XXXXxxxx12/02/2024verifiedAlto
74XX.XX.XXX.XXXxxxx06/09/2023verifiedAlto
75XX.XXX.XXX.XXxxxxxxxxxxxx.xxxXxxxx13/02/2024verifiedAlto
76XX.XX.XXX.XXXxxxxx.xx-xx-xx-xxx.xxXxxxx10/02/2024verifiedAlto
77XX.XX.XXX.XXxxxx.xx-xx-xx-xxx.xxXxxxx24/01/2024verifiedAlto
78XX.XX.XXX.XXXxxxxx.xx-xx-xx-xxx.xxXxxxx24/01/2024verifiedAlto
79XX.XXX.XX.XXXxxxx22/03/2024verifiedAlto
80XX.XXX.X.XXXxxx.x.xxx.xx.xxxxxx.xxxxx.xxXxxxx24/01/2024verifiedAlto
81XX.XX.XXX.XXxxxxxx.xx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxx27/12/2023verifiedAlto
82XX.XX.XX.XXXxxxx05/02/2024verifiedAlto
83XX.XX.XXX.XXXXxxxx24/01/2024verifiedAlto
84XX.XX.XXX.XXXXxxxx24/01/2024verifiedAlto
85XX.XX.XXX.XXXxxxx25/01/2024verifiedAlto
86XX.XXX.XXX.XXXxxxx15/12/2023verifiedAlto
87XX.XXX.XXX.XXXXxxxx25/11/2023verifiedAlto
88XX.XX.XXX.XXXXxxxx04/11/2023verifiedAlto
89XX.XX.XXX.XXXxxxx25/01/2024verifiedAlto
90XX.XX.XXX.XXXXxxxx15/12/2023verifiedAlto
91XX.XX.XXX.XXXXxxxx09/11/2023verifiedAlto
92XX.XX.XXX.XXXXxxxx15/12/2023verifiedAlto
93XX.XX.XXX.XXXXxxxx21/01/2024verifiedAlto
94XX.XX.XXX.XXXxxxx15/12/2023verifiedAlto
95XX.XX.XXX.XXXXxxxx21/01/2024verifiedAlto
96XX.XX.XXX.XXXXxxxx10/12/2023verifiedAlto
97XX.XX.XXX.XXXXxxxx21/01/2024verifiedAlto
98XX.XXX.XX.XXXxxxx11/10/2023verifiedAlto
99XX.XXX.XX.XXXxxxx11/10/2023verifiedAlto
100XX.XXX.XX.XXXXxxxx13/07/2023verifiedAlto
101XX.XXX.XXX.XXXxxxx24/11/2023verifiedAlto
102XX.XXX.XX.XXXxxx.xxxxxx.xxxXxxxx14/07/2023verifiedAlto
103XX.XXX.XX.XXxxxxxxxxx.xx.xxxXxxxx20/01/2023verifiedAlto
104XX.XXX.XX.XXXxxxx24/01/2024verifiedAlto
105XX.XXX.XX.XXXxxxx24/01/2024verifiedAlto
106XX.XXX.XX.XXXXxxxx24/01/2024verifiedAlto
107XX.XXX.XX.XXXXxxxx28/01/2024verifiedAlto
108XX.XXX.XX.XXXXxxxx27/01/2024verifiedAlto
109XX.XXX.XX.XXXxxxx22/03/2024verifiedAlto
110XX.XXX.XXX.XXXxxxxxxxxx.xxxxx-xxxxxxxxxx.xxxxxxxxxXxxxx01/11/2023verifiedAlto
111XX.XXX.X.XXXXxxxx01/03/2024verifiedAlto
112XX.XXX.XX.XXXXxxxx22/03/2024verifiedAlto
113XX.XXX.XX.XXXXxxxx25/01/2024verifiedAlto
114XX.XXX.XX.XXXXxxxx25/01/2024verifiedAlto
115XX.XXX.XX.XXXXxxxx06/02/2024verifiedAlto
116XX.XXX.XX.XXXXxxxx06/02/2024verifiedAlto
117XX.XXX.XX.XXXxxxx01/03/2024verifiedAlto
118XX.XXX.XXX.XXXxxxx01/02/2024verifiedAlto
119XX.XXX.XXX.XXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxx03/02/2024verifiedAlto
120XX.XXX.XXX.XXXXxxxx31/01/2024verifiedAlto
121XX.XXX.XXX.XXXxxxx14/02/2024verifiedAlto
122XX.XX.XXX.XXXXxxxx05/02/2024verifiedAlto
123XXX.XXX.XXX.XXXxxxx01/03/2024verifiedAlto
124XXX.XXX.XXX.XXXXxxxx01/03/2024verifiedAlto
125XXX.XX.XX.XXXXxxxx26/02/2024verifiedAlto
126XXX.XX.XXX.XXXxxx.xx.xxx.xxx.xxxxxxxxxxxxxxxx.xxxXxxxx11/10/2023verifiedAlto
127XXX.XX.XX.XXXxxxx.xxxxxxxxxxxxxxxxxxxx.xxxXxxxx06/02/2024verifiedAlto
128XXX.XXX.XX.XXXXxxxx26/02/2024verifiedAlto
129XXX.XXX.XX.XXXXxxxx23/02/2024verifiedAlto
130XXX.XXX.XX.XXXXxxxx26/02/2024verifiedAlto
131XXX.XXX.XX.XXXXxxxx26/02/2024verifiedAlto
132XXX.XXX.XX.XXXXxxxx26/02/2024verifiedAlto
133XXX.XX.XXX.XXxxxxxxx.xxxxx.xxXxxxx01/03/2024verifiedAlto
134XXX.XX.XXX.XXXxxxx10/02/2024verifiedAlto
135XXX.XX.XXX.XXXXxxxx02/02/2024verifiedAlto
136XXX.XXX.XX.XXXxxxx15/12/2023verifiedAlto
137XXX.XXX.XX.XXXxxxx15/12/2023verifiedAlto
138XXX.XXX.XX.XXXxxxx15/12/2023verifiedAlto
139XXX.XXX.XXX.XXXXxxxx27/02/2024verifiedAlto
140XXX.XXX.XXX.XXXxxxxx.xx-xxx-xxx-xxx.xxXxxxx15/12/2023verifiedAlto
141XXX.XXX.XXX.XXXXxxxx24/01/2024verifiedAlto
142XXX.XX.XXX.XXXXxxxx15/12/2023verifiedAlto
143XXX.XX.XXX.XXXxxxxxx-xx.xxx.xxx.xxXxxxx25/01/2024verifiedAlto
144XXX.XX.XX.XXXxxxx15/02/2024verifiedAlto
145XXX.XXX.XX.XXXxxxx15/12/2023verifiedAlto
146XXX.XX.XX.XXXxxxx15/12/2023verifiedAlto
147XXX.X.XX.XXxxxx25/01/2024verifiedAlto
148XXX.X.XXX.XXxxxx25/01/2024verifiedAlto
149XXX.X.XXX.XXXxxxx25/01/2024verifiedAlto
150XXX.XX.XXX.XXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxx25/01/2024verifiedAlto
151XXX.XXX.XXX.XXXXxxxx08/02/2024verifiedAlto
152XXX.XXX.XX.XXXXxxxx11/10/2023verifiedAlto
153XXX.XX.XX.XXXXxxxx22/03/2024verifiedAlto
154XXX.XXX.XX.XXXxxxx04/03/2024verifiedAlto
155XXX.XXX.XX.XXXXxxxx22/03/2024verifiedAlto
156XXX.XXX.XX.XXXxxxx28/03/2024verifiedAlto
157XXX.XXX.XXX.XXXXxxxx22/03/2024verifiedAlto
158XXX.XXX.XX.XXXxxxx11/10/2023verifiedAlto
159XXX.XXX.XXX.XXXxxxx20/01/2023verifiedAlto
160XXX.XXX.XXX.XXXxxxx20/01/2023verifiedAlto
161XXX.XXX.XXX.XXXXxxxx11/10/2023verifiedAlto
162XXX.XXX.XXX.XXXXxxxx10/02/2024verifiedAlto
163XXX.XXX.X.XXXxxx-xxx-x-xxx.xxxxxx-xx-xxxxxxxxxxx.xxxXxxxx23/02/2022verifiedAlto
164XXX.XXX.XXX.XXXxxx.xxxx.xxxxxxxXxxxx27/12/2023verifiedAlto
165XXX.XX.XXX.XXXxxxxx-xxxxxx.xxxxxxxxxx-xxxx-xxxxxx.xxx-xxxxxxx.xxxXxxxx15/12/2023verifiedAlto
166XXX.XX.XX.XXXxxxx04/03/2024verifiedAlto
167XXX.XX.XX.XXXxxxxxxxx.xxxxx.xxxx.xxxxxxxXxxxx25/01/2024verifiedAlto
168XXX.XX.XX.XXXxxxxxxx.xxxXxxxx24/01/2024verifiedAlto
169XXX.XXX.XXX.XXXxxxxxxx.xxxxXxxxx27/01/2024verifiedAlto
170XXX.XXX.XXX.XXXxxxx06/02/2024verifiedAlto
171XXX.XXX.XXX.XXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxx10/02/2024verifiedAlto
172XXX.XXX.XXX.XXXxxxx23/02/2022verifiedAlto
173XXX.XXX.XXX.XXXxxxx23/02/2022verifiedAlto
174XXX.XXX.XXX.XXXxxxx23/02/2022verifiedAlto
175XXX.XXX.XXX.XXXxxxx07/02/2024verifiedAlto
176XXX.XXX.XXX.XXXxxxx24/01/2024verifiedAlto
177XXX.XXX.XX.XXXxxxxxxxxx-xxx.xx.xxx.xxx.xxxxxxxxx-xx.xxxxxxx.xxxXxxxx24/01/2024verifiedAlto
178XXX.XXX.XX.XXXXxxxx26/08/2023verifiedAlto
179XXX.XXX.XX.XXXXxxxx28/01/2024verifiedAlto
180XXX.XXX.XXX.XXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxx16/02/2024verifiedAlto
181XXX.XXX.XX.XXXxxxxx.xxxxxxxxxxxxxxx.xxxXxxxx09/02/2024verifiedAlto
182XXX.XXX.XXX.XXxxxxxxxxx.xxxxx-xxxxxxxxxx.xxxxxxxxxXxxxx01/03/2024verifiedAlto
183XXX.XX.XXX.XXXXxxxx11/10/2023verifiedAlto
184XXX.XXX.XXX.XXXXxxxx04/08/2022verifiedAlto
185XXX.XXX.XXX.XXXXxxxx11/10/2023verifiedAlto
186XXX.XXX.XXX.XXXXxxxx05/10/2022verifiedAlto
187XXX.XXX.XXX.XXXXxxxx11/10/2023verifiedAlto
188XXX.XXX.XXX.XXXxxxx26/01/2024verifiedAlto
189XXX.XXX.X.XXXxxxx15/12/2023verifiedAlto
190XXX.XXX.XX.XXXxxxx17/01/2024verifiedAlto
191XXX.XXX.XX.XXXxxxx04/03/2024verifiedAlto
192XXX.XXX.XX.XXXxxxx10/02/2024verifiedAlto
193XXX.XXX.XX.XXXXxxxx28/02/2024verifiedAlto
194XXX.XXX.XXX.XXxxxx24/01/2024verifiedAlto
195XXX.XXX.XXX.XXXxxxx31/01/2024verifiedAlto
196XXX.XXX.XXX.XXXxxxx22/01/2024verifiedAlto
197XXX.XXX.XXX.XXXXxxxx26/01/2024verifiedAlto
198XXX.XXX.XXX.XXXXxxxx15/12/2023verifiedAlto
199XXX.XXX.XXX.XXX.Xxxxx16/01/2024verifiedAlto
200XXX.XX.XXX.XXXxxxx15/12/2023verifiedAlto
201XXX.XX.XXX.XXXXxxxx15/12/2023verifiedAlto
202XXX.XX.XXX.XXXXxxxx27/12/2023verifiedAlto
203XXX.XX.XX.XXXxxx.xxxxxxxxxxxxx.xxxXxxxx30/01/2024verifiedAlto
204XXX.XX.XXX.XXXXxxxx12/02/2024verifiedAlto
205XXX.XX.XXX.XXXXxxxx25/01/2024verifiedAlto
206XXX.XXX.XXX.XXXxxxx-xxxxxxxxxx.xxx.xxx.xxXxxxx14/02/2024verifiedAlto
207XXX.XXX.XX.XXXxxx.xxx.xx.xxx.xxxxxxxxxxxxxxxx.xxxXxxxx15/12/2023verifiedAlto
208XXX.XXX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxx22/03/2024verifiedAlto
209XXX.XXX.XX.XXxxxxxxxxx.xxxxx.xxx.xxXxxxx26/02/2024verifiedAlto

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitàAccesso al vettoreGenereFiducia
1T1006CWE-21, CWE-22, CWE-23, CWE-24Path TraversalpredictiveAlto
2T1040CWE-319Authentication Bypass by Capture-replaypredictiveAlto
3T1055CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveAlto
4T1059CWE-88, CWE-94, CWE-1321Argument InjectionpredictiveAlto
5T1059.007CWE-79, CWE-80Cross Site ScriptingpredictiveAlto
6TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
7TXXXX.XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveAlto
8TXXXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
9TXXXX.XXXCWE-XXXXxxx XxxxxxxxpredictiveAlto
10TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveAlto
11TXXXXCWE-XXXXXxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxxxxxx XxxxxxpredictiveAlto
12TXXXXCWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveAlto
13TXXXXCWE-XXXXxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx XxxxxpredictiveAlto
14TXXXXCWE-XXXxx XxxxxxxxxpredictiveAlto
15TXXXX.XXXCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveAlto
16TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveAlto
17TXXXXCWE-XXX, CWE-XXXXxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxxpredictiveAlto
18TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxxxx XxxxpredictiveAlto
19TXXXX.XXXCWE-XXXXxxxxxxx Xxxxxx XxxxpredictiveAlto
20TXXXX.XXXCWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
21TXXXXCWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
22TXXXX.XXXCWE-XXXxxxxxxxxxxxxpredictiveAlto
23TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveAlto
24TXXXX.XXXCWE-XXX, CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveAlto
25TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (337)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/admin/controller/JobLogController.javapredictiveAlto
2File/api/baskets/{name}predictiveAlto
3File/api/sys/loginpredictiveAlto
4File/api/sys/set_passwdpredictiveAlto
5File/api/trackedEntityInstancespredictiveAlto
6File/app/options.pypredictiveAlto
7File/auxpredictiveBasso
8File/bin/atepredictiveMedia
9File/booking/show_bookings/predictiveAlto
10File/changePasswordpredictiveAlto
11File/Content/Template/root/reverse-shell.aspxpredictiveAlto
12File/dashboard/add-blog.phppredictiveAlto
13File/data/removepredictiveMedia
14File/debug/pprofpredictiveMedia
15File/debuginfo.htmpredictiveAlto
16File/ecshop/admin/template.phppredictiveAlto
17File/etc/passwdpredictiveMedia
18File/forum/away.phppredictiveAlto
19File/goform/net\_Web\_get_valuepredictiveAlto
20File/group1/uploapredictiveAlto
21File/index.phppredictiveMedia
22File/nagiosxi/admin/banner_message-ajaxhelper.phppredictiveAlto
23File/novel/bookSetting/listpredictiveAlto
24File/novel/userFeedback/listpredictiveAlto
25File/php-sms/admin/?page=user/manage_userpredictiveAlto
26File/resources//../predictiveAlto
27File/Setting/change_password_savepredictiveAlto
28File/testConnectionpredictiveAlto
29File/tmp/ppd.tracepredictiveAlto
30File/user/inc/workidajax.phppredictiveAlto
31File/userLogin.asppredictiveAlto
32File/vm/admin/doctors.phppredictiveAlto
33FileAccess.app/Contents/Resources/kcproxypredictiveAlto
34Fileacs.exepredictiveBasso
35Fileaction-visitor.phppredictiveAlto
36Fileadclick.phppredictiveMedia
37Fileaddressbook.update.phppredictiveAlto
38Filexxxxx.xxxpredictiveMedia
39Filexxxxx/xxxxxxx_xxxxxx.xxxpredictiveAlto
40Filexxxxx/xxxxx.xxxpredictiveAlto
41Filexxxxx/xxxx-xxxxx.xxxpredictiveAlto
42Filexxxxx/xxxxxxxx/xx-xxxxxxxxx-xxxxx-xxxx.xxxpredictiveAlto
43Filexxxxx/xxxxxxxx_xxxxx.xxxpredictiveAlto
44Filexxxxx/xxxxxxxx/xxxx_xxxxxxx.xxxpredictiveAlto
45Filexxxxxxx/xxxx/xxxxxx.xxxpredictiveAlto
46Filexxxxxx.xxpredictiveMedia
47Filexxx/xxxx/xxxx.xxx?xxxxxx=xxxxxx_xxxxxx_xxxxpredictiveAlto
48Filexxx/xxxxxxx/xxxxxxx/predictiveAlto
49Filexxxx/xxx/xxx.xpredictiveAlto
50Filexxxx/xxxxx/xxxxxx/xxx.xpredictiveAlto
51Filexxxx/xxx/xxxxxxx/xxx/xxxxxxx.xpredictiveAlto
52Filexxxx/xxx/xxxxxx/xxx/xxxxxxxxx/xxxxx_xxxxx.xpredictiveAlto
53Filexxxx/xxxx.xxxxpredictiveAlto
54Filexxxxxxxxx.xxxpredictiveAlto
55Filexxxx-xx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxx/xxxxxx/xxxxxxxxxxxxxx.xxxxpredictiveAlto
56Filexxxxxxx/xxxx/xxxxx.xxxxx.xxxpredictiveAlto
57Filexxxxxxxxxxxx.xxxxpredictiveAlto
58Filexxx-xxx/xxxxxxx.xxpredictiveAlto
59Filexxx-xxx/xxx.xxxpredictiveAlto
60Filexxxxx.xxxpredictiveMedia
61Filexxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxx_xxxxx.xxxxpredictiveAlto
62Filexx.xxxxxx.xxxx.xxxx.xxxxxxx.xxxxpredictiveAlto
63Filexxxxxx/xxx.xpredictiveMedia
64Filexxx/xxxxxx/xxxxxxx/xx/xxxxxx/xxxxx/xxxxxxxxxxxxx.xxxxpredictiveAlto
65Filexxxxxxxxxx/xxx_xxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxxpredictiveAlto
66Filexxx_xxxxxxx_xxxxxxxxx_xxxxxxxxx_xxxxxxxxxxxxxx.xxxpredictiveAlto
67Filexxxxxxxxxx\xxxx.xxxpredictiveAlto
68Filexxxxxxxx/xxxxxxxxxx.xxxpredictiveAlto
69Filexxxx.xxpredictiveBasso
70Filexxxxxxxxxxx.xxxpredictiveAlto
71Filexxxxxx/xxxxxxx/xxx_xxx.xpredictiveAlto
72Filexxxxxxx.xxxxxx.xxx.xxx.xxxpredictiveAlto
73Filexxxxxxxx.xxxpredictiveMedia
74Filexxxxxx/xxxx.xpredictiveAlto
75Filexxxxxxx/xxxxxx/xxxxxx_xxxx_xxxxx.xpredictiveAlto
76Filexxxx.xxxpredictiveMedia
77Filexxx/xxxxxxx/xxxxxxxxxxxxxx.xpredictiveAlto
78Filexxx/xxxxx.xxxxxpredictiveAlto
79Filexxxxxxxx.xxxpredictiveMedia
80Filexxxx-xxxxxx.xxxpredictiveAlto
81Filexxxxx.xxxpredictiveMedia
82Filexx/xxx.xpredictiveMedia
83Filexx/xxxx/xxxxx.xpredictiveAlto
84Filexx/xxx/xxxxxx/xxxxxxx.xpredictiveAlto
85Filexxxxxxx.xxx.xxxpredictiveAlto
86Filexxxxxx.xxxpredictiveMedia
87Filexxxxxxxxx.xxxpredictiveAlto
88Filexxxxxxxx.xxxpredictiveMedia
89Filexxxx.xpredictiveBasso
90Filexxxxxxxx/xxxx_xxxxpredictiveAlto
91Filexxxxx_xxxx.xxxpredictiveAlto
92Filexxx/xxxxxxxx/xxxxxxxxxxx.xpredictiveAlto
93Filexxx/xxx/xxxxxxxxxxx.xpredictiveAlto
94Filexxxxxxxxx.xxxpredictiveAlto
95Filexxx.xpredictiveBasso
96Filexxxxxxx.xpredictiveMedia
97Filexxxxxxxxxxxx.xxxpredictiveAlto
98Filexx/xxxx/xxxxxxxxx.xpredictiveAlto
99Filexx/xxx/xxxx_xxxxx.xpredictiveAlto
100Filexxxxx/xxxxxxxxxxxxxxpredictiveAlto
101Filexxx/xxxxxx.xxxpredictiveAlto
102Filexxxxxxx/xxx_xxx/xxx_xxxxxxxxxxx.xxxpredictiveAlto
103Filexxxxxxxx/xxxxxxxxx/xxxxxx.xxx.xxxpredictiveAlto
104Filexxxxx.xxxpredictiveMedia
105Filexxxxx.xxxxpredictiveMedia
106Filexxxxx.xxxpredictiveMedia
107Filexxxxxxx_xxxx.xxxpredictiveAlto
108Filexxxxxxxx.xxxpredictiveMedia
109Filexxxxxx/xxxxxxxpredictiveAlto
110Filexxxxxxx/xxxxxxx.xpredictiveAlto
111Filexxxxxxxx.xxxpredictiveMedia
112Filexxx/xxxxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveAlto
113Filexxxxxx/xxxxxx/xxxx.xpredictiveAlto
114Filexxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
115Filexxxxx.xxxpredictiveMedia
116Filexxxxxx.xxxpredictiveMedia
117Filexxxxx.xpredictiveBasso
118Filexxxxxxxxxx/xxxx.xpredictiveAlto
119Filexxxxxxxx.xxxpredictiveMedia
120Filexxxxxxxxxx.xxpredictiveAlto
121Filexxxxx.xxxpredictiveMedia
122Filexxxxx.xxxpredictiveMedia
123Filexxxx/xxxx.xxxpredictiveAlto
124Filexxx.xxxpredictiveBasso
125Filexxxxxxxxxx/xxxxxxx.xpredictiveAlto
126Filexxxxxxxx.xxpredictiveMedia
127Filexxxxxx/xxxxxxxxx.xxxpredictiveAlto
128Filexxxx/xxxxxxx_xxxx.xpredictiveAlto
129Filexxxxxxx.xxxpredictiveMedia
130Filexxx/xxx.xxxpredictiveMedia
131Filexxxxxx_xxxxxxx.xxxpredictiveAlto
132Filexxxxxxx/xxxxx/xxxxxxxx.xpredictiveAlto
133Filexxx/xxxx/xxxxxxxx.xpredictiveAlto
134Filexxx/xxx_xxxxx/xx_xxxxx.xpredictiveAlto
135Filexxxxxxx/xxxxxx/xxxxx/xxxxxxxxxx.xxxpredictiveAlto
136Filexxxxxxx_xxxx.xxxpredictiveAlto
137Filexxx/xxxxxx.xxxxx.xxxpredictiveAlto
138Filexxx/xxxxxxxxxxx.xxxxx.xxxpredictiveAlto
139Filexxx_xxxx.xxxpredictiveMedia
140Filexxxxxxxxxxxx.xxxpredictiveAlto
141Filexxxxxxxxxxxxxxxxx.xxxpredictiveAlto
142Filexxx/xxx-xxx-xxxxxx.xpredictiveAlto
143Filexxxxxxx.xxxpredictiveMedia
144Filexxxxxxxxxxx.xxxpredictiveAlto
145Filexxxxxxx/xx_xxxxx_xxxx/xxxx.xxxpredictiveAlto
146Filexxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxxpredictiveAlto
147Filexxxxxxx.xxxpredictiveMedia
148Filexxxxx.xxxpredictiveMedia
149Filexxx.xpredictiveBasso
150Filexxxxxx/xxxxxxx/xxxxxxx_xxx_xxxxxx_xxxxxx.xxxpredictiveAlto
151Filexxxxx_xxxxxx_xxx.xxxpredictiveAlto
152Filexxxxxxxx.xxxpredictiveMedia
153Filexxxxxxxx.xxxpredictiveMedia
154Filexxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
155Filexxxx-xxx/xxxxxxxx.xxx?xxxx=xxxxxxxx_xxxx_xxxxx.xxxpredictiveAlto
156Filexxxx-xxx/xxxxxxxx.xxx?xxxx=xxx_xxxxxxxx.xxxpredictiveAlto
157Filexxxxxx.xxxpredictiveMedia
158Filexxxxxx.xxxpredictiveMedia
159Filexxxxxxxx/xxxx/xxx_xxx.xpredictiveAlto
160Filexxxxxx.xxxpredictiveMedia
161Filexxxxxxxx.xxx.xxxpredictiveAlto
162Filexxxxxx_xxxxxxxxxx.xxxpredictiveAlto
163Filexxx/xxxx/xxxxxxxxxx.xpredictiveAlto
164Filexxxxx.xxxpredictiveMedia
165Filexxxxxxxxx.xxxpredictiveAlto
166Filexxx/xxxx/xxxxpredictiveAlto
167Filexxxxxxx/xxx_xx/xxxxxxxxx/xxxxxxx-xxx-xxxxxxxxx-xxxx.xpredictiveAlto
168Filexxxxxxx.xxxpredictiveMedia
169Filexxxx-xxxxx.xxxpredictiveAlto
170Filexxxx-xxxxxxxx.xxxpredictiveAlto
171Filexxxx.xxxpredictiveMedia
172Filexx.xxxpredictiveBasso
173Filexxxxxxxxxx-xxx.xxxpredictiveAlto
174FilexxxxxxpredictiveBasso
175Filexxxxxxxxxxx.xxxpredictiveAlto
176Filexxxxxxx.xxxxpredictiveMedia
177Filexxxxxxxxx.xpredictiveMedia
178Filexxxxx/xxxxxxxx-xxxxxxxxx.xxxpredictiveAlto
179Filexxxx_xxxxx.xxxpredictiveAlto
180Filexxxxxxx.xxxpredictiveMedia
181Filexxxxxxxxx.xxxpredictiveAlto
182Filexxxxxx.xxxpredictiveMedia
183Filexx-xxxxx/xxxxx.xxxpredictiveAlto
184Filexx-xxxxxx.xxxpredictiveAlto
185Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveAlto
186Filexx-xxxxxxxx/xxxxx-xx-xxxxxx-xxxxxx.xxxpredictiveAlto
187Filexx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxxpredictiveAlto
188Filexx-xxxxx.xxxpredictiveMedia
189Filexxx/xxxxxxxx/xxxxxxxx.xxxpredictiveAlto
190Filexxxxxxx.xxxpredictiveMedia
191Filexxxxxxxx.xpredictiveMedia
192Filexxxxxx.xxxpredictiveMedia
193Library/xxx/xxx/xxxxxxpredictiveAlto
194Library/xxx/xxx/xxx/xxxx.xxxxxxpredictiveAlto
195Libraryxxxxx.xxxpredictiveMedia
196Libraryxxxxxx.xxxpredictiveMedia
197Libraryxxxxxx/xxx.xxxpredictiveAlto
198Libraryxxxxxxx.xxxpredictiveMedia
199Libraryxxxxxxxx xpredictiveMedia
200Libraryxxx/xxxxxxx.xxx.xxxpredictiveAlto
201LibraryxxxxpredictiveBasso
202Libraryxxxxxx.xxxpredictiveMedia
203Libraryxxxxxxxxxx.xxxpredictiveAlto
204Libraryxxxxxxx/xxxx/xxx-xxx/xxx/xxxxxxx-xxxxxxxxxxx-*.xxxpredictiveAlto
205LibraryxxxxxxpredictiveBasso
206Libraryxxxxxx.xxxpredictiveMedia
207Argument$_xxxxxxx["xxx"]predictiveAlto
208Argument-xpredictiveBasso
209ArgumentxxxxxxpredictiveBasso
210ArgumentxxxxpredictiveBasso
211Argumentxxx_xxxxx_xxxpredictiveAlto
212ArgumentxxxxxxxpredictiveBasso
213ArgumentxxxxxpredictiveBasso
214ArgumentxxxpredictiveBasso
215ArgumentxxxxxxxxpredictiveMedia
216Argumentx[xxxxxxxx]predictiveMedia
217ArgumentxxxxxxxxpredictiveMedia
218ArgumentxxxxxxxxxxpredictiveMedia
219Argumentxxx_xxpredictiveBasso
220ArgumentxxxxxxxxxxpredictiveMedia
221ArgumentxxxxxxxxxpredictiveMedia
222ArgumentxxxxxxxpredictiveBasso
223Argumentxxxxxx_xxxxxxxpredictiveAlto
224ArgumentxxxxxxpredictiveBasso
225Argumentxxxxxx_xxxx_xxxxpredictiveAlto
226Argumentxxxxxxx-xxxxxxpredictiveAlto
227ArgumentxxxxxxxxxxpredictiveMedia
228Argumentxxxxxxx_xxxxxpredictiveAlto
229Argumentxxxxxx_xxpredictiveMedia
230Argumentx[xxxxx]predictiveMedia
231ArgumentxxxxpredictiveBasso
232Argumentxxxx_xxxxxx=xxxxpredictiveAlto
233ArgumentxxxxxxxpredictiveBasso
234Argumentxxxxxx_xxxxxxpredictiveAlto
235Argumentxxxxxx/xxxxxxpredictiveAlto
236ArgumentxxxxxxxxxxxpredictiveMedia
237ArgumentxxxxxpredictiveBasso
238ArgumentxxxxxpredictiveBasso
239ArgumentxxxxpredictiveBasso
240ArgumentxxxxxxxxpredictiveMedia
241Argumentxxxx_xxxxpredictiveMedia
242Argumentxxxxxx_xxxxxpredictiveMedia
243Argumentxxxxxxx[xxxxxxx_xxx]predictiveAlto
244ArgumentxxxxpredictiveBasso
245ArgumentxxxxpredictiveBasso
246ArgumentxxxxpredictiveBasso
247ArgumentxxxxpredictiveBasso
248ArgumentxxpredictiveBasso
249ArgumentxxpredictiveBasso
250Argumentxx_xxxxpredictiveBasso
251Argumentxxxxx_xxxxpredictiveMedia
252Argumentxxxxxxxxxxxxxx.xxxxxxxxxxxxxpredictiveAlto
253Argumentxx_xxxxxpredictiveMedia
254ArgumentxxxxpredictiveBasso
255Argumentxxxx/xxx_xxxxxxxxxpredictiveAlto
256Argumentxxx_xxxxxxpredictiveMedia
257ArgumentxxxxxxpredictiveBasso
258ArgumentxxxxxpredictiveBasso
259ArgumentxxxxpredictiveBasso
260ArgumentxxxxxxpredictiveBasso
261ArgumentxxxxxxxxxxxxxxxpredictiveAlto
262ArgumentxxxxxxpredictiveBasso
263Argumentxxxxx_xxxxxx_xxx/xxxxx_xxxx_xxxxxxxxpredictiveAlto
264Argumentxxxx/xxx_xxxxxx/xxxxpredictiveAlto
265ArgumentxxxxpredictiveBasso
266Argumentxxxxxx/xxxxx/xxxxpredictiveAlto
267Argumentxxxxxxxxxxxxxx_xxxpredictiveAlto
268ArgumentxxxxxxxpredictiveBasso
269ArgumentxxxxxxxpredictiveBasso
270ArgumentxxxxxxxpredictiveBasso
271ArgumentxxxxpredictiveBasso
272ArgumentxxxxxxpredictiveBasso
273ArgumentxxxxxxxxpredictiveMedia
274ArgumentxxxxpredictiveBasso
275ArgumentxxxxpredictiveBasso
276ArgumentxxxxxxxpredictiveBasso
277Argumentxxxx_xxxxpredictiveMedia
278Argumentxxxx_xxxxxxpredictiveMedia
279Argumentxxxx_xxpredictiveBasso
280Argumentxxxxxxx_xxxpredictiveMedia
281ArgumentxxxxxxxxxxxxxxxpredictiveAlto
282ArgumentxxxxxxxxxpredictiveMedia
283ArgumentxxxxpredictiveBasso
284Argumentxxxxxxx.xxxxpredictiveMedia
285Argumentxxxxxx_xxxxpredictiveMedia
286ArgumentxxxxxxxxxxpredictiveMedia
287ArgumentxxxxpredictiveBasso
288ArgumentxxxxxpredictiveBasso
289ArgumentxxxxxxpredictiveBasso
290Argumentxxxxxx_xxxxxpredictiveMedia
291ArgumentxxxxxxpredictiveBasso
292Argumentxxxxxx_xxxxpredictiveMedia
293ArgumentxxxxxxxpredictiveBasso
294ArgumentxxxxpredictiveBasso
295Argumentxxxxxxxxxx.xxxxxxxxxxxpredictiveAlto
296ArgumentxxxxpredictiveBasso
297ArgumentxxpredictiveBasso
298Argumentxxxx_xxxxx_xxxxpredictiveAlto
299ArgumentxxxxpredictiveBasso
300ArgumentxxxxxpredictiveBasso
301ArgumentxxxxxxpredictiveBasso
302ArgumentxxxpredictiveBasso
303ArgumentxxxxxxxpredictiveBasso
304ArgumentxxxxxxxxxpredictiveMedia
305ArgumentxxxxxxxxpredictiveMedia
306ArgumentxxpredictiveBasso
307ArgumentxxxxxpredictiveBasso
308ArgumentxxxxxxpredictiveBasso
309ArgumentxxxxxpredictiveBasso
310Argumentxx_xxxxpredictiveBasso
311ArgumentxxxxxpredictiveBasso
312Argumentxxxxxx_xxxxxpredictiveMedia
313ArgumentxxxpredictiveBasso
314ArgumentxxxpredictiveBasso
315Argumentxxxxxxxxxxx.xxxxxxxxpredictiveAlto
316ArgumentxxxxxxxxpredictiveMedia
317ArgumentxxxxxxxxpredictiveMedia
318Argumentxxxxxxxx/xxxxxxxxpredictiveAlto
319ArgumentxxpredictiveBasso
320ArgumentxxxxxpredictiveBasso
321ArgumentxxxxxxxpredictiveBasso
322Argumentxxxx->xxxxxxxpredictiveAlto
323Argumentxx-xxxxxx_xxxxpredictiveAlto
324Argument_xxxxxxpredictiveBasso
325Input Value%xxxxxx+-x+x+xx.x.xx.xxx%xx%xxpredictiveAlto
326Input Value../predictiveBasso
327Input Value../../predictiveBasso
328Input Value//xxxxxxx.xxxpredictiveAlto
329Input Value<xxxxxx>xxxxx('xxxxxxxx.xxxxxx='+xxxxxxxx.xxxxxx)</xxxxxx>.xxxxxpredictiveAlto
330Input Valuexxxx=::%xxpredictiveMedia
331Input ValuexxxxxxxpredictiveBasso
332Input Value|<xxxxxxx>predictiveMedia
333Network PortxxxxxpredictiveBasso
334Network PortxxxxpredictiveBasso
335Network Portxxx/xxx (xxx)predictiveAlto
336Network Portxxx/xxxx (xxx)predictiveAlto
337Network Portxxx/xxx (xxxx)predictiveAlto

Referenze (155)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!