WASP Stealer 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (178)

言語

en	106
ru	46
es	14
de	12

国・地域

us	112
ru	58
jp	2
cn	2

アクター

WASP Stealer	8
RedLine Stealer	6
Cobalt Strike	3
Remcos	2
Sliver	2

関心

タイプ

Not Defined	70
Smartphone Operating System	8
JavaScript Library	6
WordPress Plugin	6
Programming Language Software	6

ベンダー

Not Defined	52
Fortinet	10
Oracle	6
Apple	6
Google	6

製品

OpenSSH	4
jQuery	4
Microsoft Windows	4
Fortinet FortiOS	4
Joomla CMS	4

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	nginx 特権昇格	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	3.19	CVE-2020-12440
2	AppServ Open Project サービス拒否	7.5	7.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.08073	0.00	CVE-2005-4296
3	Citrix Metaframe login.asp クロスサイトスクリプティング	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00867	0.00	CVE-2003-1157
4	Cacti XML Template File templates_import.php クロスサイトスクリプティング	4.8	4.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00069	0.00	CVE-2023-50569
5	Moment.js ディレクトリトラバーサル	6.9	6.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00330	0.13	CVE-2022-24785
6	Cutephp CuteNews Protection Feature shows.inc.php サービス拒否	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02946	0.00	CVE-2005-3010
7	Apache Tomcat JmxRemoteLifecycleListener 特権昇格	9.8	9.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.25115	0.04	CVE-2016-8735
8	Bitrix Site Manager Vote Module Remote Code Execution	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00668	0.07	CVE-2022-27228
9	Microsoft Windows Remote Desktop Protocol Remote Code Execution	7.0	6.4	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00254	0.03	CVE-2023-35332
10	myPHPCalendar admin.php 特権昇格	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02576	0.04	CVE-2006-6812
11	Squitosoft Squito Gallery photolist.inc.php メモリ破損	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01371	0.04	CVE-2005-2258
12	DUware DUdownload detail.asp SQLインジェクション	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00254	0.03	CVE-2006-6367
13	Trevor Hogan BNBT Util_DecodeHTTPAuth サービス拒否	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.10255	0.00	CVE-2004-2029
14	AWStats awstats.pl ディレクトリトラバーサル	5.5	5.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00499	0.05	CVE-2020-35176
15	Metertek pagelog.cgi ディレクトリトラバーサル	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01047	0.02	CVE-2000-0940
16	Cutephp CuteNews show_archives.php ディレクトリトラバーサル	5.3	5.0	$0-$5k	計算中	Proof-of-Concept	Not Defined	0.06846	0.00	CVE-2005-3507
17	GNU Mailman Admin Login Page/Pipermail Index Summary クロスサイトスクリプティング	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01480	0.03	CVE-2002-0388
18	Craig Patchett Fileseek FileSeek.cgi ディレクトリトラバーサル	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04964	0.00	CVE-2002-0611
19	Import any XML or CSV File Plugin ZIP File 特権昇格	5.9	5.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00106	0.04	CVE-2023-7082
20	liveSite edit_designer_region.php Privilege Escalation	8.0	7.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00556	0.04	CVE-2024-22638

キャンペーン (1)

These are the campaigns that can be associated with the actor:

Invisible Challenge

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	キャンペーン	Identified	タイプ	信頼度
1	3.86.190.205	ec2-3-86-190-205.compute-1.amazonaws.com	WASP Stealer		2023年06月21日	verified	中
2	4.201.87.248		WASP Stealer		2023年06月21日	verified	高
3	18.204.35.132	ec2-18-204-35-132.compute-1.amazonaws.com	WASP Stealer		2023年06月21日	verified	中
4	XX.XXX.XX.XX		Xxxx Xxxxxxx		2023年06月21日	verified	高
5	XX.XXX.X.XXX		Xxxx Xxxxxxx		2023年06月21日	verified	高
6	XX.XXX.XXX.XX	xx.xxx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx		2023年06月21日	verified	中
7	XX.XX.XX.XXX		Xxxx Xxxxxxx		2023年06月21日	verified	高
8	XX.XXX.XXX.XXX		Xxxx Xxxxxxx	Xxxxxxxxx Xxxxxxxxx	2022年12月06日	verified	高
9	XX.XXX.XXX.XX	xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxx Xxxxxxx		2023年06月21日	verified	中
10	XX.XX.XXX.XXX	xx-xx-xx-xxx-xxx-xxxxx.xxx.xxxxxx-xx-xxxx.xxx	Xxxx Xxxxxxx		2023年06月21日	verified	高
11	XX.XXX.X.XXX	xx.xxxxxxx	Xxxx Xxxxxxx		2023年06月21日	verified	高

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	高
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	高
4	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
5	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
6	TXXXX	CAPEC-150	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	高
7	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX	CAPEC-0	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
9	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
10	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
11	TXXXX.XXX	CAPEC-112	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
12	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (137)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin/admin.php	predictive	高
2	File	/admin/index2.html	predictive	高
3	File	/api/baskets/{name}	predictive	高
4	File	/application/index/controller/Databasesource.php	predictive	高
5	File	/livesite/edit_designer_region.php	predictive	高
6	File	/view-pass-detail.php	predictive	高
7	File	/wp-admin/options-general.php	predictive	高
8	File	admin.color.php	predictive	高
9	File	admin.cropcanvas.php	predictive	高
10	File	admin.joomlaradiov5.php	predictive	高
11	File	admin.php	predictive	中
12	File	admin/addons/archive/archive.php	predictive	高
13	File	administrator/components/com_media/helpers/media.php	predictive	高
14	File	admin\model\catalog\download.php	predictive	高
15	File	akocomments.php	predictive	高
16	File	album_portal.php	predictive	高
17	File	xx_xxxxxxxxxx.xxx	predictive	高
18	File	xxxxxxxxxxxxx.xxx	predictive	高
19	File	xxxxxx/xxxxxxx/xxxx/xxxxx.xxx	predictive	高
20	File	xxxxx.xxx	predictive	中
21	File	xxx_xxxxxxxxx.xxx	predictive	高
22	File	xxx-xxx/xxxxxxx.xx	predictive	高
23	File	xxxxxxx.xxx.xxx	predictive	高
24	File	xxxxxx/xxxx.xxx	predictive	高
25	File	xxxxxx.xxx	predictive	中
26	File	xxxxxx_xxxxx.xxx	predictive	高
27	File	xxxxxxxxx/xx_xxxxx.xxxxx.xxx	predictive	高
28	File	xxxxxx.xxx	predictive	中
29	File	xxxxxx.xxx	predictive	中
30	File	xxxxxxxx.xxx	predictive	中
31	File	xxxxxxx_xxxxxxx.xx	predictive	高
32	File	xxxxxxxx.xxx	predictive	中
33	File	xxxxxxxxxx.xxx	predictive	高
34	File	xxxxxxxx.xxx	predictive	中
35	File	xxx/xxxxx.xxx.xxx	predictive	高
36	File	xxxxxxx.xxx	predictive	中
37	File	xxxxx.xxx	predictive	中
38	File	xxxxx.xxx	predictive	中
39	File	xxxxxx/xxxxxx/xxxxx.xxx	predictive	高
40	File	xxxxxx/xxxxxx/xxx_x.xxx	predictive	高
41	File	xxxx_xxxx.xxx	predictive	高
42	File	xxxxx.xxx	predictive	中
43	File	xxxxx.xxx	predictive	中
44	File	xxxxx/	predictive	低
45	File	xxxxxxx.xxx	predictive	中
46	File	xxxxxxxx.xxx	predictive	中
47	File	xxxx_xxxx.xxx	predictive	高
48	File	xxxxxxx.xxx	predictive	中
49	File	xxxxxxxxx.xxx.xxx	predictive	高
50	File	xxxxxxxxxxx.xxxx	predictive	高
51	File	xxxxxxxxxxxxxx.xxx	predictive	高
52	File	xxxxxxx_xxxxxx_xxxxxxxxxx.xxx	predictive	高
53	File	xxx.x	predictive	低
54	File	xxxxxxx.xxx	predictive	中
55	File	xxxxxxxxxxxxxxxx.xxx	predictive	高
56	File	xxxxxxxxxxxxxxx.xxx	predictive	高
57	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	高
58	File	xxxxxxxxxxx.xxx	predictive	高
59	File	xxxx_xxxxxxxx.xxx	predictive	高
60	File	xxxx_xxxxxxxx.xxx/xxxx_xxxx.xxx	predictive	高
61	File	xxxxxx.xxx	predictive	中
62	File	xxxxxx_xxxxxx.xxx	predictive	高
63	File	xxxxx_xxxxx.xxx	predictive	高
64	File	xxxxxxxxx/xxxxxxxxxx	predictive	高
65	File	xxxxxxxxx/xxxxxxxx.xxx	predictive	高
66	File	xxxxxxxxx_xxxxxx.xxx	predictive	高
67	File	xxxx_xxx_xxxx.xxx	predictive	高
68	File	xxxxxxx-xxxxxx.xxx	predictive	高
69	File	xxxx_xxxx.xxx	predictive	高
70	File	xxxxxxx.xxxx	predictive	中
71	Library	xxxxxx[xxxxxx_xxxx	predictive	高
72	Library	xxxxxxxx-x.x/xxxxxxxx.xxx	predictive	高
73	Argument	xxxxxxxxxxx	predictive	中
74	Argument	xxxxxx	predictive	低
75	Argument	xxxxxxxxx	predictive	中
76	Argument	xxxx_xxx	predictive	中
77	Argument	xxxxxx	predictive	低
78	Argument	xxxxxx_xxxxx	predictive	中
79	Argument	xxx_xxx	predictive	低
80	Argument	xxx	predictive	低
81	Argument	xxx_xx	predictive	低
82	Argument	xxxx_xx	predictive	低
83	Argument	xxxxxxx	predictive	低
84	Argument	xxxxxxxxxxxx	predictive	中
85	Argument	xxxxxx	predictive	低
86	Argument	xxxxxxxxxx	predictive	中
87	Argument	xxxxxx[xxxxxx_xxxx]	predictive	高
88	Argument	xxxxxxx_xx	predictive	中
89	Argument	xxxxxxxxxxxx	predictive	中
90	Argument	xxxxxxxxxxx	predictive	中
91	Argument	xxxx	predictive	低
92	Argument	xxxxxxx	predictive	低
93	Argument	xxxxxx_xxxxx_xxx	predictive	高
94	Argument	xxxxxxxx	predictive	中
95	Argument	xxxx/xxxx	predictive	中
96	Argument	xxxx_xxxx_xxxxxxx	predictive	高
97	Argument	xxxx_xxxxxx_xx	predictive	高
98	Argument	xxxx_xxxxx	predictive	中
99	Argument	xx	predictive	低
100	Argument	xx	predictive	低
101	Argument	xxxxxxxxx	predictive	中
102	Argument	xxxx	predictive	低
103	Argument	xxxxx	predictive	低
104	Argument	xxxxx_xxxxxx_xxx/xxxxx_xxxx_xxxxxxxx	predictive	高
105	Argument	xxxx	predictive	低
106	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
107	Argument	xxxxxxxxx_xxxx_xxxx	predictive	高
108	Argument	xxxx/xxxxxxx	predictive	中
109	Argument	xxxx_xx	predictive	低
110	Argument	xxxxx_xxxxxxx	predictive	高
111	Argument	xxxxx_xxx	predictive	中
112	Argument	xxxxxxxxx	predictive	中
113	Argument	xxxxx_xxxx_xxxx	predictive	高
114	Argument	xxxxx_xxxxxxx_xxxx	predictive	高
115	Argument	xxxxxxx_xxx	predictive	中
116	Argument	xxx	predictive	低
117	Argument	xxxxx	predictive	低
118	Argument	xxxxxx	predictive	低
119	Argument	xxxxxxx	predictive	低
120	Argument	xxxx_xxx	predictive	中
121	Argument	xxxxxxx_xxxxxx_xxxxx.xxx	predictive	高
122	Argument	xxxxxx/xxxxxx_xxxxxx	predictive	高
123	Argument	xxxxxxxxxx	predictive	中
124	Argument	xxxxxx	predictive	低
125	Argument	xxxxxxxxx	predictive	中
126	Argument	xxxxxx	predictive	低
127	Argument	xxxxxxxx	predictive	中
128	Argument	xx_xxxxxxxxxxx	predictive	高
129	Argument	xxxxxxxxxxx	predictive	中
130	Argument	xxxxx/xxxx	predictive	中
131	Argument	xxxxxxx	predictive	低
132	Argument	xxxxx	predictive	低
133	Argument	xxxxx_xxx	predictive	中
134	Input Value	../	predictive	低
135	Input Value	</xxxxxx >	predictive	中
136	Input Value	x==	predictive	低
137	Input Value	\xxx../../../../xxx/xxxxxx	predictive	高

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!