SideCopy Analiza

IOB - Indicator of Behavior (1000)

Oś czasu

Język

en816
pt68
zh50
ru12
ar12

Kraj

nl858
pt66
us28
es2

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

Microsoft Windows110
Linux Kernel18
Google Android18
F5 BIG-IP16
WordPress14

Luki w zabezpieczeniach

#Słaby punktBaseTemp0dayDzisiajWykPrzEPSSCTICVE
1nginx privilege escalation6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002413.21CVE-2020-12440
2Huawei ACXXXX/SXXXX SSH Packet privilege escalation7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.002460.07CVE-2014-8572
3Microsoft Windows WPAD privilege escalation8.07.9$25k-$100k$0-$5kHighOfficial Fix0.909620.03CVE-2016-3213
4Microsoft Windows Graphics Remote Code Execution7.06.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.035230.00CVE-2021-34530
5Microsoft Windows Event Tracing Privilege Escalation7.36.3$25k-$100k$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2021-34487
6Microsoft IIS cross site scripting5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.33CVE-2017-0055
7Cisco Secure Email and Web Manager Web-based Management Interface weak authentication9.89.6$25k-$100k$5k-$25kNot DefinedOfficial Fix0.003370.02CVE-2022-20798
8nginx Log File privilege escalation7.87.4$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000920.04CVE-2016-1247
9Apache HTTP Server mod_rewrite Redirect6.76.7$25k-$100k$5k-$25kNot DefinedNot Defined0.002580.04CVE-2020-1927
10Microsoft .NET Core/Visual Studio denial of service6.45.5$5k-$25k$0-$5kUnprovenOfficial Fix0.001950.09CVE-2021-26423
11Microsoft Windows TCP/IP Stack Privilege Escalation9.98.6$100k i więcej$5k-$25kUnprovenOfficial Fix0.021830.04CVE-2021-26424
12Microsoft Windows Event Tracing Privilege Escalation8.37.3$100k i więcej$5k-$25kUnprovenOfficial Fix0.000440.00CVE-2021-26425
13Microsoft Windows Bluetooth Driver Privilege Escalation8.37.3$100k i więcej$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2021-34537
14Microsoft Dynamics 365 Privilege Escalation8.57.4$25k-$100k$0-$5kUnprovenOfficial Fix0.007360.00CVE-2021-34524
15Microsoft Windows Storage Spaces Controller Local Privilege Escalation7.86.8$25k-$100k$5k-$25kUnprovenOfficial Fix0.000430.04CVE-2021-34536
16Microsoft Windows Graphics Remote Code Execution7.06.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.035230.03CVE-2021-34533
17Microsoft Windows Services for NFS ONCRPC XDR Driver information disclosure6.45.5$25k-$100k$5k-$25kUnprovenOfficial Fix0.011080.03CVE-2021-36926
18Microsoft ASP.NET Core/Visual Studio information disclosure4.94.3$5k-$25k$0-$5kUnprovenOfficial Fix0.000430.00CVE-2021-34532
19Microsoft Windows Services for NFS ONCRPC XDR Driver information disclosure6.45.5$25k-$100k$5k-$25kUnprovenOfficial Fix0.011080.00CVE-2021-36933
20Microsoft Windows Remote Desktop Client Remote Code Execution8.87.9$100k i więcej$5k-$25kProof-of-ConceptOfficial Fix0.052520.02CVE-2021-34535

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlasaLuki w zabezpieczeniachWektor dostępuRodzajPewność siebie
1T1006CAPEC-126CWE-21, CWE-22, CWE-23Path TraversalpredictiveWysoki
2T1040CAPEC-102CWE-294Authentication Bypass by Capture-replaypredictiveWysoki
3T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveWysoki
4T1059CAPEC-242CWE-94Argument InjectionpredictiveWysoki
5TXXXX.XXXCAPEC-209CWE-XX, CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveWysoki
6TXXXXCAPEC-122CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
7TXXXX.XXXCAPEC-16CWE-XXX, CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveWysoki
8TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveWysoki
9TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveWysoki
10TXXXXCAPEC-0CWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveWysoki
11TXXXXCAPEC-0CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveWysoki
12TXXXXCAPEC-108CWE-XX, CWE-XXXxx XxxxxxxxxpredictiveWysoki
13TXXXXCAPEC-102CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
14TXXXXCAPEC-38CWE-XXX, CWE-XXXXxxxxxxxx Xxxxxx XxxxpredictiveWysoki
15TXXXX.XXXCAPEC-459CWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
16TXXXXCAPEC-116CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveWysoki
17TXXXX.XXXCAPEC-0CWE-XXXxxxxxxxxxxxxpredictiveWysoki
18TXXXXCAPEC-157CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveWysoki
19TXXXX.XXXCAPEC-112CWE-XXX, CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveWysoki
20TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveWysoki

IOA - Indicator of Attack (242)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1File.travis.ymlpredictiveMedium
2File/.envpredictiveNiski
3File/admin.phppredictiveMedium
4File/admin/?page=inmates/view_inmatepredictiveWysoki
5File/admin/subnets/ripe-query.phppredictiveWysoki
6File/apply.cgipredictiveMedium
7File/core/conditions/AbstractWrapper.javapredictiveWysoki
8File/debug/pprofpredictiveMedium
9File/defaultui/player/modern.htmlpredictiveWysoki
10File/dvcset/sysset/set.cgipredictiveWysoki
11File/edit-db.phppredictiveMedium
12File/exportpredictiveNiski
13File/file?action=download&filepredictiveWysoki
14File/forum/away.phppredictiveWysoki
15File/goform/aspFormpredictiveWysoki
16File/hardwarepredictiveMedium
17File/installers/common.shpredictiveWysoki
18File/librarian/bookdetails.phppredictiveWysoki
19File/medical/inventories.phppredictiveWysoki
20File/monitoringpredictiveMedium
21File/opt/zimbra/jetty/webapps/zimbra/publicpredictiveWysoki
22File/plugin/LiveChat/getChat.json.phppredictiveWysoki
23File/plugins/servlet/audit/resourcepredictiveWysoki
24File/plugins/servlet/project-config/PROJECT/rolespredictiveWysoki
25File/procpredictiveNiski
26File/replicationpredictiveMedium
27File/RestAPIpredictiveMedium
28File/xxx/xxxxxx-xxxxxxxx-*predictiveWysoki
29File/xxxxxxx/predictiveMedium
30File/xxxxxxpredictiveNiski
31File/xxxx/xxxxxx.xxx?xxx=xpredictiveWysoki
32File/xxx/xxx/xxxxxpredictiveWysoki
33File/xxx/xxx/xxxxxxxx.xxxpredictiveWysoki
34File/xxxxxx/xxxxxx.xxxxpredictiveWysoki
35File/xxxxxxxx_xxxxx/xxxxxxx/xxxxxx.xxx?x=xxxxxx_xxxxxpredictiveWysoki
36File/xx-xxxx/xxxxxx/x.x/xxxxx?xxxpredictiveWysoki
37Filexxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveWysoki
38Filexxxxxxx.xxxpredictiveMedium
39Filexxxxxxx.xxxpredictiveMedium
40Filexxx.xxxpredictiveNiski
41Filexxxxxxx.xxxpredictiveMedium
42Filexxx/xxx/xxxx-xxxpredictiveWysoki
43Filexxxxx.xxxpredictiveMedium
44Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveWysoki
45Filexxxx/xxxxxxx/xxx/xxxxxx_xxxx.xpredictiveWysoki
46Filexxxx-xxxx.xpredictiveMedium
47Filexxxx/xxxxxxx.xxxpredictiveWysoki
48Filex/xxxxxx/xxxxx.xxxpredictiveWysoki
49Filex:\xxxxxxx xxxxx\xxxxxx xxxxx\xxx\xxxxxxx.xxxpredictiveWysoki
50Filex:\xxxxxxx\xxxxxxxx\xxxxxx\xxxpredictiveWysoki
51Filexxx-xxx/xx.xxxpredictiveWysoki
52Filexxx/xxxxxxx.xxpredictiveWysoki
53Filexxxxx.xxxpredictiveMedium
54Filexxxxxx.xxxpredictiveMedium
55Filexxx_xxxxxx.xxxpredictiveWysoki
56Filexxx.xxxpredictiveNiski
57Filexxxxxxx.xxxpredictiveMedium
58Filexxxxxx.xxxpredictiveMedium
59Filexxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/predictiveWysoki
60Filex_xxxxxxpredictiveMedium
61Filexxxxxxx.xxxpredictiveMedium
62Filexxxx_xxxxxx.xxxpredictiveWysoki
63Filexxxxxxx/xxxxx/xxxxxx.xpredictiveWysoki
64Filexxxxxxx/xxx/xxxxxxx/xxxx.xpredictiveWysoki
65Filexxxx_xxxxx.xxxpredictiveWysoki
66Filexxxxxxxxxxx.xxxpredictiveWysoki
67Filexxx/xxxxxxxx/xxxx.xpredictiveWysoki
68Filexxx/xxxxxxxx/xxx_xxxxxxxxxxxx.xpredictiveWysoki
69Filexxxxxxxx.xpredictiveMedium
70Filexx/xxxxxxxxx.xpredictiveWysoki
71Filexx/xxxxx.xpredictiveMedium
72Filexx/xxxxx/xxxxxxx.xpredictiveWysoki
73Filexxxxx.xxxpredictiveMedium
74Filexxxxxx.xxxpredictiveMedium
75Filexxxxxxxxxx.xxpredictiveWysoki
76Filexxxxxxxxxxxxx.xxxxpredictiveWysoki
77Filexxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xxpredictiveWysoki
78Filexxxxx-xxxxx.xpredictiveWysoki
79Filexxxxxx_xxxxx_xxxxxxx.xpredictiveWysoki
80Filexxxxx-xxxxxxxxxx.xpredictiveWysoki
81Filexxx/xxxxxx.xxxpredictiveWysoki
82Filexxxxx.xxxpredictiveMedium
83Filexxxxx:/xxxxxxxx/xxxxxxxxxxxx.xxxxpredictiveWysoki
84Filexxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxpredictiveWysoki
85Filexxxx_xxxx.xxxpredictiveWysoki
86Filexxxx_xxxx.xxxpredictiveWysoki
87Filexxxx_xxxxxx.xxpredictiveWysoki
88Filexxxxxx/xxx/xxxxxxxx.xpredictiveWysoki
89Filexxxxxx/xxxxx/xxxxx_xxxxxx_xxxxxx.xpredictiveWysoki
90Filexxxxxxx/xx_xxx.xpredictiveWysoki
91Filexxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxxpredictiveWysoki
92Filexxxx.xxxpredictiveMedium
93Filexxxxx.xxxpredictiveMedium
94Filexxxxx.xxxpredictiveMedium
95Filexxxxx/predictiveNiski
96Filexxxxxxxxxx/xxxxxxxx.xpredictiveWysoki
97Filexxxxxxxxxx/xxx.xpredictiveWysoki
98Filexxxx.xpredictiveNiski
99Filexxxx.xxxpredictiveMedium
100Filexxxxxx_xxxxx_xxxxxxx.xpredictiveWysoki
101Filexxxxxxxxxxxxxxxx.xpredictiveWysoki
102Filexxx/xxxxxxxxx/xx_xxxxxx_xxx.xpredictiveWysoki
103Filexxx/xxxxxxxxx/x_xxxxxx.xpredictiveWysoki
104Filexxxx.xxxpredictiveMedium
105Filexxx_xxxxxxx.xpredictiveWysoki
106Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveWysoki
107Filexxx_xx.xpredictiveMedium
108Filexxxxxxxxxxxxxxxxx.xxxpredictiveWysoki
109Filexxxx_xxxxxx.xpredictiveWysoki
110Filexxxxxxxxx.xxx.xxxpredictiveWysoki
111Filexxxxxxx.xxxpredictiveMedium
112Filexxxxxxxx.xxxxpredictiveWysoki
113Filexxxxxxxxxxxxx.xxxxpredictiveWysoki
114Filexxxxxx.xpredictiveMedium
115Filexxxxxxxxxxxxx.xxxpredictiveWysoki
116Filexxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]predictiveWysoki
117Filexxxxxxxx.xxxpredictiveMedium
118Filexxxxxxx.xxxpredictiveMedium
119Filexxxxx.xxxpredictiveMedium
120Filexxxxxxxx.xxxpredictiveMedium
121Filexxxxxxx.xpredictiveMedium
122Filexxxxxxxxxx_xxxxx.xxxxxxpredictiveWysoki
123Filexxxx_xxx_xx.xpredictiveWysoki
124Filexx_xxx.xpredictiveMedium
125Filexxxxxx.xpredictiveMedium
126Filexxxxx.xxxpredictiveMedium
127Filexxxx-xxxxxx.xpredictiveWysoki
128Filexxxxxxx.xpredictiveMedium
129Filexxx/xxx_xxxxx.xpredictiveWysoki
130Filexxxxxxx.xxxpredictiveMedium
131Filexxxxxxx.xxx.xx.xxxxxxxxxxx.xxxpredictiveWysoki
132Filexxx_xxx.xpredictiveMedium
133Filexxxx-xxxxx.xxxpredictiveWysoki
134Filexxxxxxx/xxxxxxx/xxxxxx/xxxxxx_xxxx.xxxpredictiveWysoki
135Filexxxx.xxxxxxxxx.xxxpredictiveWysoki
136Filexxxx_xxxx.xxxpredictiveWysoki
137Filexxxxxx.xxxpredictiveMedium
138Filexxx.xxxpredictiveNiski
139Filexxx.xxxxxxpredictiveMedium
140Filexxxxxx/xx/xxxx.xxxpredictiveWysoki
141Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveWysoki
142Filexx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxxpredictiveWysoki
143Filexx-xxxxxxxx/xxxx.xxxpredictiveWysoki
144Filexx/xx/xxxxxpredictiveMedium
145Filexx_xxxxxxx.xpredictiveMedium
146File_xxxxxxxx/xxxxxxxx.xxxpredictiveWysoki
147File~/xxxx/xxx/xxxxxxx/xxxxxxxxxx/xxxxxx.xxxpredictiveWysoki
148Libraryxxxxx/xxxxxxxxx/xxxx.xxxxxxxxx.xxxpredictiveWysoki
149Libraryxxxxxxxxxx/xxxxxxxx.xpredictiveWysoki
150Libraryxxxxxxxx.xxxpredictiveMedium
151Libraryxxxxxxxxx.xxxpredictiveWysoki
152Libraryxxxxxxxx.xxxpredictiveMedium
153Libraryxxxxxx.xxx.xxx.xxxpredictiveWysoki
154Libraryxxxxxxxx.xxxpredictiveMedium
155Libraryxxxxx.xxxpredictiveMedium
156Libraryxxxxxxxx.xxxpredictiveMedium
157Libraryxxxxxxxx.xxxpredictiveMedium
158Argument-xpredictiveNiski
159Argumentxxxxx.xxxxxxxxpredictiveWysoki
160Argumentxxxxxx_xxxxpredictiveMedium
161ArgumentxxxxxxxxpredictiveMedium
162ArgumentxxxpredictiveNiski
163ArgumentxxxxxpredictiveNiski
164Argumentxxx_xxpredictiveNiski
165Argumentxxxx_xxpredictiveNiski
166ArgumentxxxxxxpredictiveNiski
167Argumentxxxxxxx xxxxpredictiveMedium
168ArgumentxxxxxxxxxxpredictiveMedium
169ArgumentxxxxxxxpredictiveNiski
170Argumentxxxxxxx_xxxx->xxx($xxxxxxxx)predictiveWysoki
171ArgumentxxxxxpredictiveNiski
172Argumentxxxxxx_xxxxpredictiveMedium
173ArgumentxxxxxxxpredictiveNiski
174Argumentxxxx_xxpredictiveNiski
175ArgumentxxxxpredictiveNiski
176ArgumentxxxxxxxxpredictiveMedium
177ArgumentxxpredictiveNiski
178ArgumentxxpredictiveNiski
179ArgumentxxxxxxxxxxxxxxpredictiveWysoki
180ArgumentxxxxxxxpredictiveNiski
181Argumentxxxxx[xxxxx][xx]predictiveWysoki
182Argumentxxxx_xxxxxx_xxxxpredictiveWysoki
183Argumentxxxx x xxxxpredictiveMedium
184Argumentxxxxxxxxx/xxxxxxxxxpredictiveWysoki
185ArgumentxxxxpredictiveNiski
186ArgumentxxxxxxxxxxxxxxxxxxxxpredictiveWysoki
187ArgumentxxpredictiveNiski
188Argumentxxxxxxx/xxxx/xxxxxxxxpredictiveWysoki
189Argumentxxxxx/xxxxxxpredictiveMedium
190ArgumentxxxxpredictiveNiski
191ArgumentxxxxxxxxpredictiveMedium
192ArgumentxxxxxxxxpredictiveMedium
193ArgumentxxxxxxxxpredictiveMedium
194ArgumentxxxxxxxxxpredictiveMedium
195Argumentxxx_xxxpredictiveNiski
196ArgumentxxxxxxxxxxxxxpredictiveWysoki
197ArgumentxxxxxxpredictiveNiski
198ArgumentxxxxxxxpredictiveNiski
199Argumentxx_xxxxxxx_xxxxxxxpredictiveWysoki
200ArgumentxxxxxxxxxxxxxpredictiveWysoki
201ArgumentxxxxxpredictiveNiski
202Argumentxxxxxxx_xxxpredictiveMedium
203ArgumentxxxxpredictiveNiski
204ArgumentxxxxxxxxxxxxxpredictiveWysoki
205ArgumentxxxxxxxpredictiveNiski
206ArgumentxxxxxxpredictiveNiski
207Argumentxxxxxxxx_xxxxxpredictiveWysoki
208ArgumentxxxxxxxxxxxxpredictiveMedium
209ArgumentxxxxxxpredictiveNiski
210ArgumentxxxxxpredictiveNiski
211ArgumentxxxpredictiveNiski
212Argumentxxx/xxxxxxxpredictiveMedium
213ArgumentxxxxxxpredictiveNiski
214ArgumentxxxpredictiveNiski
215Argumentxxxxxxxx-xxxxxxxxpredictiveWysoki
216ArgumentxxxxxxxxxxxxxxpredictiveWysoki
217ArgumentxxxpredictiveNiski
218ArgumentxxxxpredictiveNiski
219ArgumentxxxxxxxxpredictiveMedium
220ArgumentxxxxxxxpredictiveNiski
221Argumentxxxx->xxxxxxxpredictiveWysoki
222Argumentx-xxxxxxxxx-xxxpredictiveWysoki
223ArgumentxxxpredictiveNiski
224Argument_xxx_xxxxxxx_xxxxxxx_xxxxxxxxxxxxx_xxx_xxx_xxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxpredictiveWysoki
225Argument_xxx_xxxxxxxxxxx_predictiveWysoki
226Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictiveWysoki
227Input Value.%xx.../.%xx.../predictiveWysoki
228Input Value//predictiveNiski
229Input Valuexxx xxxxxxxxpredictiveMedium
230Input Valuex%xx%xxxxx%xxx=x%xxxxxxx%xxxxxxxx%xxx,xxxx(),x,x,x,x,x,x,x,x,xxxxxxxx(),x,x,x,x,x,x,x,x,x,x,x,x,x--+predictiveWysoki
231Input ValuexxxxxxxxpredictiveMedium
232Input Valuexxxxxxxxx' xxx 'x'='xpredictiveWysoki
233Input ValuexxxxxpredictiveNiski
234Input Valuexxxxxxx_xxxxx.xxxxxxx_xxxxxxxpredictiveWysoki
235Input Value\xpredictiveNiski
236Input Value….//predictiveNiski
237Pattern|xx|predictiveNiski
238Network PortxxxxxpredictiveNiski
239Network Portxx xxxxxxx xxx.xx.xx.xxpredictiveWysoki
240Network Portxxxxx xxx-xxx, xxxpredictiveWysoki
241Network Portxxx/xx (xxxxxx)predictiveWysoki
242Network Portxxx xxxxxx xxxxpredictiveWysoki

Referencje (7)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!