APT15 Analiza

IOB - Indicator of Behavior (6)

Oś czasu

Język

en6

Kraj

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

CloudBees Jenkins2
Microsoft NuGet2
Microsoft ADAL.NET2
Cisco WebEx Event Center2

Luki w zabezpieczeniach

Kampanie (1)

These are the campaigns that can be associated with the actor:

  • Ke3chang

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadres IPHostnameAktorKampanieIdentifiedRodzajPewność siebie
145.56.84.2545-56-84-25.ip.linodeusercontent.comAPT152024-02-12verifiedWysoki
2XX.XXX.XXX.XXXxxxxXxxxxxxx2021-01-01verifiedWysoki
3XXX.XXX.XXX.XXXXxxxxXxxxxxxx2021-01-01verifiedWysoki

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueLuki w zabezpieczeniachWektor dostępuRodzajPewność siebie
1T1068CWE-264Execution with Unnecessary PrivilegespredictiveWysoki
2TXXXXCWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveWysoki
3TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveWysoki

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1Libraryidq.dllpredictiveNiski
2Libraryxxxxxxx/xxxx/xxx-xxx/xxx/xxxxxxx-xxxxxxxxxxx-*.xxxpredictiveWysoki

Referencje (3)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!