Rakos Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (397)

Linguaggio

en	306
ru	40
de	8
zh	8
es	8

Nazione

us	218
ru	82
pl	12
me	10
cn	8

Attori

Rakos	10
Locky	6
Cobalt Strike	5
TrickBot	4
Mirai	3

Interesse

Genere

Not Defined	162
Content Management System	14
Operating System	12
WordPress Plugin	10
Firewall Software	10

Fornitore

Not Defined	118
Cisco	12
Microsoft	10
Apache	8
SourceCodester	8

Prodotto

Linux Kernel	6
WordPress	6
AT&T U-verse	6
phpMyAdmin	4
Customer Reviews for WooCommerce Plugin	4

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash rivelazione di un 'informazione	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php escalazione di privilegi	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.07	CVE-2010-0966
3	Zyxel NAS326/NAS542 Web Server escalazione di privilegi	9.8	9.8	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00068	0.04	CVE-2023-4473
4	nginx escalazione di privilegi	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	4.76	CVE-2020-12440
5	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.15	CVE-2017-0055
6	DZCP deV!L`z Clanportal browser.php rivelazione di un 'informazione	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02733	1.21	CVE-2007-1167
7	MikroTik RouterOS Winbox/HTTP Interface escalazione di privilegi	7.8	7.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00055	0.05	CVE-2023-30799
8	Laravel Framework Token Encrypter.php decrypt escalazione di privilegi	6.8	6.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.62418	0.03	CVE-2018-15133
9	Linux Kernel fbcon vt.c KD_FONT_OP_COPY rivelazione di un 'informazione	5.0	4.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00042	0.00	CVE-2020-28974
10	Devilz Clanportal File Upload vulnerabilità sconosciuta	5.3	4.4	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.05362	0.06	CVE-2006-6338
11	Devilz Clanportal index.php sql injection	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00784	0.00	CVE-2006-3347
12	Microsoft IIS IP/Domain Restriction escalazione di privilegi	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00817	0.29	CVE-2014-4078
13	WordPress WP_Query class-wp-query.php sql injection	8.5	8.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00318	0.02	CVE-2017-5611
14	SourceCodester Petrol Pump Management Software product.php escalazione di privilegi	4.7	4.5	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.00	CVE-2024-2058
15	CKFinder File Name escalazione di privilegi	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00155	0.04	CVE-2019-15862
16	Elementor Plugin escalazione di privilegi	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.15	CVE-2024-24934
17	guzzlehttp psr7 Header Parser escalazione di privilegi	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00095	0.01	CVE-2022-24775
18	DrayTek Vigor 2960 Web Management Interface mainfunction.cgi escalazione di privilegi	7.4	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00273	0.00	CVE-2023-1162
19	BeCustom Plugin cross site request forgery	6.5	6.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00122	0.04	CVE-2022-3747
20	Cisco IOS XE Web UI Remote Code Execution	9.9	9.7	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.89428	0.10	CVE-2023-20198

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Identified	Genere	Fiducia
1	5.34.180.64	vds-merkyl-88517.itldc-customer.net	Rakos	31/05/2021	verified	Alto
2	5.34.183.231	vds-454576.hosted-by-itldc.com	Rakos	31/05/2021	verified	Alto
3	46.8.44.55		Rakos	31/05/2021	verified	Alto
4	XXX.XX.XX.XX	xxx.xxxxxxx.xxx	Xxxxx	31/05/2021	verified	Alto
5	XXX.XX.XX.XX	xxxxxxx-xxxxxx.xxxxxx-xx.xxxxx.xxx	Xxxxx	31/05/2021	verified	Alto
6	XXX.XX.XXX.XXX	xxx.xx.xxx.xxx.xxxxxxxxx-xxx	Xxxxx	31/05/2021	verified	Alto
7	XXX.XX.XXX.XXX	xxxxx-xxxxxxxxxxxxxxxx-xxxxxx.xxxxxx-xx-xxxxx.xxx	Xxxxx	31/05/2021	verified	Alto
8	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxx-xxx	Xxxxx	31/05/2021	verified	Alto
9	XXX.XXX.XXX.XXX	xxxxxxxxxxx.xxxxxx.xxx	Xxxxx	31/05/2021	verified	Alto
10	XXX.XX.XXX.XX	xxxxxxx.xxx	Xxxxx	31/05/2021	verified	Alto
11	XXX.XX.XXX.XX	xx.xxxxx-xxxxxxxx.xxx	Xxxxx	31/05/2021	verified	Alto

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	Alto
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	Alto
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Alto
4	T1059	CWE-94	Argument Injection	predictive	Alto
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Alto
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
7	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	Alto
8	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Alto
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	Alto
11	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Alto
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Alto
14	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	Alto
16	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto
17	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	Alto
18	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	Alto
19	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Alto
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (208)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	File	//proc/kcore	predictive	Media
2	File	/addWhiteListDomain.imss	predictive	Alto
3	File	/admin/app/product.php	predictive	Alto
4	File	/anony/mjpg.cgi	predictive	Alto
5	File	/cgi-bin/wlogin.cgi	predictive	Alto
6	File	/cobbler-api	predictive	Media
7	File	/customer_support/index.php	predictive	Alto
8	File	/forum/away.php	predictive	Alto
9	File	/inc/parser/xhtml.php	predictive	Alto
10	File	/include/makecvs.php	predictive	Alto
11	File	/index.php	predictive	Media
12	File	/login/index.php	predictive	Alto
13	File	/preview.php	predictive	Media
14	File	/protocol/index.php	predictive	Alto
15	File	/requests.php	predictive	Alto
16	File	/search-result.php	predictive	Alto
17	File	/secret_coder.sql	predictive	Alto
18	File	/shop.php	predictive	Media
19	File	/uncpath/	predictive	Media
20	File	/view_order.php	predictive	Alto
21	File	/wp-admin/admin.php?page=wp_file_manager_properties	predictive	Alto
22	File	add.php	predictive	Basso
23	File	adminer.php	predictive	Media
24	File	adm_config_report.php	predictive	Alto
25	File	xxxxx.xxx	predictive	Media
26	File	xxx/xx-xxxxx-xxxxxxx/xxx-xx-xxxxx-xxxxxxx.xxx	predictive	Alto
27	File	xxxx-xxxx.x	predictive	Media
28	File	xxx.xxx	predictive	Basso
29	File	xxxxx.xxxxxxxxx.xxx	predictive	Alto
30	File	xxxxxxxxxx.xxx	predictive	Alto
31	File	xxxxxxxxx.xxx	predictive	Alto
32	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	Alto
33	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	Alto
34	File	xxxxxx/xx/xx_xxxxx.x	predictive	Alto
35	File	xxxx:x.x/xx:x/xx:x/xx:x/xx:x/x:x/x:x/x:x/x:x	predictive	Alto
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Alto
37	File	xxxxxxx.xxx	predictive	Media
38	File	xxxxxx.xxx	predictive	Media
39	File	xxxx_xxxx.xxx	predictive	Alto
40	File	xxxxxxx/xxx/xxxxxxxx/xx.x	predictive	Alto
41	File	xxxxxxx/xxx/xx/xx.x	predictive	Alto
42	File	xxxxxxxxxxxx.xxx	predictive	Alto
43	File	xxxx.xxx	predictive	Media
44	File	xxxxx.xxx	predictive	Media
45	File	xxxxxxxx_xxx_xxx_xxxx.xxx	predictive	Alto
46	File	xxxxxx.xxx	predictive	Media
47	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	Alto
48	File	xxxxxxxxxxxx.xxx	predictive	Alto
49	File	xxxxxxxxxx.xxx	predictive	Alto
50	File	xxxxxxxxx.xxx	predictive	Alto
51	File	xxxx.xxx	predictive	Media
52	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	Alto
53	File	xx_xxxxxxx.x	predictive	Media
54	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	Alto
55	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxx.xxx	predictive	Alto
56	File	xxxxxxx/xxxxxxxxx/xxxxxxxxxxxxx.xxx	predictive	Alto
57	File	xxxxxxxxxx.xx/xxx-xxxxx.xxx	predictive	Alto
58	File	xxx/xxxxxx.xxx	predictive	Alto
59	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
60	File	xxxxx.xxx	predictive	Media
61	File	xx.xxx	predictive	Basso
62	File	xxxxxx.x	predictive	Media
63	File	xxxx.xxx	predictive	Media
64	File	xx.xxx	predictive	Basso
65	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	Alto
66	File	xxxxx_xx.xxxx	predictive	Alto
67	File	xxxxxx.xxx	predictive	Media
68	File	xxxxxxxxxxxxx.xxx	predictive	Alto
69	File	xxxxxxxxxxxx.xxx	predictive	Alto
70	File	xxxxxxxx_xxxxxxx.xxx	predictive	Alto
71	File	xxxx.xxx	predictive	Media
72	File	xxxxxxx/xxxxxx/xxxxxx/xxxxxxxxx.xxx#xxx	predictive	Alto
73	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxxx.xxx	predictive	Alto
74	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxx.xxx	predictive	Alto
75	File	xxxxxxxxxx_xxxxxxx.xxx	predictive	Alto
76	File	xxxxxxx-xxxxx.xx	predictive	Alto
77	File	xxxxx_xxxxxxxx.xxx	predictive	Alto
78	File	xxxx/xxxxxxx/xxxxx.xxx	predictive	Alto
79	File	xxxxx.xxx	predictive	Media
80	File	xxxxxxx.xxx	predictive	Media
81	File	xxxxxx.xxx/xxxx_xxxx_xxxx.xxx	predictive	Alto
82	File	xxxxxxxx/xxxxxx-xxxxx/xxxxxxxxxxx/xxxx.xx	predictive	Alto
83	File	xxxx.xxx	predictive	Media
84	File	xxxxxxx/xxxxxx.xxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	Alto
85	File	xxxxx.xxx	predictive	Media
86	File	xxxxx-xxxx.xxx	predictive	Alto
87	File	xxxxxxx.xxx	predictive	Media
88	File	xxxxxxxx.xxx	predictive	Media
89	File	xxxxxxx_xxxx.xxx	predictive	Alto
90	File	xxxxxxx.xxx	predictive	Media
91	File	xxxxx.xxx	predictive	Media
92	File	xxxxxxxx.xxx	predictive	Media
93	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	Alto
94	File	xxxx.xx	predictive	Basso
95	File	xxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xx	predictive	Alto
96	File	xxxxxxxxxxxxxxxx.xx	predictive	Alto
97	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	Alto
98	File	xxx/xxxxxx_xxx.xxx	predictive	Alto
99	File	xxxxxxxxxxxx.xxx	predictive	Alto
100	File	xxxxx.x	predictive	Basso
101	File	xxxxxxxxxxx.xxx	predictive	Alto
102	File	xxxxxxxx/xxxxxxxx	predictive	Alto
103	File	xxxxxxxx.xxx	predictive	Media
104	File	xxxxxxxxxx.xxx	predictive	Alto
105	File	xxxxxxx.xxx	predictive	Media
106	File	xx_xxxxxxxx.xxx	predictive	Alto
107	File	xxxxx.xxx	predictive	Media
108	File	xxxxxxxx.xxx	predictive	Media
109	File	xx-xxxxx/xxxxxxx.xxx	predictive	Alto
110	File	xx-xxxxxx.xxx	predictive	Alto
111	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	Alto
112	File	xx-xxxxxxxx/xxxx.xxx	predictive	Alto
113	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	Alto
114	File	xx-xxxxxxxx.xxx	predictive	Alto
115	File	~/xxxxxxxxx/	predictive	Media
116	Library	xxxxxxx.xxx	predictive	Media
117	Library	xxxxxxxxxxxx.xxx	predictive	Alto
118	Library	xxxx.xxx.xxx	predictive	Media
119	Library	xxxxxx.xxx	predictive	Media
120	Library	xxxxxxxxxxx.xxx	predictive	Alto
121	Library	xxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxx	predictive	Alto
122	Library	xxxxxxx/xxx/xxxxxxxxx/xxxxx_xxxxxxx.xxx	predictive	Alto
123	Library	xxx/xx_xxx.x	predictive	Media
124	Library	xxxxxxxx.x	predictive	Media
125	Argument	xx/xx	predictive	Basso
126	Argument	xx_xxxxx_xxx_xxxx	predictive	Alto
127	Argument	xxxxxx	predictive	Basso
128	Argument	xxxxxxxxxxxxxxxxxxxxx	predictive	Alto
129	Argument	xxxxxxxx	predictive	Media
130	Argument	xxx	predictive	Basso
131	Argument	xxxx/xxxxx/xxxxx_xxxxxxxxxxx	predictive	Alto
132	Argument	xxxxxx[xxxx]	predictive	Media
133	Argument	xxxxxxxxxxx(xxxxxx)	predictive	Alto
134	Argument	xxxx/xxxxxx/xxx	predictive	Alto
135	Argument	xxxxxx	predictive	Basso
136	Argument	xxxxx/xxxxx/xxxxx/xxxxxxxx	predictive	Alto
137	Argument	xxxxx xxxxx	predictive	Media
138	Argument	xxxxx	predictive	Basso
139	Argument	xxxx	predictive	Basso
140	Argument	xxxxxxxx	predictive	Media
141	Argument	xxxxxx_xxxxxx_xx	predictive	Alto
142	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxx/xxxxxxx	predictive	Alto
143	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxx	predictive	Alto
144	Argument	xxxxxxxxxxxx	predictive	Media
145	Argument	xxxxxxxxxxxxxx($xxx)	predictive	Alto
146	Argument	xxxxx_xx	predictive	Media
147	Argument	xxx_xxxx	predictive	Media
148	Argument	xxxx	predictive	Basso
149	Argument	xxxx xxxxxxx	predictive	Media
150	Argument	xxxx_xxxx	predictive	Media
151	Argument	xxxx	predictive	Basso
152	Argument	xxxx	predictive	Basso
153	Argument	xx	predictive	Basso
154	Argument	xx	predictive	Basso
155	Argument	xxxxx	predictive	Basso
156	Argument	xxxxx	predictive	Basso
157	Argument	xxxxxx	predictive	Basso
158	Argument	xxxx	predictive	Basso
159	Argument	xxxxxx	predictive	Basso
160	Argument	xxxx	predictive	Basso
161	Argument	xxxxxx	predictive	Basso
162	Argument	xxxxx[xxxxx][xx]	predictive	Alto
163	Argument	xxxxx	predictive	Basso
164	Argument	xx/xx/xx/xx/x	predictive	Alto
165	Argument	xxxx	predictive	Basso
166	Argument	xxxxxxxx	predictive	Media
167	Argument	xxxx_xxxx	predictive	Media
168	Argument	xxxxxx	predictive	Basso
169	Argument	xxxx	predictive	Basso
170	Argument	xxxx_xxxx	predictive	Media
171	Argument	xxxxxxxx	predictive	Media
172	Argument	xxxxxx	predictive	Basso
173	Argument	xxxx	predictive	Basso
174	Argument	xxxxxxxx	predictive	Media
175	Argument	xxxxx	predictive	Basso
176	Argument	xxxxxxx_xx	predictive	Media
177	Argument	xxxxxxx_xxxxx	predictive	Alto
178	Argument	xxx	predictive	Basso
179	Argument	xxx=xxxx	predictive	Media
180	Argument	xxxxxxxx	predictive	Media
181	Argument	xxxxxx_xxxx	predictive	Media
182	Argument	xxxxxxxxxx	predictive	Media
183	Argument	xxxxxx	predictive	Basso
184	Argument	xxxxxxxx/xxxxxxxxx	predictive	Alto
185	Argument	xxxxxx	predictive	Basso
186	Argument	xxxxxxxx_xxxx	predictive	Alto
187	Argument	xxxxxxxxxx_xxxx	predictive	Alto
188	Argument	xxx	predictive	Basso
189	Argument	xxx	predictive	Basso
190	Argument	xxxx-xxxxx	predictive	Media
191	Argument	xxxxxxxxx	predictive	Media
192	Argument	xxxxxxxx/xxxxxxxx	predictive	Alto
193	Argument	xxxxxxxx:xxxxxxxx	predictive	Alto
194	Argument	xxxx_xxxxx	predictive	Media
195	Argument	xxxx	predictive	Basso
196	Argument	x-xxxx-xxxxx	predictive	Media
197	Argument	xxxxx_xxxxxxxxxx_xxxxx	predictive	Alto
198	Input Value	../	predictive	Basso
199	Input Value	>><xxx/xxx/xxxxxxx=xxxxx(x)>	predictive	Alto
200	Input Value	xxxx.xxx"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>)	predictive	Alto
201	Input Value	xxxxxxx	predictive	Basso
202	Input Value	xxxxxxxxx:xxxxxxxx	predictive	Alto
203	Pattern	\|xx xx xx\|	predictive	Media
204	Network Port	xxx	predictive	Basso
205	Network Port	xxx/xx (xxxxxx)	predictive	Alto
206	Network Port	xxx/xxxxx	predictive	Media
207	Network Port	xxx/xxxxx	predictive	Media
208	Network Port	xxx xxxxxx xxxx	predictive	Alto

Referenze (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!