CoinMiner Análise

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (23)

Curso de tempo

Idioma

en20
es2
ru2

País

us4
tr4

Actores

Kinsing1
Mirai1
Coinminer1
RedLine1
BumbleBee1

Actividades

Interesse

Curso de tempo

Tipo

Web Browser10
Not Defined6
Learning Management Software2
Auction Software2

Fabricante

Google10
Not Defined4
aEnrich2
GNU2
Active2

Produto

Google Chrome10
aEnrich eHRD Learning Management2
Terminal Operating System2
GNU PSPP2
Active Auction House2

Vulnerabilidades

#VulnerabilidadeBaseTemp0dayHojeExpMasCTIEPSSCVE
1Joomla CMS LDAP Authentication Password direitos alargados7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.01039CVE-2017-14596
2Terminal Operating System Injecção SQL9.79.5$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00168CVE-2022-3792
3Apache HTTP Server HTTP Strict Parsing ap_find_token direitos alargados8.58.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.27310CVE-2017-7668
4Basic-cms SweetRice post.php direitos alargados7.36.9$0-$5kCalculadoProof-of-ConceptNot Defined0.040.01478CVE-2009-4224
5Apple iOS/iPadOS IOSurfaceAccelerator Excesso de tampão8.28.0$25k-$100k$5k-$25kHighOfficial Fix0.020.00357CVE-2023-28206
6DZCP deV!L`z Clanportal config.php direitos alargados7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.400.00943CVE-2010-0966
7Active Auction House ItemInfo.asp Injecção SQL6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00685CVE-2005-1029
8Google Chrome Network Service Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30553
9Google Chrome Extension Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30552
10Google Chrome V8 direitos alargados6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.13946CVE-2021-30551
11Google Chrome Accessibility Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30550
12Google Chrome Spell Check Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30549
13Google Chrome Loader Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30548
14Google Chrome ANGLE Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00829CVE-2021-30547
15Google Chrome Autofill Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30546
16Google Chrome Extension Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30545
17Google Chrome BFCache Excesso de tampão6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30544
18Active Intelligent Visualization Vdc Header Injecção SQL6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.000.00158CVE-2021-44835
19aEnrich eHRD Learning Management Divulgação de Informação5.55.4$0-$5k$0-$5kNot DefinedNot Defined0.000.00158CVE-2022-28740

IOC - Indicator of Compromise (125)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDEndereço IPHostnameActorCampanhasIdentifiedTipoAceitação
12.58.149.237CoinMiner18/03/2024verifiedAlto
24.4.0.0Coinminer05/04/2020verifiedAlto
35.9.157.2static.2.157.9.5.clients.your-server.deCoinMiner18/03/2024verifiedAlto
45.196.13.2929.ip-5-196-13.euCoinMiner22/07/2021verifiedAlto
55.196.23.240240.ip-5-196-23.euCoinMiner22/07/2021verifiedAlto
613.107.21.200CoinMiner22/07/2021verifiedAlto
718.191.246.30ec2-18-191-246-30.us-east-2.compute.amazonaws.comCoinminer06/04/2024verifiedMédio
818.210.126.40ec2-18-210-126-40.compute-1.amazonaws.comCoinMiner17/07/2021verifiedMédio
923.21.48.44ec2-23-21-48-44.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
1023.21.76.253ec2-23-21-76-253.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
1123.21.126.66ec2-23-21-126-66.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
1223.21.140.41ec2-23-21-140-41.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
1323.21.252.4ec2-23-21-252-4.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
1423.224.232.68CoinMiner18/03/2024verifiedAlto
1524.199.71.49Coinminer06/04/2024verifiedAlto
1646.23.108.253Coinminer06/04/2024verifiedAlto
1746.41.150.129CoinMiner18/03/2024verifiedAlto
1847.103.63.1CoinMiner02/02/2024verifiedAlto
1949.12.80.38static.38.80.12.49.clients.your-server.deCoinMiner17/07/2021verifiedAlto
2049.12.80.40static.40.80.12.49.clients.your-server.deCoinMiner17/07/2021verifiedAlto
2149.12.113.223static.223.113.12.49.clients.your-server.deCoinMiner18/03/2024verifiedAlto
2250.19.48.59ec2-50-19-48-59.compute-1.amazonaws.comCoinMiner18/01/2024verifiedMédio
2350.19.96.218ec2-50-19-96-218.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
2450.19.252.36ec2-50-19-252-36.compute-1.amazonaws.comCoinMiner23/07/2021verifiedMédio
2551.15.54.102102-54-15-51.instances.scw.cloudCoinMiner22/07/2021verifiedAlto
26XX.XX.XX.XXXxxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22/07/2021verifiedAlto
27XX.XX.XX.XXXxxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22/07/2021verifiedAlto
28XX.XX.XX.XXxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22/07/2021verifiedAlto
29XX.XX.XX.XXXxxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22/07/2021verifiedAlto
30XX.XX.XX.XXxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22/07/2021verifiedAlto
31XX.XX.XXX.XXXxxx.xx-xx-xx-xxx.xxXxxxxxxxx30/03/2022verifiedAlto
32XX.XX.XX.XXXxxxx.xxxxxxx.xxxXxxxxxxxx22/07/2021verifiedAlto
33XX.XXX.XX.XXxxxx.xxxxxxx.xxxXxxxxxxxx22/07/2021verifiedAlto
34XX.XXX.XX.XXXxxx.xx-xx-xxx-xx.xxXxxxxxxxx22/07/2021verifiedAlto
35XX.XX.X.XXXXxxxxxxxx22/07/2021verifiedAlto
36XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
37XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
38XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
39XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
40XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
41XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
42XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23/07/2021verifiedMédio
43XX.XX.XX.XXXxxxxxxxx17/07/2021verifiedAlto
44XX.XXX.XXX.XXXXxxxxxxxx18/03/2024verifiedAlto
45XX.XX.XXX.XXXXxxxxxxxx06/04/2024verifiedAlto
46XX.XXX.XXX.XXXXxxxxxxxx18/03/2024verifiedAlto
47XX.XX.XXX.XXXxxxxxxxxxxx.xxxXxxxxxxxx30/03/2022verifiedAlto
48XX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxxxxx30/03/2022verifiedAlto
49XX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
50XX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17/07/2021verifiedAlto
51XX.XXX.XXX.XXXxxxx.xxxxxxxxxxxx.xxXxxxxxxxx22/07/2021verifiedAlto
52XX.XXX.XXX.XXxx.xxxx.xxxxx.xxxXxxxxxxxx16/04/2022verifiedAlto
53XX.XXX.XXX.XXXXxxxxxxxx06/04/2024verifiedAlto
54XX.XX.XXX.XXXxxxxxxxx31/03/2022verifiedAlto
55XX.XXX.XX.XXXxxxx.xxxxxx-xxxxx.xxxXxxxxxxxx08/04/2022verifiedAlto
56XX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17/07/2021verifiedAlto
57XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx16/04/2022verifiedAlto
58XX.XXX.XXX.XXxxxx.xxxxxxx.xxxXxxxxxxxx22/07/2021verifiedAlto
59XX.XXX.XX.XXXXxxxxxxxx18/03/2024verifiedAlto
60XX.XXX.XX.XXXXxxxxxxxx16/12/2023verifiedAlto
61XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
62XX.XXX.XXX.XXxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
63XX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
64XX.XXX.XXX.XXXxxxxxxxx06/04/2024verifiedAlto
65XX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
66XX.XXX.XX.XXxxxxxx.xx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
67XX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
68XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
69XXX.XXX.XXX.XXXxxx-xx.xxxxxxxxxxxxx.xxxXxxxxxxxx18/01/2024verifiedAlto
70XXX.XX.XX.XXXXxxxxxxxx06/04/2024verifiedAlto
71XXX.XX.XX.XXXXxxxxxxxx23/07/2021verifiedAlto
72XXX.XX.XX.XXXXxxxxxxxx17/07/2021verifiedAlto
73XXX.XX.XX.XXXXxxxxxxxx17/07/2021verifiedAlto
74XXX.XX.XX.XXXxxxxxxxx17/07/2021verifiedAlto
75XXX.XX.XX.XXXxxxxxxxx17/07/2021verifiedAlto
76XXX.XX.XXX.XXXxxxxxxxx02/02/2024verifiedAlto
77XXX.XX.XX.XXXXxxxxxxxx02/02/2024verifiedAlto
78XXX.XXX.X.XXXXxxxxxxxx16/04/2022verifiedAlto
79XXX.XXX.XX.XXXXxxxxxxxx31/03/2022verifiedAlto
80XXX.XXX.X.XXXxxxxxxxx02/02/2024verifiedAlto
81XXX.XXX.X.XXXxxxxxx.xxx.x.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
82XXX.XX.XXX.XXXXxxxxxxxx02/02/2024verifiedAlto
83XXX.XXX.XX.XXXxxxxxxxx02/02/2024verifiedAlto
84XXX.XXX.XX.XXXxxxxxxxx22/07/2021verifiedAlto
85XXX.XXX.XX.XXxxxxxx.xx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx23/07/2021verifiedAlto
86XXX.XXX.XX.XXXxxxxxxxxXxxxxxxxx23/07/2021verifiedAlto
87XXX.XXX.XX.XXXxxxx.xxxxxxx.xxxXxxxxxxxx22/07/2021verifiedAlto
88XXX.XXX.XXX.XXXxxxxxxxx.xxxx-xxxxxxx.xxXxxxxxxxx17/07/2021verifiedAlto
89XXX.XX.XXX.XXXxxx.xx-xxx-xx-xxx.xxXxxxxxxxx22/07/2021verifiedAlto
90XXX.XX.XXX.XXXxxxxxxxx.xx-xxx-xx-xxx.xxxXxxxxxxxx18/03/2024verifiedAlto
91XXX.XX.XX.XXxxx-xxxxxxxx.xxx.xxx.xxxXxxxxxxxx18/03/2024verifiedAlto
92XXX.XXX.XXX.XXXxxxxxxxx23/10/2023verifiedAlto
93XXX.XXX.XXX.XXXxxxxxxxx23/10/2023verifiedAlto
94XXX.XXX.XXX.XXXxxxxxxxx31/03/2022verifiedAlto
95XXX.XX.XXX.XXXXxxxxxxxx16/04/2022verifiedAlto
96XXX.XX.XX.XXXXxxxxxxxx06/04/2024verifiedAlto
97XXX.XX.XX.XXXxxx-xxxxxxxx.xx-xxxxxxXxxxxxxxx23/07/2021verifiedAlto
98XXX.XXX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxx18/03/2024verifiedAlto
99XXX.XX.XXX.XXxxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17/07/2021verifiedAlto
100XXX.XXX.XXX.XXXXxxxxxxxx18/03/2024verifiedAlto
101XXX.XX.XXX.XXXxxxxxxx.xxxxxxxxx.xxXxxxxxxxx22/07/2021verifiedAlto
102XXX.XX.XX.XXxxxxxx.xx.xx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17/07/2021verifiedAlto
103XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxxx23/07/2021verifiedAlto
104XXX.XXX.XXX.XXXXxxxxxxxx18/03/2024verifiedAlto
105XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx22/07/2021verifiedAlto
106XXX.XX.XX.XXXXxxxxxxxx17/07/2021verifiedAlto
107XXX.XX.XXX.XXXXxxxxxxxx23/07/2021verifiedAlto
108XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxx18/03/2024verifiedAlto
109XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxx18/03/2024verifiedAlto
110XXX.XXX.XXX.XXxx-xxx-xxx-xxx-xx.xx.xxxxxxxxxxxx.xxxXxxxxxxxx06/04/2024verifiedAlto
111XXX.XXX.XX.XXXXxxxxxxxx02/02/2024verifiedAlto
112XXX.XX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxx18/03/2024verifiedAlto
113XXX.XXX.XX.XXxxx.xxx.xx.xx.xxxxxxx.xxxxxxxxxx.xxXxxxxxxxx02/02/2024verifiedAlto
114XXX.XXX.XX.XXXxxxxxxxx.xxxxxxx.xxXxxxxxxxx10/10/2022verifiedAlto
115XXX.XXX.XXX.XXxxxxxxxx12/12/2023verifiedAlto
116XXX.XXX.XXX.Xxxxxxxxx.xx.xxxxxxxXxxxxxxxx10/10/2022verifiedAlto
117XXX.XXX.XXX.XXxxxxx.xxxxxXxxxxxxxx17/07/2021verifiedAlto
118XXX.X.XXX.XXXxxxxxxxx22/07/2021verifiedAlto
119XXX.XX.XXX.XXXXxxxxxxxx06/04/2024verifiedAlto
120XXX.XXX.XXX.XXXxxxxxxx-xxxxx.xxXxxxxxxxx18/03/2024verifiedAlto
121XXX.XXX.XXX.XXXXxxxxxxxx31/03/2022verifiedAlto
122XXX.XX.XX.XXxxxxxx.xxxXxxxxxxxx10/10/2022verifiedAlto
123XXX.XX.XXX.XXxxx.xx.xxx.xx.xxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxx06/04/2024verifiedAlto
124XXX.XXX.XXX.XXXxxx.xx-xxx-xxx-xxx.xxXxxxxxxxx22/07/2021verifiedAlto
125XXX.XX.XX.XXXxxxxxxxx02/02/2024verifiedAlto

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilidadesTipo de acessoTipoAceitação
1T1059CWE-94Argument InjectionpredictiveAlto
2TXXXXCWE-XX, CWE-XXXxx XxxxxxxxxpredictiveAlto
3TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (8)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTipoAceitação
1Fileinc/config.phppredictiveAlto
2FileItemInfo.asppredictiveMédio
3Filexxxxxx/xxxxxxxxxx/xxx/xxxx.xxxpredictiveAlto
4Filexxxxxxxxx/xxxx-xxxx-xxx.xpredictiveAlto
5Libraryxx/xxx/xxxx_xxxxxx.xxxpredictiveAlto
6ArgumentxxxxxxxxpredictiveMédio
7ArgumentxxxxxxpredictiveBaixo
8Argumentxxxx_xxxpredictiveMédio

Referências (26)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

◂ VoltarVisão GeralPróximo ▸

Do you know our Splunk app?

Download it now for free!