Iran Unknown Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (380)

Linguaggio

en	304
es	28
ru	12
de	6
ko	6

Nazione

us	258
ru	36
es	20
fr	8
gb	6

Attori

Cobalt Strike	2
SideWinder	1
SystemBC	1
TA505	1
Scar	1

Interesse

Genere

Not Defined	106
Content Management System	32
Operating System	30
Web Server	14
Programming Language Software	12

Fornitore

Not Defined	74
Microsoft	36
Google	10
Apple	10
SourceCodester	8

Prodotto

Microsoft Windows	22
WordPress	8
Google Chrome	6
Apache HTTP Server	6
Joomla	4

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	CTI	EPSS	CVE
1	TikiWiki tiki-register.php escalazione di privilegi	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	4.73	0.01009	CVE-2006-6168
2	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	2.21	0.00000
3	AWStats Config awstats.pl cross site scripting	4.3	4.1	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.06	0.00587	CVE-2006-3681
4	Tiki Admin Password tiki-login.php autenticazione debole	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	3.62	0.00936	CVE-2020-15906
5	Serendipity exit.php escalazione di privilegi	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.18	0.00000
6	Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track cross site request forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00062	CVE-2022-47166
7	SPIP spip.php cross site scripting	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.24	0.00132	CVE-2022-28959
8	nginx escalazione di privilegi	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	0.00241	CVE-2020-12440
9	Lars Ellingsen Guestserver guestbook.cgi cross site scripting	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.12	0.00169	CVE-2005-4222
10	SourceCodester Library Management System index.php sql injection	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04	0.00114	CVE-2022-2492
11	Composer URL escalazione di privilegi	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.06299	CVE-2021-29472
12	Openads adclick.php Remote Code Execution	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.58	0.01871	CVE-2007-2046
13	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.40	0.01302	CVE-2007-0354
14	WordPress WP_Query sql injection	6.3	6.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.93536	CVE-2022-21661
15	Magento Search Module sql injection	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00070	CVE-2021-21024
16	ZoneMinder Language Privilege Escalation	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.38401	CVE-2022-29806
17	WordPress AdServe adclick.php sql injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.10	0.00073	CVE-2008-0507
18	SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php escalazione di privilegi	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.08	0.00045	CVE-2024-1875
19	Google Chrome Intents Remote Code Execution	6.3	6.0	$25k-$100k	$5k-$25k	High	Official Fix	0.04	0.00404	CVE-2021-38000
20	Nordex Control 2 SCADA Wind Farm Portal Application cross site scripting	4.3	4.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	0.00277	CVE-2015-6477

Campagne (1)

These are the campaigns that can be associated with the actor:

Albanian Government

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Campagne	Identified	Genere	Fiducia
1	46.30.189.66		Iran Unknown	Albanian Government	09/09/2022	verified	Alto
2	51.89.181.64	ip64.ip-51-89-181.eu	Iran Unknown		21/11/2022	verified	Alto
3	66.219.22.235	core96.hostingmadeeasy.com	Iran Unknown		12/10/2022	verified	Alto
4	83.171.238.62	558.cluster-nbg1.de	Iran Unknown		12/10/2022	verified	Alto
5	XX.XXX.XXX.XXX		Xxxx Xxxxxxx		21/11/2021	verified	Alto
6	XXX.XX.X.XX	xxxxxx.xx.x.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
7	XXX.XX.XXX.XXX	xxxxxxxx.xx	Xxxx Xxxxxxx		21/11/2022	verified	Alto
8	XXX.XXX.XXX.XXX	xxxx-xxxxxxx.xxxxx.xxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
9	XXX.XXX.XXX.XXX	xxxxxx.xxx.xxx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
10	XXX.XX.XXX.XX		Xxxx Xxxxxxx		21/11/2021	verified	Alto
11	XXX.XX.XXX.XX	xxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx		21/11/2021	verified	Alto
12	XXX.X.XX.XXX	xxxxxx.xxx.xx.x.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
13	XXX.XX.XXX.X		Xxxx Xxxxxxx		21/11/2022	verified	Alto
14	XXX.XX.XX.XXX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
15	XXX.XXX.XX.XXX	xxx.xxx.xx.xxx.xxxxxx.xxxxxxxx.xxx	Xxxx Xxxxxxx		12/10/2022	verified	Alto
16	XXX.XXX.XX.XXX	xxxxxxx.xxxxxxx.xx.xx	Xxxx Xxxxxxx		12/10/2022	verified	Alto
17	XXX.XX.XXX.XX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto
18	XXX.XX.XXX.XX		Xxxx Xxxxxxx	Xxxxxxxx Xxxxxxxxxx	09/09/2022	verified	Alto

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1006	CWE-22	Path Traversal	predictive	Alto
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	Alto
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Alto
4	T1059	CWE-94	Argument Injection	predictive	Alto
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	Alto
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
7	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Alto
8	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
9	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	Alto
10	TXXXX	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Alto
11	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Alto
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
13	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
14	TXXXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	Alto
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	Alto
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	Alto
18	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto
19	TXXXX	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	Alto
20	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Alto
21	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (173)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	File	//etc/RT2870STA.dat	predictive	Alto
2	File	/admin/maintenance/view_designation.php	predictive	Alto
3	File	/administration/theme.php	predictive	Alto
4	File	/api/index.php	predictive	Alto
5	File	/boafrm/formFilter	predictive	Alto
6	File	/cgi-bin/webproc	predictive	Alto
7	File	/check_availability.php	predictive	Alto
8	File	/clinic/medical_records_view.php	predictive	Alto
9	File	/coreframe/app/pay/admin/index.php	predictive	Alto
10	File	/dashboard/Cinvoice/manage_invoice	predictive	Alto
11	File	/forum/away.php	predictive	Alto
12	File	/importexport.php	predictive	Alto
13	File	/index.php	predictive	Media
14	File	/mobileredir/openApp.jsp	predictive	Alto
15	File	/ofrs/admin/?page=requests/manage_request	predictive	Alto
16	File	/search	predictive	Basso
17	File	/spip.php	predictive	Media
18	File	/usr/www/ja/mnt_cmd.cgi	predictive	Alto
19	File	/wp-admin/admin-ajax.php	predictive	Alto
20	File	active.log	predictive	Media
21	File	activenews_view.asp	predictive	Alto
22	File	xxxxxxx.xxx	predictive	Media
23	File	xxxxx.xxx	predictive	Media
24	File	xxxxxxx/xxxx/xxxxxx.xxx	predictive	Alto
25	File	xxxxxxxxxxxx.xxx	predictive	Alto
26	File	xxxxxxxx.xxx	predictive	Media
27	File	xxx_xxxxxxx.xxx	predictive	Alto
28	File	xxxxxxxxxx.xxx	predictive	Alto
29	File	xxxx-xxxx.x	predictive	Media
30	File	xxxxx.xxx	predictive	Media
31	File	xxxx_xxxx_xx.xx	predictive	Alto
32	File	xxxxxxx.xx	predictive	Media
33	File	xxxxx/xxxx-xxxx.x	predictive	Alto
34	File	xxxxxxxxxxx.xxx	predictive	Alto
35	File	xxx.xxx	predictive	Basso
36	File	xxxxxxx.xxx	predictive	Media
37	File	xxx-xxx/xxx_xxx_xxxxxx.xxx	predictive	Alto
38	File	xxx-xxx/xxxxx/xxxxx/xxxxx/xxx_xxxx/xxxx_xxxx/	predictive	Alto
39	File	xxxxx.xxx	predictive	Media
40	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	Alto
41	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	Alto
42	File	xxxxxxxxx/xxx/xxxxx/xxxxx/xxxxx.xxx	predictive	Alto
43	File	xxxxx.xxxx	predictive	Media
44	File	xxxxxxx.xxx	predictive	Media
45	File	xxxxxx.xxx	predictive	Media
46	File	xxxxx.xxx	predictive	Media
47	File	xx/xxxxx/xxxxxx_xxxxx.xxx	predictive	Alto
48	File	xxxx.xxx	predictive	Media
49	File	xxxxxxx.xxx	predictive	Media
50	File	xxx/xxx-xxxxx.x	predictive	Alto
51	File	xxxxxxx.xxx	predictive	Media
52	File	xxxx/xxxx	predictive	Media
53	File	xxx_xxxx.xxx	predictive	Media
54	File	xxxx.xxx	predictive	Media
55	File	xxxxxxxxx.xxx	predictive	Alto
56	File	xx/xxx/xxxx_xxxxx.x	predictive	Alto
57	File	xxxxxx.xxx	predictive	Media
58	File	xxx/xxxxxx.xxx	predictive	Alto
59	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
60	File	xxxxx.xxxx	predictive	Media
61	File	xxxxx.xxx	predictive	Media
62	File	xxxxxx.xxx	predictive	Media
63	File	xxxx_xxxx.xxx	predictive	Alto
64	File	xxxxxx/xxxxxx.x	predictive	Alto
65	File	xxxxxxx.xxx	predictive	Media
66	File	xxxxx_xx.xxxx	predictive	Alto
67	File	xxxxxx_xxxx.xxx	predictive	Alto
68	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	Alto
69	File	xxxx.xxx	predictive	Media
70	File	xxxx_xxxx.xxx	predictive	Alto
71	File	xxx_xxxx.xxx	predictive	Media
72	File	xxxxxx.x	predictive	Media
73	File	xxxxxxxxx.xxx.xxx	predictive	Alto
74	File	xxxxxxx_xxxxxx_xxx.xxxx	predictive	Alto
75	File	xxxxxxxxxxxxx.xxx	predictive	Alto
76	File	xxxxx/xxxxxxx.xxx	predictive	Alto
77	File	xxxxxxxx.xxx	predictive	Media
78	File	xxxxxxxx.xxx	predictive	Media
79	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	Alto
80	File	xxxxxxxxxxxxxxx.xxx	predictive	Alto
81	File	xxxxxx.xxx	predictive	Media
82	File	xxxxxxxxxxxxx.xxx	predictive	Alto
83	File	xxxxxx_xxxx.xxx	predictive	Alto
84	File	xxxxx.xxxx	predictive	Media
85	File	xxxx-xxxxxx.x	predictive	Alto
86	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	Alto
87	File	xxxxxxxxxxx.xxx	predictive	Alto
88	File	xxxx.xxx	predictive	Media
89	File	xxxxxxx-xxxxxxx.xxx	predictive	Alto
90	File	xxxx.x	predictive	Basso
91	File	xxxx-xxxxxxxx.xxx	predictive	Alto
92	File	xxxx-xxxxx.xxx	predictive	Alto
93	File	xxxx-xxxxxxxx.xxx	predictive	Alto
94	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	Alto
95	File	xxx_xxxxxx.xxx	predictive	Alto
96	File	xxxxxxxx.xxx	predictive	Media
97	File	xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	Alto
98	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	Alto
99	File	xx-xxxxxxxx/xx/xxxxxxxxxxxx	predictive	Alto
100	File	xx-xxxxxxxx/xxxxxxxx/xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	Alto
101	File	xxxx.xxx	predictive	Media
102	File	xxxxxxxxxxx.xxx	predictive	Alto
103	File	\xxxxx\xxxxx\xxxxxxxxx.xxx	predictive	Alto
104	File	~/xxxxxxxx/xxxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
105	Argument	xxxxxx/xxxxxxxx	predictive	Alto
106	Argument	xxxx	predictive	Basso
107	Argument	xxxxx	predictive	Basso
108	Argument	xxxxxxxxx	predictive	Media
109	Argument	xxxxxxxxxxxxxx	predictive	Alto
110	Argument	xxxxxxxx	predictive	Media
111	Argument	xxx	predictive	Basso
112	Argument	xxxxxxxxxx	predictive	Media
113	Argument	xxxxx	predictive	Basso
114	Argument	xxx_xx	predictive	Basso
115	Argument	xxxxxxxxxx	predictive	Media
116	Argument	xxx	predictive	Basso
117	Argument	xxxx_xx	predictive	Basso
118	Argument	xxxxx/xxx_xxxxx/xxxxx/xxxxxxxxxxx	predictive	Alto
119	Argument	xxxxxx	predictive	Basso
120	Argument	xxxxxxxxxxxx/xxxxxxxxxxx	predictive	Alto
121	Argument	xxxxxxxxx[x]	predictive	Media
122	Argument	xxxxxxxxxxx/xxxx/xxxxxxx	predictive	Alto
123	Argument	xxxx	predictive	Basso
124	Argument	xxxxxxx	predictive	Basso
125	Argument	xxxx	predictive	Basso
126	Argument	xxxx	predictive	Basso
127	Argument	xxxxxx[xxxxxxx]	predictive	Alto
128	Argument	xxxxxxxxxxx	predictive	Media
129	Argument	xxxxxxx	predictive	Basso
130	Argument	xxxx	predictive	Basso
131	Argument	xx	predictive	Basso
132	Argument	xxxxxxxxx	predictive	Media
133	Argument	xx_xxxxxxxx	predictive	Media
134	Argument	xx_xxxxx	predictive	Media
135	Argument	xx_xxxx	predictive	Basso
136	Argument	xxxxxxxxxx	predictive	Media
137	Argument	xxxxx[xxxxx][xx]	predictive	Alto
138	Argument	xxxxxxxx	predictive	Media
139	Argument	xxxxxxxx	predictive	Media
140	Argument	xxxxxxxx	predictive	Media
141	Argument	xxxx	predictive	Basso
142	Argument	xxxxxx	predictive	Basso
143	Argument	xxxxxxxxxx	predictive	Media
144	Argument	xxxxxx xxxxx	predictive	Media
145	Argument	xxxxxx	predictive	Basso
146	Argument	xxxx_xx	predictive	Basso
147	Argument	xxxxxxxxxxx	predictive	Media
148	Argument	xxxx	predictive	Basso
149	Argument	xxxxxxxx	predictive	Media
150	Argument	xxxx_xxx	predictive	Media
151	Argument	xxxxxxxxx	predictive	Media
152	Argument	xxxxxxx_xx	predictive	Media
153	Argument	xxxxxxxx	predictive	Media
154	Argument	xxxxxxxxxxx/xxxx	predictive	Alto
155	Argument	xxxxxxxx_xxx/xxxxxx_xx	predictive	Alto
156	Argument	xxxxxxxx	predictive	Media
157	Argument	xxxxxx	predictive	Basso
158	Argument	xxxxxxxxxxxx	predictive	Media
159	Argument	xxxxxxx	predictive	Basso
160	Argument	xxxxx_xxx	predictive	Media
161	Argument	xxxxx	predictive	Basso
162	Argument	xxxxx	predictive	Basso
163	Argument	xxxxx	predictive	Basso
164	Argument	xxxxxxxxxxxxxxx	predictive	Alto
165	Argument	xxxxxxxxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxx	predictive	Alto
166	Argument	xxx	predictive	Basso
167	Argument	xxxxxxxx/xxxx	predictive	Alto
168	Argument	xx_xxxx_xxxxxx_xxxxxxxxxx	predictive	Alto
169	Input Value	"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	Alto
170	Input Value	<xxx xxxxxx=xxxxx(xxxx)>	predictive	Alto
171	Input Value	xxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxx	predictive	Alto
172	Network Port	xxx/xxxxx	predictive	Media
173	Network Port	xxx/xxx, xxx/xxx, xxx/xxxx, xxx/xxxx	predictive	Alto

Referenze (5)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!