Space Pirates 解析

IOB - Indicator of Behavior (244)

タイムライン

言語

en178
zh48
sv4
es4
it4

国・地域

cn132
us104
it2
zw2

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

WordPress8
Fortinet FortiOS8
PHP6
Cisco IOS XE4
Laravel4

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩5.35.2$5k-$25k$0-$5kHighWorkaround0.020160.02CVE-2007-1192
2DZCP deV!L`z Clanportal config.php 特権昇格7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009430.81CVE-2010-0966
3PHP phpinfo クロスサイトスクリプティング6.35.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.089850.08CVE-2006-0996
4WordPress URL Validator Redirect6.66.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.005090.03CVE-2018-10101
5WordPress get_the_generator クロスサイトスクリプティング5.25.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.004510.00CVE-2018-10102
6PHP phpinfo クロスサイトスクリプティング4.33.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.021010.04CVE-2007-1287
7Grafana Dashboard 特権昇格6.46.3$0-$5k$0-$5kNot DefinedOfficial Fix0.000440.03CVE-2023-2801
8Google Chrome V8 Remote Code Execution6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.243800.02CVE-2020-16040
9WordPress Login Page Redirect6.26.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.007310.04CVE-2018-10100
10SquirrelMail compose.php Serialized 特権昇格9.89.8$0-$5k$0-$5kNot DefinedNot Defined0.004560.02CVE-2020-14932
11GNU Screen socket.c ReceiveMsg 特権昇格4.94.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000620.02CVE-2023-24626
12SmarterTools SmarterStats Remote Code Execution9.89.8$0-$5k$0-$5kNot DefinedNot Defined0.007770.03CVE-2011-2159
13Git Plugin Build 特権昇格6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.011560.09CVE-2022-36883
14MinDoc ZIP File 特権昇格5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.000840.00CVE-2022-29637
15MinDoc attach_#.jpg 特権昇格7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000560.00CVE-2018-19114
16Wondershare Filmora NativePushService 特権昇格6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000520.01CVE-2023-31747
17Apache RocketMQ Broker ディレクトリトラバーサル6.36.3$5k-$25k$5k-$25kNot DefinedNot Defined0.000580.04CVE-2019-17572
18Nfec.de RechnungsZentrale authent.php4 SQLインジェクション5.34.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.015130.03CVE-2006-1954
19Synacor Zimbra Collaboration Suite WebEx Zimlet 特権昇格8.58.2$0-$5k$0-$5kNot DefinedOfficial Fix0.706480.00CVE-2020-7796
20Basti2web Book Panel books.php SQLインジェクション7.37.0$0-$5k$0-$5kHighOfficial Fix0.000640.04CVE-2009-4889

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (18)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (88)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/controller/Index.phppredictive
2File/GetCSSashx/?CP=%2fwebconfigpredictive
3File/includes/rrdtool.inc.phppredictive
4File/login.phppredictive
5File/robots.txtpredictive
6File/rompredictive
7File/srv/www/htdocspredictive
8Fileaa/../../uploads/blog/201811/attach_#.jpgpredictive
9Fileabook_database.phppredictive
10Fileadmin/killsourcepredictive
11Filexxx_xxxxxx.xxxpredictive
12Filexxxxxxxxxxx.xxxpredictive
13Filexxxxxxx.xxxxpredictive
14Filexxx/xxx.xpredictive
15Filexxxxx.xxxpredictive
16Filexxxxxxxx.xxxpredictive
17Filexxxxxxxx/xxxxxxxxxx.xxxxpredictive
18Filexxxxxxx.xxxpredictive
19Filexxxx/xxxxxxxxxxxxxxx.xxxpredictive
20Filexxxxxxxxx.xxxpredictive
21Filexxxxxxx/xxxxxxxx.xxxpredictive
22Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictive
23Filexxxx.xxxpredictive
24Filexxxxxxxxxxx.xxxpredictive
25Filexxx/xxxxxx.xxxpredictive
26Filexxxxxxx/xxx_xxxxx_xxxxxx.xxxpredictive
27Filexxxxx.xxxpredictive
28Filexxxxxxx/xxxxxxxxxxxxx.xxxxpredictive
29Filexxxx_xxxx.xxxpredictive
30Filexxxxxx.xpredictive
31Filexxxx_xxxxxx.xxxpredictive
32Filexxxxxxxxxxxx.xxxpredictive
33Filexxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxxpredictive
34Filexxxxxxxxxx.xxxpredictive
35Filexxxxxxxx_xxxx.xxxpredictive
36Filexxxxxxx.xpredictive
37Filexxxxxx.xxxpredictive
38Filexxxx.xxxpredictive
39Filexxxxxx/xxxxxx.xxxxx.xxxpredictive
40Filexxxxxx.xpredictive
41Filexxx/xxxxxxxx.xpredictive
42Filexxxxxxx_xxxxx.xxxpredictive
43Filexxxxxxx.xxxpredictive
44Filexxx_xxxxxx.xxxpredictive
45Filexxxx.xxxpredictive
46Filexxxxxx.xxxpredictive
47Filexx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxx_xxxxxxxx_xxxxxxx&xxx=xxxxxxxx_xxxxxpredictive
48Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictive
49Filexx-xxxxxxxx/xxxx.xxxpredictive
50Filexx-xxxxxxxx/xxxxxxxxx.xxxpredictive
51Filexx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxxpredictive
52Filexx-xxxxx.xxxpredictive
53Filexx-xxxxxxxx.xxxpredictive
54Filexxx/xxxx.xxxpredictive
55Filexx_xxxxx/xxxxxx/xxxxxxxxx/xxxxxx_xxxx.xxxpredictive
56Libraryxxxxxxxxxx/xxxxx_xxx.xpredictive
57Argumentxxx_xxpredictive
58Argumentxxxxxxxxxxxpredictive
59Argumentxxxxxxxxpredictive
60Argumentxxxxxxxxpredictive
61Argumentxxxxxxpredictive
62Argumentxxxpredictive
63Argumentxxxxxxxxxxpredictive
64Argumentxxxpredictive
65Argumentxxxx_xxpredictive
66Argumentxxxxxxpredictive
67Argumentxxxxxxxxpredictive
68Argumentxxpredictive
69Argumentxxpredictive
70Argumentxxxxpredictive
71Argumentxxxxxxxxxxpredictive
72Argumentxxxpredictive
73Argumentxxxxxpredictive
74Argumentxxxxxpredictive
75Argumentxxxxxxxxpredictive
76Argumentxxxxxxx xxxxxpredictive
77Argumentxxx_xxpredictive
78Argumentxxx_xxxxxpredictive
79Argumentxxxpredictive
80Argumentxxxpredictive
81Argumentxxxxpredictive
82Argumentxxxx_xxxxxpredictive
83Argument\xxx\predictive
84Argument_xxxxxpredictive
85Argument_xxxxxx_xxxxxxx_xxxxpredictive
86Input Value..predictive
87Input Value/xxxx.xxxpredictive
88Network Portxxx/xxxxxpredictive

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!