CDRThief Analiza

IOB - Indicator of Behavior (10)

Oś czasu

Język

zh10

Kraj

cn10

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

eEye Retina WiFi Scanner2
Hotline Connect Server2
PHP2
Jitsi Meet2
PrinterLogic Web Stack2

Luki w zabezpieczeniach

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadres IPHostnameAktorKampanieIdentifiedRodzajPewność siebie
134.94.199.142142.199.94.34.bc.googleusercontent.comCDRThief2021-05-31verifiedMedium
235.236.173.187187.173.236.35.bc.googleusercontent.comCDRThief2021-05-31verifiedMedium
3XXX.XX.XXX.XXXxxxxxxx2021-05-31verifiedWysoki
4XXX.XXX.XXX.XXXXxxxxxxx2021-05-31verifiedWysoki
5XXX.XXX.XXX.XXXXxxxxxxx2021-05-31verifiedWysoki
6XXX.XXX.XX.XXXXxxxxxxx2021-05-31verifiedWysoki

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlasaLuki w zabezpieczeniachWektor dostępuRodzajPewność siebie
1T1006CAPEC-126CWE-22Path TraversalpredictiveWysoki
2TXXXX.XXXCAPEC-191CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveWysoki
3TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveWysoki
4TXXXX.XXXCAPEC-0CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveWysoki

IOA - Indicator of Attack (3)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1File/WEB-INF/web.xmlpredictiveWysoki
2Filexxxxxxxx/xxxx_xxxxpredictiveWysoki
3Argumentxxx_xxxpredictiveNiski

Referencje (2)

The following list contains external sources which discuss the actor and the associated activities:

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!