Glupteba Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (43)

Sequenza temporale

Linguaggio

en44

Nazione

us34
es6

Attori

Glupteba3
Ramnit1
Darkkomet1
Shadowbrokers1

Attività

Interesse

Sequenza temporale

Genere

Operating System18
Web Browser8
Not Defined8
Database Software6
E-Commerce Management Software2

Fornitore

Microsoft32
YITH2
IBM2
Byzoro2
Juniper2

Prodotto

Microsoft Windows18
Microsoft Internet Explorer8
Microsoft SQL Server6
YITH WooCommerce Compare2
IBM Security Guardium Database Activity Monitor2

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConEPSSCTICVE
1Totolink LR1200GB Web Interface cstecgi.cgi loginAuth buffer overflow9.89.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.08CVE-2024-1783
2Byzoro Smart S85F Management Platform escalazione di privilegi7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.002070.04CVE-2023-4121
3Byzoro Smart S85F Management Platform importhtml.php escalazione di privilegi7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.006170.04CVE-2023-4120
4Campcodes Online Thesis Archiving System view_department.php sql injection7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000730.08CVE-2023-2144
5Themify Portfolio Post Plugin Shortcode Attribute cross site scripting4.44.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000560.00CVE-2023-0362
6Juniper SRC NETCONF over SSH crittografia debole4.54.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.001780.00CVE-2021-31352
7centreon Contact Groups Form formContactGroup.php sql injection6.35.8$0-$5k$0-$5kNot DefinedOfficial Fix0.002120.08CVE-2022-3827
8Sourcecodehero ERP System Project processlogin.php sql injection8.17.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.001700.04CVE-2022-3118
9Wibu CodeMeter Runtime Runtime Server buffer overflow7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.076910.00CVE-2021-20093
10Vsecurity TANDBERG Video Communication Server Software Update secure.php escalazione di privilegi10.09.5$0-$5k$0-$5kNot DefinedOfficial Fix0.026250.03CVE-2009-4509
11IBM Security Guardium Database Activity Monitor Cache rivelazione di un 'informazione4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000420.00CVE-2016-0237
12Netwave IP Camera POST Request denial of service7.57.3$0-$5k$0-$5kNot DefinedWorkaround0.000920.00CVE-2018-6479
13YITH WooCommerce Compare escalazione di privilegi5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000000.02
14Verint Impact 360 emp_selector_pu cross site scripting3.53.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.02
15Microsoft Internet Explorer buffer overflow6.26.0$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.803480.00CVE-2016-7241
16Dlink DIR-823 HNAP Login buffer overflow6.36.1$5k-$25k$0-$5kNot DefinedUnavailable0.000000.00
17Microsoft Internet Explorer cross site scripting3.73.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.028750.00CVE-2016-7239
18Microsoft Internet Explorer rivelazione di un 'informazione3.73.6$25k-$100k$0-$5kNot DefinedOfficial Fix0.119280.00CVE-2016-7199
19Microsoft Internet Explorer rivelazione di un 'informazione3.73.6$25k-$100k$0-$5kNot DefinedOfficial Fix0.100290.00CVE-2016-7227
20Microsoft Internet Explorer buffer overflow6.96.7$25k-$100k$5k-$25kNot DefinedOfficial Fix0.368940.00CVE-2016-7198

IOC - Indicator of Compromise (161)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDindirizzo IPHostnameAttoreCampagneIdentifiedGenereFiducia
13.33.249.248a6adcb4b9bf816abe.awsglobalaccelerator.comGlupteba23/10/2023verifiedAlto
25.8.10.194Glupteba31/05/2021verifiedAlto
35.9.72.48cpanelbk.pcready.meGlupteba11/05/2022verifiedAlto
45.79.87.139Glupteba31/05/2021verifiedAlto
55.79.87.153Glupteba31/05/2021verifiedAlto
65.101.6.132amoglo.ruGlupteba31/05/2021verifiedAlto
720.60.148.196Glupteba15/05/2023verifiedAlto
820.60.161.225Glupteba07/03/2023verifiedAlto
920.150.38.228Glupteba03/06/2023verifiedAlto
1020.150.70.36Glupteba03/06/2023verifiedAlto
1120.150.79.68Glupteba03/06/2023verifiedAlto
1220.209.34.36Glupteba15/05/2023verifiedAlto
1323.5.238.97a23-5-238-97.deploy.static.akamaitechnologies.comGlupteba11/05/2022verifiedAlto
1437.48.81.151Glupteba31/05/2021verifiedAlto
1540.90.22.185Glupteba05/05/2022verifiedAlto
1640.112.72.205Glupteba11/05/2022verifiedAlto
1743.231.4.7Glupteba11/05/2022verifiedAlto
1845.15.156.202Glupteba07/03/2023verifiedAlto
1945.90.34.87Glupteba05/05/2022verifiedAlto
2046.165.244.129Glupteba31/05/2021verifiedAlto
2146.165.249.167Glupteba31/05/2021verifiedAlto
2246.165.249.195Glupteba31/05/2021verifiedAlto
2346.165.249.201Glupteba31/05/2021verifiedAlto
2446.165.249.203Glupteba31/05/2021verifiedAlto
2546.165.250.25Glupteba31/05/2021verifiedAlto
2651.159.136.111111-136-159-51.instances.scw.cloudGlupteba15/05/2023verifiedAlto
2762.204.41.159Glupteba07/03/2023verifiedAlto
2869.55.5.249Glupteba11/05/2022verifiedAlto
2969.64.46.27dragon085.startdedicated.deGlupteba05/05/2022verifiedAlto
3072.21.81.240Glupteba11/05/2022verifiedAlto
3172.21.91.29Glupteba05/05/2022verifiedAlto
3274.67.240.204cpe-74-67-240-204.twcny.res.rr.comGlupteba05/05/2022verifiedAlto
3374.125.128.127ec-in-f127.1e100.netGlupteba15/05/2023verifiedAlto
34XX.XX.XXX.XXXxxxxxxx07/03/2023verifiedAlto
35XX.XX.XX.XXXXxxxxxxx31/05/2021verifiedAlto
36XX.XX.XX.XXXxxxxxx.xxxxx.xxxxxxxxxxxxx.xxXxxxxxxx31/05/2021verifiedAlto
37XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
38XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
39XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
40XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
41XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
42XX.XX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
43XX.X.XX.XXxxxx.xxxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
44XX.XX.XXX.XXXxxxxxxx31/05/2021verifiedAlto
45XX.XXX.XXX.XXxxxx.xxxx.xx.xxXxxxxxxx05/05/2022verifiedAlto
46XX.XXX.XXX.XXXxxxxxxx11/05/2022verifiedAlto
47XX.XXX.XXX.XXXxxxxxxxx.xxxx.xxxxxxxxxxxx-xxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
48XX.XXX.XXX.XXXxxxxxxx31/05/2021verifiedAlto
49XX.XX.XXX.XXXxxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xxXxxxxxxx07/03/2023verifiedAlto
50XX.XX.XX.XXXxxxxxx.xxxx.xxXxxxxxxx07/03/2023verifiedAlto
51XX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
52XX.XXX.XXX.XXXxxxxxx.xxxxx.xxxx.xxxxxx-xxxxxxx.xxxxxxXxxxxxxx31/05/2021verifiedAlto
53XX.XXX.XXX.Xxxxx.xxxxxxx.xxxxxxxxx.xxxxxx-xxxxxxx.xxxxxxXxxxxxxx31/05/2021verifiedAlto
54XX.XXX.XX.XXxxxxxxxxx.xx-xx-xxx-xx.xxXxxxxxxx31/05/2021verifiedAlto
55XX.XXX.XX.XXXXxxxxxxx07/03/2023verifiedAlto
56XX.XXX.XX.XXxxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
57XX.XXX.XX.XXXxxxxx.xxxxxxxxxxxx.xxxxXxxxxxxx31/05/2021verifiedAlto
58XX.XXX.X.XXXxxxxxxx15/05/2023verifiedAlto
59XX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx11/05/2022verifiedAlto
60XX.XXX.XXX.XXXx-xx-xxx-xxx-xxx.xxxx.xx.xxxxxxx.xxxXxxxxxxx07/03/2023verifiedAlto
61XXX.XX.XX.XXXXxxxxxxx11/05/2022verifiedAlto
62XXX.XX.XX.XXXXxxxxxxx11/05/2022verifiedAlto
63XXX.XX.X.XXxxxxxxx03/06/2023verifiedAlto
64XXX.XX.X.XXXxxxxxxx11/05/2022verifiedAlto
65XXX.XX.XX.XXXXxxxxxxx23/10/2023verifiedAlto
66XXX.XX.XX.XXXXxxxxxxx11/05/2022verifiedAlto
67XXX.XX.XX.XXXXxxxxxxx15/05/2023verifiedAlto
68XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
69XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
70XXX.XX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
71XXX.XX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
72XXX.XX.XXX.XXxxxxxxx11/05/2022verifiedAlto
73XXX.XX.X.XXXXxxxxxxx11/05/2022verifiedAlto
74XXX.XX.X.XXXXxxxxxxx11/05/2022verifiedAlto
75XXX.XX.XX.XXXxxxxxxx05/05/2022verifiedAlto
76XXX.XX.XX.XXXxxxxxxx05/05/2022verifiedAlto
77XXX.XX.XX.XXXxxxxxxx11/05/2022verifiedAlto
78XXX.XX.XX.XXXxxxxxxx11/05/2022verifiedAlto
79XXX.XX.XX.XXxxxxxxx05/05/2022verifiedAlto
80XXX.XX.XX.XXxxxxxxx05/05/2022verifiedAlto
81XXX.XX.XX.XXXXxxxxxxx05/05/2022verifiedAlto
82XXX.XX.XX.XXXXxxxxxxx11/05/2022verifiedAlto
83XXX.XX.XX.XXXxxxxxxx11/05/2022verifiedAlto
84XXX.XXX.XX.XXXxxxxxxx05/05/2022verifiedAlto
85XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
86XXX.XXX.XXX.XXXxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxx07/03/2023verifiedAlto
87XXX.XXX.XX.XXxxxxxxxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
88XXX.X.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
89XXX.XXX.XX.XXXXxxxxxxx11/05/2022verifiedAlto
90XXX.XXX.XX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
91XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
92XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx07/03/2023verifiedAlto
93XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx23/10/2023verifiedAlto
94XXX.XX.XXX.XXxxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx11/05/2022verifiedAlto
95XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx07/03/2023verifiedAlto
96XXX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx11/05/2022verifiedAlto
97XXX.XXX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
98XXX.XX.XXX.XXXxxxxxxxxxxx.xxxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
99XXX.XXX.X.XXXxxxxxxxxx-xxx-xxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
100XXX.XXX.XX.XXXxxxxxxxxx-xxx-xxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
101XXX.X.XXX.XXXxxxxxxxxxxx-xxx.xxxxxxxx.xxx-xxxxxxx.xxxXxxxxxxx07/03/2023verifiedAlto
102XXX.XX.XX.XXxxxxxx.xx.xx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx15/05/2023verifiedAlto
103XXX.XXX.XXX.XXXXxxxxxxx15/05/2023verifiedAlto
104XXX.XXX.XXX.XXXXxxxxxxx15/05/2023verifiedAlto
105XXX.XXX.XXX.XXXXxxxxxxx15/05/2023verifiedAlto
106XXX.XXX.XXX.XXXXxxxxxxx07/03/2023verifiedAlto
107XXX.XXX.XXX.XXXXxxxxxxx15/05/2023verifiedAlto
108XXX.XXX.XX.XXXxxxxxxx07/03/2023verifiedAlto
109XXX.XX.XXX.XXXxxxxxxx05/05/2022verifiedAlto
110XXX.XX.XXX.XXXxxxxxxx05/05/2022verifiedAlto
111XXX.XX.XXX.XXXxxxxxxx05/05/2022verifiedAlto
112XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
113XXX.XX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
114XXX.XX.XXX.XXXxxxxxxx05/05/2022verifiedAlto
115XXX.XX.XXX.XXXXxxxxxxx15/05/2023verifiedAlto
116XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
117XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
118XXX.XX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto
119XXX.XX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
120XXX.XX.XXX.XXXXxxxxxxx03/06/2023verifiedAlto
121XXX.XX.XXX.XXXXxxxxxxx23/10/2023verifiedAlto
122XXX.XXX.XX.XXXxxxxxxxx-xx-xx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
123XXX.XXX.XX.XXXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
124XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
125XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
126XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
127XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
128XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
129XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
130XXX.XXX.XXX.XXxxx.xxxxxxx.xxxxXxxxxxxx23/10/2023verifiedAlto
131XXX.XXX.XXX.XXXxxxxxxx31/05/2021verifiedAlto
132XXX.XXX.XXX.XXXxxxxxxx31/05/2021verifiedAlto
133XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
134XXX.XXX.XXX.XXXXxxxxxxx24/03/2018verifiedAlto
135XXX.XXX.XXX.XXXXxxxxxxx23/10/2023verifiedAlto
136XXX.XX.XXX.XXxxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
137XXX.XX.XXX.XXxxxxx.xxxXxxxxxxx03/06/2023verifiedAlto
138XXX.XX.XXX.XXxxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
139XXX.XX.XXX.XXxxxxx.xxxXxxxxxxx23/10/2023verifiedAlto
140XXX.XXX.XXX.XXXxxxxxxx07/03/2023verifiedAlto
141XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxx.xxxxxx.xxxXxxxxxxx07/03/2023verifiedAlto
142XXX.XXX.XXX.XXXxxxxxxx05/05/2022verifiedAlto
143XXX.XXX.XX.XXXxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxx15/05/2023verifiedAlto
144XXX.XXX.XX.XXXxxxxxxx07/03/2023verifiedAlto
145XXX.XXX.XX.XXxxxxxxx07/03/2023verifiedAlto
146XXX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxxxx11/05/2022verifiedAlto
147XXX.XX.XX.XXXxxx-xxxxxxxx.xxx.xxx.xxXxxxxxxx15/05/2023verifiedAlto
148XXX.X.XXX.XXXxxxxxxx15/05/2023verifiedAlto
149XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
150XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
151XXX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxx11/05/2022verifiedAlto
152XXX.XX.XXX.XXXx-xxxx.x-xxxxxx.xxxXxxxxxxx05/05/2022verifiedAlto
153XXX.XX.XXX.XXXXxxxxxxx05/05/2022verifiedAlto
154XXX.XXX.XXX.XXXxxxxxxx11/05/2022verifiedAlto
155XXX.XX.XXX.XXXxxxx.xxxx-xxx.xxXxxxxxxx31/05/2021verifiedAlto
156XXX.XX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
157XXX.X.XX.Xxx.xxxxxxxxx.xxxXxxxxxxx31/05/2021verifiedAlto
158XXX.XXX.XXX.XXXXxxxxxxx31/05/2021verifiedAlto
159XXX.XX.XXX.XXXxxxxx.xxxxxx.xxxx.xxxxxx-xxxxxxx.xxxxxxXxxxxxxx31/05/2021verifiedAlto
160XXX.XXX.XXX.XXxxxxxxxxxx.xxxxxxxxxxxxxx.xxxXxxxxxxx05/05/2022verifiedAlto
161XXX.XXX.XXX.XXXXxxxxxxx11/05/2022verifiedAlto

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitàAccesso al vettoreGenereFiducia
1T1059CWE-94Argument InjectionpredictiveAlto
2T1059.007CWE-79, CWE-80Cross Site ScriptingpredictiveAlto
3TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveAlto
4TXXXXCWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
5TXXXXCWE-XXXxx XxxxxxxxxpredictiveAlto
6TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto
7TXXXXCWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveAlto
8TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (19)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/admin/departments/view_department.phppredictiveAlto
2File/cgi-bin/cstecgi.cgipredictiveAlto
3File/pages/processlogin.phppredictiveAlto
4File/xxx/xxxxxxx/xxx_xxxxxxxx_xxpredictiveAlto
5Filexxxxxxxxxxxxxxxx.xxxpredictiveAlto
6Filexxxxxxxxxx.xxxpredictiveAlto
7Libraryxxxxxxx.xxxpredictiveMedia
8Libraryxxxxxxx.xxxpredictiveMedia
9Libraryxxxxxxxx/xxx/xxx/xxxxxx.xxxpredictiveAlto
10Libraryxxxxxx.xxxpredictiveMedia
11Argumentxx_xxpredictiveBasso
12Argumentxxxx_xxxxxxpredictiveMedia
13Argumentxxxx_xxxxpredictiveMedia
14ArgumentxxpredictiveBasso
15ArgumentxxxxxxxxxxxxxxxxxxxxpredictiveAlto
16ArgumentxxxpredictiveBasso
17Argumentxxxxxxxx_xxxxx=predictiveAlto
18ArgumentxxxxpredictiveBasso
19Input Value<xxxxxx>xxxxx("xxx")</xxxxxx>predictiveAlto

Referenze (11)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!