CosmicDuke Análise
IOB - Indicator of Behavior (5)
Actividades
Interesse
Vulnerabilidades
IOC - Indicator of Compromise (10)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
| ID | Endereço IP | Hostname | Actor | Campanhas | Identified | Tipo | Aceitação |
|---|---|---|---|---|---|---|---|
| 1 | 46.246.120.178 | CosmicDuke | 01/01/2021 | verified | Alto | ||
| 2 | 91.224.141.235 | CosmicDuke | 01/01/2021 | verified | Alto | ||
| 3 | XX.XXX.XXX.XX | xx-xxxxxx-xx-xxx-xxx-xx.xxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Alto | |
| 4 | XXX.XX.XXX.XX | xxxxxxx-xxxx-xxx.xxxx-xxxxxxx.xxx | Xxxxxxxxxx | 01/01/2021 | verified | Alto | |
| 5 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Alto | ||
| 6 | XXX.XX.XXX.XXX | xxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Alto | |
| 7 | XXX.XXX.XXX.XX | xxx.xxxxxxxxxxxx.xx | Xxxxxxxxxx | 01/01/2021 | verified | Alto | |
| 8 | XXX.XXX.XX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Alto | ||
| 9 | XXX.XXX.XXX.XX | xxx-xxx-xxx-xx.xxxxxx.xxxxxxx.xxx | Xxxxxxxxxx | 01/01/2021 | verified | Alto | |
| 10 | XXX.XX.XXX.XXX | Xxxxxxxxxx | 01/01/2021 | verified | Alto |
TTP - Tactics, Techniques, Procedures (1)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
| ID | Technique | Vulnerabilidades | Tipo de acesso | Tipo | Aceitação |
|---|---|---|---|---|---|
| 1 | T1068 | CWE-264 | Execution with Unnecessary Privileges | predictive | Alto |
Referências (2)
The following list contains external sources which discuss the actor and the associated activities: