Mispadu Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (20)

Linguaggio

de	10
en	8
ar	2

Nazione

us	18
ir	2

Attori

Mispadu	3
TimbreStealer	1
Mirai	1
Remcos	1
RedLine Stealer	1

Interesse

Genere

Not Defined	12
Content Management System	4
Database Software	2

Fornitore

Not Defined	6
Huawei	4
Green Hills	2
IBM	2
Tribe29	2

Prodotto

Green Hills INTEGRITY RTOS	2
IBM DB2	2
netcf	2
Drupal	2
Mahara	2

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	EPSS	CTI	CVE
1	Huawei ACXXXX/SXXXX SSH Packet escalazione di privilegi	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00246	0.07	CVE-2014-8572
2	Huawei SXXX VRP MPLS LSP Ping rivelazione di un 'informazione	5.3	5.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00096	0.10	CVE-2014-8570
3	Tribe29 Checkmk Livestatus Query Language escalazione di privilegi	7.0	7.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.00	CVE-2022-47909
4	Tribe29 Checkmk Agent Updater Log File rivelazione di un 'informazione	5.1	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.04	CVE-2022-48319
5	Microsoft Windows ISATAP escalazione di privilegi	6.5	6.2	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.06396	0.00	CVE-2010-0812
6	IBM DB2 escalazione di privilegi	6.3	6.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00343	0.00	CVE-2011-1846
7	Nicholas Marriott tmux escalazione di privilegi	5.9	5.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00051	0.00	CVE-2011-1496
8	WordPress directory traversal	5.7	5.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00326	0.05	CVE-2023-2745
9	netcf Path Expression find_ifcfg_path escalazione di privilegi	5.9	5.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00662	0.00	CVE-2014-8119
10	Xerox Workcentre 5655 Authorization rivelazione di un 'informazione	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00268	0.00	CVE-2010-0548
11	Xerox Workcentre 6400 Net Controller rivelazione di un 'informazione	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00282	0.02	CVE-2010-0549
12	SilverStripe rivelazione di un 'informazione	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01045	0.00	CVE-2010-5188
13	ubuntu Linux autenticazione debole	10.0	9.5	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00345	0.03	CVE-2010-0834
14	Red Hat Enterprise Linux escalazione di privilegi	5.3	5.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00485	0.00	CVE-2010-2598
15	Drupal Form API escalazione di privilegi	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00093	0.05	CVE-2022-25271
16	Mahara Single Sign-On autenticazione debole	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00472	0.02	CVE-2010-1670
17	Green Hills INTEGRITY RTOS Interpeak IPCOMShell TELNET Server buffer overflow	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00308	0.00	CVE-2019-7713
18	Samba receive_smb_raw buffer overflow	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.97018	0.03	CVE-2008-1105

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Identified	Genere	Fiducia
1	2.59.255.65		Mispadu	29/07/2023	verified	Alto
2	X.XX.XXX.XXX	xxx-x-xx-xxx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxx	Xxxxxxx	31/05/2021	verified	Media
3	XX.XXX.XX.XXX	xxx-xx-xxx-xx-xxx.xx-xxxx-x.xxxxxxx.xxxxxxxxx.xxx	Xxxxxxx	31/05/2021	verified	Media
4	XX.XXX.XX.XXX		Xxxxxxx	16/02/2024	verified	Alto
5	XX.XX.XX.XXX		Xxxxxxx	31/05/2021	verified	Alto

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Classe	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	Alto
2	TXXXX	CAPEC-10	CWE-XX	Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxx Xxxxx Xxxxxxxxxxx	predictive	Alto
3	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
4	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (1)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	Argument	debug_profile	predictive	Alto

Referenze (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!