Eternity 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (310)

言語

en	254
ru	14
ja	12
de	10
es	6

国・地域

ru	86
cn	22
us	20
es	2
nl	2

アクター

Lilith	3
RedLine Stealer	3
Sliver	2
CredStealer	1
TeamTNT	1

関心

タイプ

Not Defined	138
Operating System	26
WordPress Plugin	22
Content Management System	12
E-Commerce Management Software	10

ベンダー

Not Defined	100
Apple	12
SourceCodester	10
Google	8
Dahua	6

製品

Apple macOS	10
Linux Kernel	6
Dahua DHI-HCVR7216A-S3	4
Google Chrome	4
4Site CMS	4

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.13	CVE-2010-0966
2	MGB OpenSource Guestbook email.php SQLインジェクション	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.84	CVE-2007-0354
3	Atlassian Bitbucket Server and Data Center Environment Variable 特権昇格	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.61094	0.02	CVE-2022-43781
4	Atlassian Bitbucket Data Center/Bitbucket Server Privilege Escalation	8.3	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00097	0.05	CVE-2023-22513
5	Dahua DHI-HCVR7216A-S3 SmartPSS Auto Login Hash 特権昇格	6.7	6.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00331	0.04	CVE-2017-6342
6	Cyr to Lat Plugin SQLインジェクション	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00050	0.03	CVE-2022-4290
7	nophp index.php 特権昇格	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00099	0.03	CVE-2023-28854
8	SourceCodester Simple Task Allocation System manage_user.php SQLインジェクション	7.5	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00132	0.04	CVE-2023-1791
9	SourceCodester Young Entrepreneur E-Negosyo System login.php SQLインジェクション	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00135	0.04	CVE-2023-1737
10	Lighthouse Development Squirrelcart cart_content.php 特権昇格	6.5	5.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02731	0.00	CVE-2006-2483
11	Jelsoft impex ImpExData.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04317	0.04	CVE-2006-1382
12	phpBG forum.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.22228	0.04	CVE-2007-4636
13	Linux Foundation Xen EFLAGS Register SYSENTER 特権昇格	6.2	5.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00062	0.02	CVE-2013-1917
14	PHPWind goto.php Redirect	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00348	0.04	CVE-2015-4134
15	HPE Onboard Administrator Reflected クロスサイトスクリプティング	4.4	4.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00050	0.02	CVE-2020-7132
16	xwikisas macro-pdfviewer PDF Viewer Macro 情報の漏洩	6.0	5.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.00	CVE-2024-30263
17	Moises Heberle WooCommerce Bookings Calendar Plugin クロスサイトスクリプティング	5.0	4.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00043	0.00	CVE-2024-31117
18	Foxit PDF Reader AcroForm メモリ破損	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00046	0.03	CVE-2024-30354
19	Tenda AC10 SetStaticRouteCfg fromSetRouteStatic メモリ破損	8.8	8.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.04	CVE-2024-2581
20	MediaTek MT8798 Lk メモリ破損	6.7	6.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.02	CVE-2024-20022

キャンペーン (1)

These are the campaigns that can be associated with the actor:

LilithBot

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	キャンペーン	Identified	タイプ	信頼度
1	45.9.148.203		Eternity	LilithBot	2022年10月09日	verified	高
2	XX.XX.XXX.XX		Xxxxxxxx	Xxxxxxxxx	2022年10月09日	verified	高
3	XX.XXX.XX.XXX		Xxxxxxxx	Xxxxxxxxx	2022年10月09日	verified	高
4	XXX.X.XX.XXX	xxxxxxxx.xxxxxx-xx-xxxxxx.xx	Xxxxxxxx	Xxxxxxxxx	2022年10月09日	verified	高

TTP - Tactics, Techniques, Procedures (21)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CWE-21, CWE-22, CWE-425	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CWE-94	Argument Injection	predictive	高
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	T1068	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	高
6	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	高
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
9	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
10	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
15	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	高
18	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
19	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
20	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
21	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (173)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin.php/admin/art/data.html	predictive	高
2	File	/ajax.php?action=read_msg	predictive	高
3	File	/debug/pprof	predictive	中
4	File	/desktop_app/file.ajax.php?action=uploadfile	predictive	高
5	File	/env	predictive	低
6	File	/forum/away.php	predictive	高
7	File	/goform/SetNetControlList	predictive	高
8	File	/goform/SetStaticRouteCfg	predictive	高
9	File	/librarian/bookdetails.php	predictive	高
10	File	/ptipupgrade.cgi	predictive	高
11	File	/secure/admin/InsightDefaultCustomFieldConfig.jspa	predictive	高
12	File	/src/chatbotapp/chatWindow.java	predictive	高
13	File	/staff/bookdetails.php	predictive	高
14	File	about.php	predictive	中
15	File	admin.color.php	predictive	高
16	File	admin/addons/archive/archive.php	predictive	高
17	File	admin/categories_industry.php	predictive	高
18	File	admin/class-woo-popup-admin.php	predictive	高
19	File	admin/content/postcategory	predictive	高
20	File	admincp/auth/secure.php	predictive	高
21	File	xxxxxxxxxxxx/xxxxx/xxxx/	predictive	高
22	File	xxxxxxxxx.xxx	predictive	高
23	File	xxxxx.xxx	predictive	中
24	File	xxx_xx_xxx_xxx.xxx	predictive	高
25	File	xxxxxxx/xxxx.xxx	predictive	高
26	File	xxxxxxxx.xxx	predictive	中
27	File	xxxxxxxx.xxxxxxx.xxx	predictive	高
28	File	xxxx_xxxxxxxx.xxx	predictive	高
29	File	xxx.x	predictive	低
30	File	xxxxx.xxx	predictive	中
31	File	xxxx_xxxxxxx.xxx	predictive	高
32	File	xxxxxxxx.xxx	predictive	中
33	File	xxx	predictive	低
34	File	xxx/xxxxxxxx/xxxx/xxxxxxxx.xx	predictive	高
35	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	高
36	File	xxxxxxxxx/xx_xxxxx.xxxxx.xxx	predictive	高
37	File	xxxxxx.xxx	predictive	中
38	File	xxxxxxx/xxx/xxx-xx.x	predictive	高
39	File	xxx_xxxx.x	predictive	中
40	File	xxxxx.xxx	predictive	中
41	File	xxx/xxxxx.xxxxx	predictive	高
42	File	xxxx/xxxxxxxx/xxx&xx=xxxxxxx	predictive	高
43	File	xxxxxxxxxxxx_xxxx.xxx	predictive	高
44	File	xxxx.xxx	predictive	中
45	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xx	predictive	高
46	File	xxxxxx.xxx	predictive	中
47	File	xxxxxxxxx.xxx	predictive	高
48	File	xxx/xxxxxx.xxx	predictive	高
49	File	xxxxxxx/xxxxx.xxx.xxx	predictive	高
50	File	xxxxxxx/xxxxxx.xxx	predictive	高
51	File	xxxxxxxx/xxxx.xxx	predictive	高
52	File	xxxxxxxx/xxx/xxx_xx_xxxxxxx.xxx	predictive	高
53	File	xxxxx.xxxx	predictive	中
54	File	xxxxx.xxx	predictive	中
55	File	xxxxxx/xxxxxx/xxxxx.xxx	predictive	高
56	File	xx_xxxxx.x	predictive	中
57	File	xxxxx_xxxxx.x	predictive	高
58	File	xxxxxx/xxx/xxxxxxxx.x	predictive	高
59	File	xxxxxxxx.xxx.xxx	predictive	高
60	File	xxxxxxxx/xxxx_xxxxxxx/xxxx_xxxx_xxxxx.xxx	predictive	高
61	File	xxxx.xxx	predictive	中
62	File	xxxxx.xxx	predictive	中
63	File	xxxxx.xxx	predictive	中
64	File	xxxxxx_xxxx.xxx	predictive	高
65	File	xxxxxx.xxx	predictive	中
66	File	xxxxxxxx.xxx	predictive	中
67	File	xxxxxxx/xxxxxx/xxxxxx/xxxxxxxxx.xxx#xxx	predictive	高
68	File	xxx/xxxxxxxxx/xx_xxx_xxxxxx.x	predictive	高
69	File	xxxx_xxxxxx.xxx	predictive	高
70	File	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
71	File	xxxxxxxxxxx-xxxx.xx	predictive	高
72	File	xxxxxxxxx.xxx.xxx	predictive	高
73	File	xxxxxxxxx/xxxxx.xxxxx	predictive	高
74	File	xxxxxxxxxxxxxx.xxx	predictive	高
75	File	xxxxx/xxxxx.xxxxx	predictive	高
76	File	xxxxxxx.x	predictive	中
77	File	xxxxxxxx.xxx	predictive	中
78	File	xxxxxxxxxxxxx.xxx	predictive	高
79	File	xx_xxxx.xx	predictive	中
80	File	xxxxxx-xxxxxx.xxx	predictive	高
81	File	xxxxxx_xxx_xxxxxx.xxx	predictive	高
82	File	xxxx_xxxxxxxxx.xxx	predictive	高
83	File	xxxxxxxxxxxx.xxx	predictive	高
84	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
85	File	xxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxx	predictive	高
86	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	高
87	File	xxx.x	predictive	低
88	File	xxxxxxxxxxxxxxxx	predictive	高
89	File	xxxxxxx_xxxxxxx.xxx	predictive	高
90	File	xxxxxxxxx-xx-xxxxxxxx.xxx	predictive	高
91	File	xxxxxxxxxx.xxx	predictive	高
92	File	xxx-xxxxxxx-xxx.xx	predictive	高
93	File	xxxx-xxxxx.xxx	predictive	高
94	File	xxxxxxxxxxxxxxx.xxx	predictive	高
95	File	xxxxxxx.x	predictive	中
96	File	xxxxxxxxx.xxx	predictive	高
97	File	xxx.xxx	predictive	低
98	File	xx-xxxxx-xxxxxx.xxx	predictive	高
99	File	xx-xxxxxxxxx.xxx	predictive	高
100	File	~/xxxxxxxx/xxxxx-xxx-xxxxxx-xxxxxxxxxxxx.xxx	predictive	高
101	Library	/xxx/xxx/xxx/x.x/xxxx/xxxxxxxxxx/xxx.xxx	predictive	高
102	Library	xx.xxxxxxxxxx.xxxxxxxxxxxxxxx.xxx	predictive	高
103	Library	xxx/xxxxxxxxx/xxxxxxxx.xxxxx.xxx	predictive	高
104	Library	xxxxxxx.xxx	predictive	中
105	Library	xxxxx.xxx	predictive	中
106	Library	xxxxxxxxxxxxx.xxx)	predictive	高
107	Argument	xxxxxx	predictive	低
108	Argument	xxxxxxxxxxx	predictive	中
109	Argument	xxx	predictive	低
110	Argument	xxxxxxx_xxxx	predictive	中
111	Argument	xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxx	predictive	高
112	Argument	xxxxxx	predictive	低
113	Argument	xxxxxxxx	predictive	中
114	Argument	xxxxxx	predictive	低
115	Argument	x:\xxxxxxx\x	predictive	中
116	Argument	xxxxx_xxxx	predictive	中
117	Argument	xxxx_xxx_xxxx	predictive	高
118	Argument	xxx_xx	predictive	低
119	Argument	xxxxxxxxxx	predictive	中
120	Argument	xxx	predictive	低
121	Argument	xxxxx_xx	predictive	中
122	Argument	xxxxxxxx	predictive	中
123	Argument	xxxxxxxxxxxxxxxxx	predictive	高
124	Argument	xxx_xxx	predictive	低
125	Argument	xxxxx_xxxx_xxxx	predictive	高
126	Argument	xxxx	predictive	低
127	Argument	xxxx	predictive	低
128	Argument	xxxx_xxxxx	predictive	中
129	Argument	xxxxxxxx	predictive	中
130	Argument	xxxxxx_xxx	predictive	中
131	Argument	xxxx	predictive	低
132	Argument	xx	predictive	低
133	Argument	xxxxxxxxx	predictive	中
134	Argument	xxx_xxx	predictive	低
135	Argument	xxxxxxx	predictive	低
136	Argument	xxxxxx	predictive	低
137	Argument	xxxxx_xxx	predictive	中
138	Argument	xxxxxxxx	predictive	中
139	Argument	xxxx	predictive	低
140	Argument	xxxx	predictive	低
141	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
142	Argument	xxxxxxxxx_xxxx_xxxx	predictive	高
143	Argument	xxxxx	predictive	低
144	Argument	xx	predictive	低
145	Argument	xxxxxx xxxxxx	predictive	高
146	Argument	xxxx_xx	predictive	低
147	Argument	xxxx	predictive	低
148	Argument	xxxxxxxxx	predictive	中
149	Argument	xxxxx_xxxx_xxxx	predictive	高
150	Argument	xxxxx_xxxxxxx_xxxx	predictive	高
151	Argument	xxx	predictive	低
152	Argument	xxxxxxxxx	predictive	中
153	Argument	xxxxxxx	predictive	低
154	Argument	xxx_xxxx	predictive	中
155	Argument	x_xxxx	predictive	低
156	Argument	xxxxxxx	predictive	低
157	Argument	xxxxxx/xxxxxx_xxxxxx	predictive	高
158	Argument	xxxxxx/xxxxx	predictive	中
159	Argument	xxx	predictive	低
160	Argument	xxxxx	predictive	低
161	Argument	xxx_xxxxxxxxxxxx	predictive	高
162	Argument	xxxxxxxxxx	predictive	中
163	Argument	xx_xx	predictive	低
164	Argument	xxxxxxxxxxx	predictive	中
165	Argument	xx	predictive	低
166	Argument	xxx	predictive	低
167	Argument	xxxxxx	predictive	低
168	Argument	xxxxxxxx	predictive	中
169	Argument	x_xxxxxxxx	predictive	中
170	Argument	x-xxxxxxxxx-xxxx	predictive	高
171	Argument	\xxx\	predictive	低
172	Input Value	' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxx	predictive	高
173	Input Value	//xxx//xxxxxxx.xxx	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!