UAC-0010 Analisi

IOB - Indicator of Behavior (12)

Sequenza temporale

Linguaggio

en12

Nazione

cn10
gb2

Attori

Attività

Interesse

Sequenza temporale

Genere

Fornitore

Prodotto

Huawei Taurus-AN00B2
Redis Hyperloglog Data Structure2
Apache HTTP Server2
Oracle Database Server2
RRJ Nueva Ecija Engineer Online Portal2

Vulnerabilità

#VulnerabilitàBaseTemp0dayOggiSfrConEPSSCTICVE
1Better Search Replace Plugin escalazione di privilegi8.07.9$0-$5k$0-$5kNot DefinedNot Defined0.014830.05CVE-2023-6933
2RRJ Nueva Ecija Engineer Online Portal NIA Office students.php cross site scripting3.23.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.000510.08CVE-2024-0183
3GetSimpleCMS theme-edit.php escalazione di privilegi6.46.3$0-$5k$0-$5kProof-of-ConceptUnavailable0.001760.05CVE-2023-6188
4Fortra GoAnywhere MFT License Response Servlet escalazione di privilegi6.76.6$0-$5k$0-$5kHighOfficial Fix0.969750.00CVE-2023-0669
5Redis Hyperloglog Data Structure Command buffer overflow6.46.3$0-$5k$0-$5kNot DefinedOfficial Fix0.229790.03CVE-2019-10193
6Oracle Database Server sql injection9.89.3$5k-$25k$0-$5kProof-of-ConceptNot Defined0.261690.00CVE-2006-3698
7Synacor Zimbra Collaboration sfdc_preauth.jsp Privilege Escalation7.67.6$0-$5k$0-$5kNot DefinedNot Defined0.001340.03CVE-2023-29382
8Apple Mac OS X apache_mod_php escalazione di privilegi9.89.3$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.493390.00CVE-2016-4071
9PHP getTraceAsStrin escalazione di privilegi8.58.1$5k-$25k$0-$5kUnprovenOfficial Fix0.096690.04CVE-2015-4602
10PHP spl_heap.c compare buffer overflow9.89.6$25k-$100k$0-$5kNot DefinedOfficial Fix0.039300.02CVE-2015-4116
11Apache HTTP Server mod_ssl ap_hook_process_connection denial of service7.57.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.011660.05CVE-2017-3169
12Huawei Taurus-AN00B Module buffer overflow6.05.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.000580.00CVE-2020-9238

IOC - Indicator of Compromise (171)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDindirizzo IPHostnameAttoreCampagneIdentifiedGenereFiducia
15.44.42.130uaeser-1672132036.4server.ioUAC-001020/03/2024verifiedAlto
25.44.42.137uaeser-1672132036.4server.ioUAC-001020/03/2024verifiedAlto
35.44.42.144UAC-001020/03/2024verifiedAlto
45.44.42.145UAC-001020/03/2024verifiedAlto
55.44.42.1894vps-ae-01.ip-ptr.techUAC-001020/03/2024verifiedAlto
65.44.42.198uaetest.ip-ptr.techUAC-001020/03/2024verifiedAlto
75.44.42.203UAC-001020/03/2024verifiedAlto
85.44.42.204hostera-ae.ip-ptr.techUAC-001020/03/2024verifiedAlto
924.199.102.96UAC-001020/03/2024verifiedAlto
1024.199.106.158UAC-001020/03/2024verifiedAlto
1131.129.22.88kfgb-kz-mail.ip-ptr.techUAC-001020/03/2024verifiedAlto
1231.129.22.89pt01.ip-ptr.techUAC-001020/03/2024verifiedAlto
1331.129.22.94portugaliya.ip-ptr.techUAC-001020/03/2024verifiedAlto
1431.129.22.95portugaliya.ip-ptr.techUAC-001020/03/2024verifiedAlto
1531.129.22.98pr-2.ip-ptr.techUAC-001020/03/2024verifiedAlto
1631.129.22.99pt-11-sep-1.ip-ptr.techUAC-001020/03/2024verifiedAlto
1731.129.22.100v408sktl0uv.servera.infoUAC-001020/03/2024verifiedAlto
1831.129.22.101UAC-001020/03/2024verifiedAlto
1931.129.22.102ptser-1671619506.4server.ioUAC-001020/03/2024verifiedAlto
2031.129.22.105UAC-001020/03/2024verifiedAlto
2145.61.138.226UAC-001010/10/2022verifiedAlto
2245.61.139.22UAC-001010/10/2022verifiedAlto
2345.77.196.21145.77.196.211.vultrusercontent.comUAC-001010/10/2022verifiedAlto
2445.77.237.25245.77.237.252.vultrusercontent.comUAC-001010/10/2022verifiedAlto
2545.82.13.55new-98.ip-ptr.techUAC-001020/03/2024verifiedAlto
2645.82.13.604s-4-tg-1706753462.ip-ptr.techUAC-001020/03/2024verifiedAlto
2745.82.13.864s-4-tg-1699346951.ip-ptr.techUAC-001020/03/2024verifiedAlto
2845.95.232.102900dsw2.ip-ptr.techUAC-001020/03/2024verifiedAlto
2945.95.232.147ch-27_nov__2.ip-ptr.techUAC-001020/03/2024verifiedAlto
3045.95.232.151cisco-18-alma.msk.hostUAC-001020/03/2024verifiedAlto
3145.95.233.145fr-w8mchcwusxpkaym2.ip-ptr.techUAC-001020/03/2024verifiedAlto
3245.95.233.161alihanfranc.ip-ptr.techUAC-001020/03/2024verifiedAlto
3345.95.233.163fr-30-oct_2.ip-ptr.techUAC-001020/03/2024verifiedAlto
3446.29.234.95lvser.ip-ptr.techUAC-001020/03/2024verifiedAlto
3546.29.234.99litvatazestar.ip-ptr.techUAC-001020/03/2024verifiedAlto
36XX.XX.XXX.XXXxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
37XX.XX.XX.XXXxx.xx.xx.xxx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
38XX.XX.XXX.XXxx.xx.xxx.xx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx10/10/2022verifiedAlto
39XX.XXX.XXX.XXXxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
40XX.XXX.XXX.XXXxxxxxxx.xxxxxxxxxxxxx.xxxXxx-xxxx20/03/2024verifiedAlto
41XX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
42XX.XX.XXX.XXXxx.xx.xxx.xxx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx10/10/2022verifiedAlto
43XX.XXX.XXX.XXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
44XX.XXX.XXX.XXXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
45XX.XXX.XXX.XXXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
46XX.XXX.XXX.XXxxxx-xx-xxx-xxx-xx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
47XX.XXX.XXX.XXXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
48XX.XXX.XXX.XXXxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
49XX.XXX.XXX.XXXxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
50XX.XXX.XXX.XXXxxx_xx_x_x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
51XX.XX.XXX.XXXxxxxx-xxxxxxxxxx.xxxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
52XX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
53XX.XXX.XXX.XXxxxxxxx-xxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
54XX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
55XX.XX.XXX.XXxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
56XX.XX.XXX.XXxx-xxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
57XX.XX.XXX.XXXxxx-x-x_x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
58XX.XXX.XX.XXxx_xxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
59XX.XXX.XX.XXXxxxxx.xxxXxx-xxxx20/03/2024verifiedAlto
60XX.XXX.XX.XXXxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
61XX.XXX.XX.XXXxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
62XX.XXX.XX.XXXxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
63XX.XXX.XX.XXXxxxx_x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
64XX.XXX.XX.XXXxxxx_xx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
65XX.XXX.XX.XXXxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
66XX.XXX.XX.XXXxx-x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
67XX.XXX.XX.XXXxx-x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
68XX.XXX.XXX.XXXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
69XX.XX.XXX.XXXxxxxxxxx.xxxxxxx.xxXxx-xxxx21/07/2022verifiedAlto
70XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
71XXX.XXX.XX.XXxxxxxxxx.xxxxxx-xx-xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
72XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
73XXX.XXX.XX.XXXxxxxxxx.xxxx-xx-xxxxxXxx-xxxx20/03/2024verifiedAlto
74XXX.XXX.XXX.XXXXxx-xxxx10/10/2022verifiedAlto
75XXX.XX.XXX.XXXXxx-xxxx10/10/2022verifiedAlto
76XXX.XX.XXX.XXxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
77XXX.XX.XXX.XXXxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
78XXX.XX.XXX.XXXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
79XXX.XX.XXX.XXXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
80XXX.XX.XXX.XXXxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
81XXX.XXX.XX.XXXxx-xxxx20/03/2024verifiedAlto
82XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
83XXX.XXX.XX.XXXxxx.xxx.xx.xxx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx10/10/2022verifiedAlto
84XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
85XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
86XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
87XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
88XXX.XXX.XX.XXxxx.xxx.xx.xx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
89XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
90XXX.XXX.XX.XXXXxx-xxxx10/10/2022verifiedAlto
91XXX.XXX.XX.XXXxx-xxxx10/10/2022verifiedAlto
92XXX.XXX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
93XXX.XXX.XX.XXXxx-xxxx20/03/2024verifiedAlto
94XXX.XX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
95XXX.XX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
96XXX.XXX.XXX.XXXxxxxxxx.xxxxxxxxxxxxx.xxxXxx-xxxx20/03/2024verifiedAlto
97XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
98XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
99XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
100XXX.XXX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
101XXX.XXX.XX.XXXXxx-xxxx10/10/2022verifiedAlto
102XXX.XXX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
103XXX.XX.XXX.XXXxx-xxxx10/10/2022verifiedAlto
104XXX.XXX.XX.XXXxxxxxxx.xxxxxxxxxxxxx.xxxXxx-xxxx20/03/2024verifiedAlto
105XXX.XX.XXX.XXXxxxxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
106XXX.XX.XXX.XXXxxxx.xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
107XXX.XX.XXX.XXXxxxx.xxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
108XXX.XX.XXX.XXXxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
109XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
110XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
111XXX.XX.XXX.XXXxxxxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
112XXX.XX.XXX.XXXxxxxxxxx.xxXxx-xxxx20/03/2024verifiedAlto
113XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
114XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
115XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
116XXX.XX.XXX.XXxx-x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
117XXX.XX.XXX.XXxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
118XXX.XX.XXX.XXxxx_xxx_xx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
119XXX.XX.XXX.XXxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
120XXX.XX.XXX.XXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
121XXX.XX.XXX.XXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
122XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
123XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
124XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
125XXX.XXX.XXX.XXXxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
126XXX.XXX.XXX.XXXxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
127XXX.XXX.XXX.XXXxx-xx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
128XXX.XXX.XXX.XXXxxxxx_xxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
129XXX.XXX.XXX.XXXxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
130XXX.XXX.XXX.XXXxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
131XXX.XXX.XXX.XXXxxxxxxxxxxx.xxxxxxx.xxxxXxx-xxxx20/03/2024verifiedAlto
132XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
133XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
134XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
135XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
136XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
137XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
138XXX.XX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
139XXX.XXX.XXX.XXXXxx-xxxx20/03/2024verifiedAlto
140XXX.XXX.XXX.XXXXxx-xxxx10/10/2022verifiedAlto
141XXX.XX.XXX.XXxxx-xxxxx-xxxxxx.xxxxxxx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
142XXX.XX.XXX.XXXxxx-xxxxx-xxxxxx.xxxxxxx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
143XXX.XX.XXX.XXXxxx-xxxxx-xxxxxx.xxxxxxx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
144XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
145XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
146XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
147XXX.XXX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
148XXX.XX.XXX.XXxxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
149XXX.XX.XXX.XXXxxx-xx-xxx-xxx.xxxxxxxx.xxxxxxxxxxxx.xxXxx-xxxx21/07/2022verifiedAlto
150XXX.XX.XX.XXxxxx-xxx-xx-xxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
151XXX.XX.XX.XXXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
152XXX.XX.XX.XXXxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
153XXX.XX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
154XXX.XX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
155XXX.XX.XX.XXXXxx-xxxx20/03/2024verifiedAlto
156XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
157XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxxxxxxx.xxxXxx-xxxx10/10/2022verifiedAlto
158XXX.XXX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
159XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xxxxxxxxx.xxxXxx-xxxx20/03/2024verifiedAlto
160XXX.XXX.XX.XXxxxx-xxxx_xxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
161XXX.XXX.XX.XXxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
162XXX.XXX.XX.XXxx_xxxxx_x.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
163XXX.XXX.XX.XXxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
164XXX.XX.XXX.XXxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
165XXX.XX.XXX.XXXxx-xxxx20/03/2024verifiedAlto
166XXX.XX.XXX.XXxxxxxxxx-xxxx-xx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
167XXX.XX.XXX.XXxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
168XXX.XX.XXX.XXxxxxxxxxxxxx.xx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
169XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxxxxxxxxxxxx.xxxXxx-xxxx21/07/2022verifiedAlto
170XXX.XX.XXX.XXxxx-xxxxx-xxxxxx.xxxxxxx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto
171XXX.XX.XXX.XXXxxxxxx-xxxx.xxxxxxx-xxx.xxxxXxx-xxxx20/03/2024verifiedAlto

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClasseVulnerabilitàAccesso al vettoreGenereFiducia
1T1059CAPEC-242CWE-94Argument InjectionpredictiveAlto
2TXXXX.XXXCAPEC-18CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveAlto
3TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (5)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorGenereFiducia
1File/admin/students.phppredictiveAlto
2File/admin/theme-edit.phppredictiveAlto
3Filexxx/xxx/xxx_xxxx.xpredictiveAlto
4Filexxxx_xxxxxxx.xxxpredictiveAlto
5Argumentxxx.xxxx$xxxxxxpredictiveAlto

Referenze (7)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!