Windigo 解析

IOB - Indicator of Behavior (12)

タイムライン

言語

de6
en6

国・地域

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

AXIS 2110 Network Camera2
Adobe ColdFusion2
MODX Revolution2
Microsoft IIS2
1st News 4 Professional2

脆弱性

キャンペーン (1)

These are the campaigns that can be associated with the actor:

  • Windigo

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIPアドレスHostnameアクターキャンペーンIdentifiedタイプ信頼度
177.67.80.31WindigoWindigo2021年05月31日verified
2XX.XXX.XX.Xxxxxxxxx.xxxxxxxxxxxx.xxxXxxxxxxXxxxxxx2021年05月31日verified
3XX.XX.XXX.XXxxxxxxxx.xx-xx-xx-xxx.xxXxxxxxxXxxxxxx2021年05月31日verified

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (8)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File/uncpath/predictive
2File/var/log/restjavad.0.logpredictive
3Filexxxx.xxxpredictive
4Filexxxxxxxx.xxxpredictive
5Filexxxxxxxxxxxx.xxxpredictive
6Argumentxxpredictive
7Argumentxxx_xxxxxxxxxxxpredictive
8Input Value[\x]*predictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!