DNSLock Analiza
IOB - Indicator of Behavior (11)
Zajęcia
Wysiłek
Luki w zabezpieczeniach
IOC - Indicator of Compromise (6)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
| ID | adres IP | Hostname | Aktor | Kampanie | Identified | Rodzaj | Pewność siebie |
|---|---|---|---|---|---|---|---|
| 1 | 18.220.249.233 | ec2-18-220-249-233.us-east-2.compute.amazonaws.com | DNSLock | 2022-04-08 | verified | Medium | |
| 2 | 52.77.199.193 | ec2-52-77-199-193.ap-southeast-1.compute.amazonaws.com | DNSLock | 2022-04-08 | verified | Medium | |
| 3 | XX.XXX.XXX.XX | xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx | Xxxxxxx | 2022-04-08 | verified | Medium | |
| 4 | XX.XXX.XXX.XXX | xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx | Xxxxxxx | 2022-04-08 | verified | Medium | |
| 5 | XX.XXX.XX.XX | Xxxxxxx | 2022-04-08 | verified | Wysoki | ||
| 6 | XX.XXX.XXX.XXX | Xxxxxxx | 2022-04-08 | verified | Wysoki |
TTP - Tactics, Techniques, Procedures (3)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
| ID | Technique | Luki w zabezpieczeniach | Wektor dostępu | Rodzaj | Pewność siebie |
|---|---|---|---|---|---|
| 1 | T1059.007 | CWE-79 | Cross Site Scripting | predictive | Wysoki |
| 2 | TXXXX | CWE-XXX | Xxxxxxxxxxx Xxxxxxxxxx | predictive | Wysoki |
| 3 | TXXXX | CWE-XXX | Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx | predictive | Wysoki |
Referencje (2)
The following list contains external sources which discuss the actor and the associated activities: