Sload 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (454)

言語

en	452
es	2

国・地域

us	8
cn	2
tr	2
ir	2

アクター

Sload	5
Baldr	1
Nemty	1
GandCrab v5	1
CoinMiner	1

関心

タイプ

Not Defined	150
Smartphone Operating System	32
Web Browser	30
Operating System	24
Forum Software	22

ベンダー

Not Defined	174
Google	30
Microsoft	30
Oracle	22
IBM	18

製品

Google Android	30
Microsoft Windows	10
Adobe Acrobat Reader	10
Exponent CMS	8
phpBB	8

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	TAP Plugin ディレクトリトラバーサル	7.0	6.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00406	0.00	CVE-2016-4986
2	Moodle Administration Page SQLインジェクション	7.2	7.2	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00157	0.00	CVE-2022-40315
3	Oracle BI Publisher BI Publisher Security Local Privilege Escalation	7.2	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.94564	0.01	CVE-2019-2616
4	Chamilo LMS File Upload lp_upload.php import_package 特権昇格	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00743	0.00	CVE-2019-13082
5	Phplinkdirectory PHP Link Directory conf_users_edit.php 未知の脆弱性	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00526	0.03	CVE-2011-0643
6	Apache Kylin Restful API 弱い認証	4.8	4.8	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.97421	0.00	CVE-2020-13937
7	vBulletin decodeArguments 特権昇格	7.3	7.3	$0-$5k	$0-$5k	High	Not Defined	0.74237	0.00	CVE-2015-7808
8	vBulletin クロスサイトスクリプティング	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.01146	0.00	CVE-2004-1824
9	Tapatalk Plugin XMLRPC API unsubscribe_forum.php SQLインジェクション	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00242	0.00	CVE-2014-2023
10	phpBB Perl ucp_pm_options.php message_options 未知の脆弱性	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00335	0.02	CVE-2015-1432
11	vBulletin SQLインジェクション	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00214	0.00	CVE-2014-5102
12	PunBB クロスサイトスクリプティング	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00199	0.00	CVE-2010-0455
13	vBulletin redirector.php Redirect	6.6	6.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00122	0.07	CVE-2018-6200
14	vBulletin Vbulletin Forum Remote Code Execution	9.8	8.5	$0-$5k	$0-$5k	Unproven	Official Fix	0.00620	0.00	CVE-2012-4328
15	phpBB install.php 特権昇格	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00642	0.03	CVE-2002-1707
16	PunBB register.php SQLインジェクション	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00543	0.00	CVE-2005-0569
17	vBulletin moderation.php SQLインジェクション	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00284	0.01	CVE-2016-6195
18	vBulletin XMLRPC API breadcrumbs_create.php SQLインジェクション	6.3	6.3	$0-$5k	$0-$5k	High	Unavailable	0.00102	0.02	CVE-2014-2022
19	vBulletin visitormessage.php 特権昇格	7.5	7.4	$0-$5k	$0-$5k	High	Unavailable	0.03104	0.02	CVE-2014-9463
20	PunBB Password Reset moderate.php 特権昇格	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02283	0.00	CVE-2008-1484

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	2.59.117.6	server4.poyrazhosting.com	Sload	2022年05月06日	verified	高
2	51.77.231.185	vps-06fdbf53.vps.ovh.net	Sload	2022年05月06日	verified	高
3	51.254.205.84	84.ip-51-254-205.eu	Sload	2022年05月06日	verified	高
4	XX.XXX.XXX.XXX		Xxxxx	2022年04月12日	verified	高
5	XX.XXX.XXX.XX	xxx.xx	Xxxxx	2022年05月06日	verified	高
6	XX.XX.XXX.XXX		Xxxxx	2022年04月12日	verified	高
7	XXX.XXX.XXX.XX	xxxx.xxxx.xxx	Xxxxx	2022年05月06日	verified	高
8	XXX.XXX.XXX.XXX		Xxxxx	2022年05月06日	verified	高
9	XXX.XXX.XXX.XXX	xxxxxx-xxx.xxxxxxx.xxxxxx.xxx	Xxxxx	2022年05月06日	verified	高
10	XXX.XXX.XX.XX	xxx-xx-xxxx.xxxxx.xxx	Xxxxx	2022年04月12日	verified	高
11	XXX.XXX.XXX.XX	xxxxxxxxxxxxxxxx.xxxxxxxx.xxx	Xxxxx	2022年05月06日	verified	高

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	高
5	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
6	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
7	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
9	TXXXX	CAPEC-0	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
10	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
11	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
13	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
14	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
15	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
17	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
18	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
19	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
20	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (183)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin	predictive	低
2	File	/admin/launch_message.php	predictive	高
3	File	/admin/send_message.php	predictive	高
4	File	/categoriesServlet	predictive	高
5	File	/category.php	predictive	高
6	File	/cgi-bin/login_action.cgi	predictive	高
7	File	/dev/datum/	predictive	中
8	File	/forms/web_runScript	predictive	高
9	File	/getImage	predictive	中
10	File	/html/feed.php	predictive	高
11	File	/includes/rrdtool.inc.php	predictive	高
12	File	/job/(job-name)/api	predictive	高
13	File	/multi-vendor-shopping-script/product-list.php	predictive	高
14	File	/plugin/extended-choice-parameter/js/	predictive	高
15	File	/src/basic/fs-util.c	predictive	高
16	File	/wfo/control/emp_selector_pu	predictive	高
17	File	admin/conf_users_edit.php	predictive	高
18	File	admin/settings/update/	predictive	高
19	File	admin/tags.php	predictive	高
20	File	administrator.cfc	predictive	高
21	File	ajax/api/hook/decodeArguments	predictive	高
22	File	xxxxxxxx/xxxxxxxx/xxxx/xxxx.xx	predictive	高
23	File	xx_xxxxxxxxxx.xxx	predictive	高
24	File	xxxxxxx_xxxxxx.x	predictive	高
25	File	xxxxxx_xx.x	predictive	中
26	File	xxxxxxxxxxx_xxxxxx.xxx	predictive	高
27	File	xxxx_xxxx.x	predictive	中
28	File	xxxxxx/xxx.x	predictive	中
29	File	xxxxxx/xxxx.x	predictive	高
30	File	xxxxxxxxxxx/xxxxxx/xxx.xxx	predictive	高
31	File	xxxxxxx.x	predictive	中
32	File	xxx/xxxx/xxxxxxx/xx/xxxx.xxx	predictive	高
33	File	xxxxxx/xxxxx.x	predictive	高
34	File	xxxxxx/xx/xxxxx_xxxx.x	predictive	高
35	File	xxx_xx_xxx.x	predictive	中
36	File	xxx_xx_xxxxxx.x	predictive	高
37	File	xxx_xxx.x	predictive	中
38	File	xxxx-xxxxx/xxxxxxx-xxxxx.x	predictive	高
39	File	xxxxxx.xxx	predictive	中
40	File	xxxxxxxxx.xxx	predictive	高
41	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	高
42	File	xxxxxxx/xxxxxxxxxx/xxx/xxxx/xx_xxxx.x	predictive	高
43	File	xxxxxxx/xxxxx/xxx/xxx-xxx/xxx-xxx-xxxxxxxx.x	predictive	高
44	File	xxxxxxx/xxx/xxxxxxxxxx/xxxxx.x	predictive	高
45	File	xxxxxxx/xxx/xxx/xxxxxxx.x	predictive	高
46	File	xxxxxxx/xxxxxxxxx/xxxxxxxxx.x	predictive	高
47	File	xxxxx_xxx_xxxxxx.x	predictive	高
48	File	xx_xxxxxxx.x	predictive	中
49	File	xxxxx.xxx	predictive	中
50	File	xxx/xxxxxxxx/xxx.x	predictive	高
51	File	xxx/xxxxxxxx/xxx_xxxxxxxxxxxx.x	predictive	高
52	File	xxx/xxxx/xxxx.x	predictive	高
53	File	xxxxx.x	predictive	低
54	File	xxxxxxxxxx.xxx	predictive	高
55	File	xxxx.x	predictive	低
56	File	xxxxxxxxxxxxx.xxx	predictive	高
57	File	xxxxxxxxxxxxxxxxxxx.xxx	predictive	高
58	File	xxxxxxxxxxx/xxxxxxxx/xxxxxxxxxx.xxx	predictive	高
59	File	xxxxxxxxx/xxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	高
60	File	xxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	高
61	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	高
62	File	xx/xxxxxx/xxxxxx.x	predictive	高
63	File	xx/xxxx/xxxxx.x	predictive	高
64	File	xxxxx.xxx	predictive	中
65	File	xxxxxx/xxxxxxxxxxxxxx	predictive	高
66	File	xxxxxx.xxx	predictive	中
67	File	xxxxx.xxx	predictive	中
68	File	xxx/xxxxxxxxx-xxx	predictive	高
69	File	xx/xxxx/xx.x	predictive	中
70	File	xx/xxx/xxxxxxxx.x	predictive	高
71	File	xx/xxx/xxx-xxxx.x	predictive	高
72	File	xxxxx.xxxx.xxx_xxxxxx	predictive	高
73	File	xxx/xx/xxxx/xxxxx.xxxxx	predictive	高
74	File	xxxxxxx/xxxxx/xxxx_xxxx.x	predictive	高
75	File	xxxxxxxx/xxxxxxx.xxx	predictive	高
76	File	xxxxxxxx/xxx/xxx_xx_xxxxxxx.xxx	predictive	高
77	File	xxxxxxx.xxx	predictive	中
78	File	xxxxxxxxx.xxx	predictive	高
79	File	xxx-xxxx.x	predictive	中
80	File	xxxxxx_xxxx.x	predictive	高
81	File	xxx.x/xxxxxx.x	predictive	高
82	File	xxxxxx/xxxxxxxx.xx	predictive	高
83	File	xxxxx.xxx	predictive	中
84	File	xxxxxxxx.xxx	predictive	中
85	File	xxx_xxxxx_xxxxxx.xxx	predictive	高
86	File	xx_xxxxxx.xxx	predictive	高
87	File	xxxxxx/xxxxxx.x	predictive	高
88	File	xxxxxxxxxx/xx.x	predictive	高
89	File	xxxx.xxx	predictive	中
90	File	xxxxxx.xx	predictive	中
91	File	xxxxx.xxx	predictive	中
92	File	xxxxxxxx.xxx	predictive	中
93	File	xxxxxxx/xxxxxx.x	predictive	高
94	File	xxxxxxx.xxx	predictive	中
95	File	xxxxxx_xxx.x	predictive	中
96	File	xxxxxxxxxxx.xxx	predictive	高
97	File	xxxxxxxx.xxx	predictive	中
98	File	xxx.x	predictive	低
99	File	xxxxxxxxx.xxx	predictive	高
100	File	xxxxxxx.xxx	predictive	中
101	File	xxxxxxxxxx.xxx	predictive	高
102	File	xxxxxxxx.xxx	predictive	中
103	File	xxxx/xxxx/	predictive	中
104	File	xxxxxxx.x	predictive	中
105	File	xxxxxx.x	predictive	中
106	File	xxxxxx.xxx	predictive	中
107	File	xxxxxxxxxx.xxx	predictive	高
108	File	xxxxxxx.xxx/xxxxxxx.xxxxxxxxxxxx/xxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxx.xx	predictive	高
109	File	xxxxxxxxxxx_xxxxx.xxx	predictive	高
110	File	xxxxxx.xxx	predictive	中
111	File	xxxxxxxxxxxxxx.xxx	predictive	高
112	File	xxxxx_xxxxxxx.x	predictive	高
113	File	xxxxx_xxxxxxxx.x	predictive	高
114	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxxx.xxx	predictive	高
115	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	高
116	File	xx-xxxxxxxx/xx-xxxxxxxxx.xxx	predictive	高
117	File	xx-xxxx.xxx	predictive	中
118	File	xxx/xxxxx/xxxxx.xxx	predictive	高
119	File	xx_xxxxxxx.x	predictive	中
120	Library	xxx/xxxxxx.x	predictive	中
121	Library	xxxxxx.xxx	predictive	中
122	Library	xxxxxxxx.xxx	predictive	中
123	Library	xxxxxx.xxx	predictive	中
124	Library	xxx.xxx	predictive	低
125	Argument	-x	predictive	低
126	Argument	/xxx/xxxxxxxxxxx/xxxxxx/xx_xxxxxxxxxx.xxx?xxx=<xxxxx-xxx>/xxxxxxxx=x/xxxxxxx	predictive	高
127	Argument	xxxxxxxxx	predictive	中
128	Argument	xxxxx_xx	predictive	中
129	Argument	xxxx	predictive	低
130	Argument	xxxxxxxxx	predictive	中
131	Argument	xxxxxxxxxxxx$xxxxxx	predictive	高
132	Argument	xxxx_xxx	predictive	中
133	Argument	xxxxx	predictive	低
134	Argument	xxx	predictive	低
135	Argument	xxxxxxxx	predictive	中
136	Argument	xxx_xxxx	predictive	中
137	Argument	xxxx_xxxx	predictive	中
138	Argument	xx	predictive	低
139	Argument	xx/xxxx	predictive	低
140	Argument	xxxxxxxx/xxx	predictive	中
141	Argument	xx_xxxxxxx_xxxx	predictive	高
142	Argument	xxxxxx	predictive	低
143	Argument	xx_xxxxxxx	predictive	中
144	Argument	xxxxxxxx	predictive	中
145	Argument	xxxxxx	predictive	低
146	Argument	xxxx	predictive	低
147	Argument	x_xxx/xxxx	predictive	中
148	Argument	xxxxxx	predictive	低
149	Argument	xxxx_xxxx	predictive	中
150	Argument	xxxxx_xxxx_xxx	predictive	高
151	Argument	xxx	predictive	低
152	Argument	xx	predictive	低
153	Argument	xxxxxxx	predictive	低
154	Argument	x/xxxxx	predictive	低
155	Argument	xxx.xx.xxx_xxx	predictive	高
156	Argument	xxxxxxxxx	predictive	中
157	Argument	xxxxxxxxxxxxxxxxxxxx	predictive	高
158	Argument	xxxxxx_xxxx	predictive	中
159	Argument	xxxxxx_xxxxxx	predictive	高
160	Argument	xxxxxxxxxx/xxxxxx/xxxxxxxx/xxxxxx_xxxxx/xxxxxx_xxx	predictive	高
161	Argument	xxxx	predictive	低
162	Argument	xx	predictive	低
163	Argument	xxxxxxxxxxxxxxxx	predictive	高
164	Argument	xxxxx	predictive	低
165	Argument	xxx_xxx_xxxx	predictive	中
166	Argument	xxxx	predictive	低
167	Argument	xx	predictive	低
168	Argument	xxxxxxxxxxxx	predictive	中
169	Argument	xxxxx	predictive	低
170	Argument	xxxxx/xxxxxxxx	predictive	高
171	Argument	xxxxxx	predictive	低
172	Argument	xxx	predictive	低
173	Argument	xxx	predictive	低
174	Argument	xxxxxxxx/xxxxxxxx	predictive	高
175	Argument	xxxxx	predictive	低
176	Argument	xxxxx/xxxxxx	predictive	中
177	Argument	x/x	predictive	低
178	Input Value	%x[xx]	predictive	低
179	Input Value	..\	predictive	低
180	Input Value	<xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	高
181	Input Value	xxxx	predictive	低
182	Network Port	xxx/xx (xxx)	predictive	中
183	Network Port	xxx/xx (xxxxxx)	predictive	高

参考 (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!