Novter Análise

IOB - Indicator of Behavior (775)

Curso de tempo

Idioma

pl460
en218
zh54
ru20
de10

País

pl460
cn124
us100
ru26
jp6

Actores

Actividades

Interesse

Curso de tempo

Tipo

Fabricante

Produto

Microsoft Windows12
Apple macOS8
PHP8
SignKorn Guestbook6
Microsoft IIS6

Vulnerabilidades

#VulnerabilidadeBaseTemp0dayHojeExpMasEPSSCTICVE
1Hiox India Guest Book gb.php Excesso de tampão7.36.4$0-$5k$0-$5kProof-of-ConceptUnavailable0.071330.00CVE-2007-1998
2Visual Form Builder Plugin direitos alargados6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.003070.00CVE-2022-0142
3jax guestbook jax_guestbook.php Roteiro Cruzado de Sítios4.34.2$0-$5k$0-$5kHighUnavailable0.002970.02CVE-2005-4879
4Lars Ellingsen Guestserver guestbook.cgi Roteiro Cruzado de Sítios4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001690.04CVE-2005-4222
5ASPjar ASPjar Guestbook login.asp Injecção SQL5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.003120.00CVE-2005-0423
6DM Guestbook admin.guestbook.php Directório Traversal7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.044030.04CVE-2007-5821
7Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash Divulgação de Informação5.35.2$5k-$25k$0-$5kHighWorkaround0.020160.02CVE-2007-1192
8Qt-cute QuickTalk guestbook qtg_msg_view.php Injecção SQL7.37.1$0-$5k$0-$5kHighUnavailable0.002690.00CVE-2007-3538
9Professional Home Page Tools Professional Home Page Tools Guestbook delcookie.php vulnerabilidade desconhecida5.34.6$0-$5k$0-$5kUnprovenOfficial Fix0.003810.00CVE-2006-3837
10XAMPP Apache Distribution cds.php Roteiro Cruzado de Sítios4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.002300.00CVE-2005-1077
11Papoo guestbook.php Injecção SQL6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.03
12AN Guestbook sign1.php Roteiro Cruzado de Sítios4.34.1$0-$5k$0-$5kHighOfficial Fix0.002540.03CVE-2009-0424
13FAC Guestbook Divulgação de Informação9.89.5$0-$5k$0-$5kHighUnavailable0.010730.00CVE-2007-2101
14AFGB AFGB GUESTBOOK add.php direitos alargados7.36.7$0-$5k$0-$5kProof-of-ConceptUnavailable0.185560.00CVE-2006-5307
15SignKorn Guestbook preview.php direitos alargados5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.000000.00
16episodex episodex guestbook default.asp Roteiro Cruzado de Sítios4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001970.00CVE-2005-1684
17Planetmoon Guestbook passwd.txt Password direitos alargados5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.017840.00CVE-2003-1541
18MPM Guestbook Roteiro Cruzado de Sítios4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.007020.02CVE-2003-1182
19MPC SoftWeb Guestbook insertguest.asp Roteiro Cruzado de Sítios4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.000000.00
20Big Sam Guestbook bigsam_guestbook.php Negação de Serviço3.33.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.00

IOC - Indicator of Compromise (68)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDEndereço IPHostnameActorCampanhasIdentifiedTipoAceitação
11.88.24.27Novter19/02/2022verifiedAlto
22.58.80.150Novter19/02/2022verifiedAlto
32.196.217.25Novter19/02/2022verifiedAlto
43.128.83.132ec2-3-128-83-132.us-east-2.compute.amazonaws.comNovter19/02/2022verifiedMédio
55.61.40.95Novter19/02/2022verifiedAlto
65.61.42.103Novter19/02/2022verifiedAlto
75.61.42.111box.invfx.euNovter19/02/2022verifiedAlto
85.61.42.116Novter19/02/2022verifiedAlto
95.61.48.155Novter19/02/2022verifiedAlto
105.61.48.156192.64.119.156Novter19/02/2022verifiedAlto
116.217.158.104Novter19/02/2022verifiedAlto
127.130.244.4Novter19/02/2022verifiedAlto
1313.158.242.227Novter19/02/2022verifiedAlto
1420.56.162.154Novter19/02/2022verifiedAlto
15XX.XX.XXX.XXXxxxxx19/02/2022verifiedAlto
16XX.XXX.XX.XXXxxxxx19/02/2022verifiedAlto
17XX.XXX.XX.XXXXxxxxx19/02/2022verifiedAlto
18XX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto
19XX.XX.XX.XXXxxx.xx.xx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedMédio
20XX.X.XXX.XXXXxxxxx19/02/2022verifiedAlto
21XX.XXX.X.XXxxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
22XX.XXX.XX.XXXxxxxx19/02/2022verifiedAlto
23XX.XX.XXX.XXXxxxxx19/02/2022verifiedAlto
24XX.XXX.XXX.XXXxxxxx19/02/2022verifiedAlto
25XX.XXX.X.XXXxxxxx19/02/2022verifiedAlto
26XX.XX.XX.XXXxx-xx-xx-xxx-xxxxxx.xxx.xxxxxxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
27XX.XX.XX.XXXXxxxxx19/02/2022verifiedAlto
28XX.XXX.XXX.XXXxx-xxx-xxx-xxx.xxxxxxxxxx.xxxxxx.xxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
29XX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto
30XX.XX.XX.XXXxxxxx19/02/2022verifiedAlto
31XX.XX.XXX.XXx-xx-xx-xxx-xx.xxxx.xx.xxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
32XX.XX.XXX.XXXxxxxxxxxxxx-xxx-x-xx-xxx.xxx-xx.xxx.xxxxxxx.xxXxxxxx19/02/2022verifiedAlto
33XX.XX.XXX.Xxxxxx-xx-xxx-x.xxxxx.xxx-xxx.xxXxxxxx19/02/2022verifiedAlto
34XX.XXX.XX.XXxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
35XX.XXX.XX.XXxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
36XX.XXX.XX.XXxxxx.xxxxxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
37XX.XX.XXX.XXXxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxxxx.xxxxxxxx-xx.xxXxxxxx19/02/2022verifiedAlto
38XX.XX.X.XXXXxxxxx19/02/2022verifiedAlto
39XXX.XX.XXX.XXxxxx-xxx-xx-xxx-xx.xxxxxx.xxxx.xxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
40XXX.XXX.X.XXXxxxxx19/02/2022verifiedAlto
41XXX.XXX.XX.XXxxxxxxxxxxxxxxxxxxxx.xxxxx.xxxXxxxxx19/02/2022verifiedAlto
42XXX.XXX.XXX.XXxxxxxxxxxxxxxxxxxxxx.xxxxx.xxxXxxxxx19/02/2022verifiedAlto
43XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
44XXX.XXX.XX.XXXXxxxxx19/02/2022verifiedAlto
45XXX.XXX.XX.XXXxxxxx19/02/2022verifiedAlto
46XXX.XXX.XX.XXXXxxxxx19/02/2022verifiedAlto
47XXX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto
48XXX.XX.XX.XXxxxx-xxx-xxx.xx-xxxxxxxx.xxXxxxxx19/02/2022verifiedAlto
49XXX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto
50XXX.XX.X.XXXXxxxxx19/02/2022verifiedAlto
51XXX.XX.XX.XXxxxxx19/02/2022verifiedAlto
52XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxx.xxxxxx.xxx.xxXxxxxx19/02/2022verifiedAlto
53XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
54XXX.XXX.XXX.XXXxxxxx19/02/2022verifiedAlto
55XXX.XX.XX.XXXXxxxxx19/02/2022verifiedAlto
56XXX.XXX.XX.XXxx-xx-xxx-xxx.xxxxxxx.xxx.xxXxxxxx19/02/2022verifiedAlto
57XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
58XXX.X.XXX.XXXxxxxxxxxx.xxxx-xxxxx.xxXxxxxx19/02/2022verifiedAlto
59XXX.XXX.XXX.XXxxxxxx.xxxxxxxxxx.xxxXxxxxx19/02/2022verifiedAlto
60XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
61XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
62XXX.XXX.XXX.XXXxxxxx19/02/2022verifiedAlto
63XXX.XX.XXX.XXXXxxxxx19/02/2022verifiedAlto
64XXX.XXX.XX.XXXxxx.xx.xxx.xxx.xxxxx.xx.xx.xxxxxxx.xxxxxxx.xxx.xxXxxxxx19/02/2022verifiedAlto
65XXX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto
66XXX.XX.XX.XXXxxxxx19/02/2022verifiedAlto
67XXX.XX.XX.XXxxxxx19/02/2022verifiedAlto
68XXX.XXX.XXX.XXXXxxxxx19/02/2022verifiedAlto

TTP - Tactics, Techniques, Procedures (18)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (196)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTipoAceitação
1File.htaccesspredictiveMédio
2File/adfs/lspredictiveMédio
3File/carbon/mediation_secure_vault/properties/ajaxprocessor.jsppredictiveAlto
4File/cgi-bin/wlogin.cgipredictiveAlto
5File/fos/admin/index.php?page=menupredictiveAlto
6File/getcfg.phppredictiveMédio
7File/Home/debit_credit_ppredictiveAlto
8File/index.php/weblinks-categoriespredictiveAlto
9File/iwguestbook/admin/messages_edit.asppredictiveAlto
10File/login/index.phppredictiveAlto
11File/odfs/classes/Master.php?f=delete_teampredictiveAlto
12File/public/plugins/predictiveAlto
13File/scripts/iisadmin/bdir.htrpredictiveAlto
14File/usr/bin/pkexecpredictiveAlto
15File/wp-content/plugins/updraftplus/admin.phppredictiveAlto
16Fileadd.phppredictiveBaixo
17Fileadmin.cgi/config.cgipredictiveAlto
18Fileadmin.phppredictiveMédio
19Fileadmin/admin.guestbook.phppredictiveAlto
20Fileadmin/auth.phppredictiveAlto
21Fileadmin/backupdb.phppredictiveAlto
22Fileadmin/login.asppredictiveAlto
23Fileadmin/preview.phppredictiveAlto
24Fileadministrator/components/com_media/helpers/media.phppredictiveAlto
25Filexxxxxxx_xxxx_xxxxxxx_xxxxxx_xxx.xpredictiveAlto
26Filexxxx.xxpredictiveBaixo
27Filexxxxxxxxxxxx.xxxpredictiveAlto
28Filexxxx/xxxx_xxx.xxxpredictiveAlto
29Filexxxxxx_xxxxxxxxx.xxxpredictiveAlto
30Filexxxxxx/xxxxxxx/xxxx/xxxxxxx/xxxxxxx/xxxx_xxxxxxx.xxxpredictiveAlto
31Filexxx.xxxpredictiveBaixo
32Filexxxxxxx.xxxxpredictiveMédio
33Filexxx-xxx/xxxxxpredictiveAlto
34Filexxxxxxxxxxxxxxxx.xxxpredictiveAlto
35Filexxxxxxx/xxxxxxxxxx.xxxpredictiveAlto
36Filexxxxxxx/xxxx/xxxxxx/xxxxxx.xpredictiveAlto
37Filexxxxx-xxxxxxx.xxxpredictiveAlto
38Filex_xxxxxxpredictiveMédio
39Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveAlto
40Filexx/xx.xxxpredictiveMédio
41Filexxxxxxxxxx.xpredictiveMédio
42Filexxxxxxx.xxxpredictiveMédio
43Filexxxxxxxxx.xxxpredictiveAlto
44Filexxxxxxx/xxx/xxx/xxxxx.xpredictiveAlto
45Filexxxx.xxxpredictiveMédio
46Filexxxxx.xxxpredictiveMédio
47Filexxx/xxxx/xxxx.xpredictiveAlto
48Filexxxxxxx.xxxpredictiveMédio
49Filexxxxx/xxxxxx.xxxpredictiveAlto
50Filexxxx_xxxxxx_xxxxxxx.xxxpredictiveAlto
51Filexx_xxxxxxxpredictiveMédio
52Filexxxxx/xxxxx_xxxxx_xpredictiveAlto
53Filexxxxxxxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveAlto
54Filexx.xxxpredictiveBaixo
55Filexxxxx.xxxpredictiveMédio
56Filexxxxxx/xxxxxxxxpredictiveAlto
57Filexxxx_xxxxxxx.xxx.xxxpredictiveAlto
58Filexxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxpredictiveAlto
59Filexxxxxxxxx.xxxpredictiveAlto
60Filexxxxxxxxx.xxxpredictiveAlto
61Filexxxxxxxxx/xxxxxxxxx.xxx.xxxpredictiveAlto
62Filexxxxxxxxxxxx.xxxpredictiveAlto
63Filexxxxxxxxx.xxxpredictiveAlto
64Filexxxx/xx/xxxxxxxxxx.xxxpredictiveAlto
65Filexxxxxxxx.xxxpredictiveMédio
66Filexxxxxxxxx.xxpredictiveMédio
67Filexxx/xxxxxx.xxxpredictiveAlto
68Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveAlto
69Filexxxxxxx/xxxxxxx/xxxxxxxx_xxxxxxxx.xxx.xxxpredictiveAlto
70Filexxxxxxxx/xxxxxxxxx.xxxxx.xxxpredictiveAlto
71Filexxxxxxxx/xxxxxx/xxxx/xxxxx.xxx.xxxpredictiveAlto
72Filexxxxx.xxxpredictiveMédio
73Filexxxxxxxxxxx.xxxpredictiveAlto
74Filexxxxxxxx/xxx_xxxx_xxxx.xpredictiveAlto
75Filexxx/xxxxxxxx.xxxpredictiveAlto
76Filexxx_xxxxxxxxx.xxxpredictiveAlto
77Filexxx.x/xxxxxx.xpredictiveAlto
78Filexxx.xpredictiveBaixo
79Filexxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
80Filexxxxx.xxxpredictiveMédio
81Filexxx_xxxxxx.xpredictiveMédio
82Filexxxxxxxx_xxxxxx.xxxpredictiveAlto
83Filexxx/xxxx/xxxxxx.xpredictiveAlto
84Filexxxxxxx_xxxx.xxxpredictiveAlto
85Filexxx_xxxx_xxx_xxxxxxxxxx.xpredictiveAlto
86Filexxx_xxxx.xxxpredictiveMédio
87Filexxxx-xxxx_xxxxxxx.xxpredictiveAlto
88Filexxxxxxx.xxxpredictiveMédio
89Filexxxxxxxxxxx.xxxpredictiveAlto
90Filexxxxxxxxxxxx.xxxpredictiveAlto
91Filexxxxxx.xxxpredictiveMédio
92Filexxxxxxx\xxx_xxxxxx.xxxpredictiveAlto
93Filexxx_xxx_xxxx.xxxpredictiveAlto
94Filexx.xxxpredictiveBaixo
95Filexxxxxx/xxx/xx/xxx.xxpredictiveAlto
96Filexxxxxxxxx.xxxxpredictiveAlto
97Filexxxxxx.xxxpredictiveMédio
98Filexxxx_xxxxx.xxxpredictiveAlto
99Filexxxxxxxxxxxx.xxxpredictiveAlto
100Filexxxxxx/xxxxx.xxxpredictiveAlto
101Filexxxxxxxxx.xxxpredictiveAlto
102Filexx_xxxxx_xxxx.xxxpredictiveAlto
103Filexxxx-xxx/predictiveMédio
104Filexxxxx.xxxpredictiveMédio
105Filexxxxxxxx_xxxxxxxxx.xxxpredictiveAlto
106Filexxxxx.xxxpredictiveMédio
107Filexxxxxx_xxx.xxxpredictiveAlto
108Filexxxxxxx.xxxxpredictiveMédio
109Filexxxxxx.xxxpredictiveMédio
110Filexxxxxxxxxx.xxxxpredictiveAlto
111Filexx-xxxxx/xxxx.xxxpredictiveAlto
112Filexx-xxxxx.xxxpredictiveMédio
113Filexxxxxx.xxxpredictiveMédio
114Filexxxxxxxxxxxxx.xxxpredictiveAlto
115Library/xxxxx/xxxxxxxx/xxxxxxx.xxxpredictiveAlto
116Libraryxxx/xxxx/xxxxx.xxxpredictiveAlto
117Libraryxxxxxx-xx/xxx/xxx-xxxxxx-xxxxx-xx.xxxpredictiveAlto
118Libraryxxxxxxx.xxx.xx.xxxpredictiveAlto
119Libraryxxxxxx.xxxpredictiveMédio
120Libraryxxx/xxx/xxxx/predictiveAlto
121Argumentxx/xxpredictiveBaixo
122ArgumentxxxxxxxpredictiveBaixo
123ArgumentxxxxxxxxpredictiveMédio
124ArgumentxxxxxpredictiveBaixo
125ArgumentxxxxxpredictiveBaixo
126ArgumentxxxxxxxxxxxxxpredictiveAlto
127ArgumentxxxxxxxxpredictiveMédio
128ArgumentxxxpredictiveBaixo
129ArgumentxxxxxxxpredictiveBaixo
130ArgumentxxxxxxxxxxxxxpredictiveAlto
131ArgumentxxxxxxpredictiveBaixo
132ArgumentxxxxxxxpredictiveBaixo
133ArgumentxxxxxxxxpredictiveMédio
134Argumentxxxxxxx_xxxx_xxx_xxxxxxpredictiveAlto
135ArgumentxxxxxpredictiveBaixo
136Argumentxxx_xxxxpredictiveMédio
137ArgumentxxxxxxxpredictiveBaixo
138Argumentxxxx_xxxxx_xxxxpredictiveAlto
139ArgumentxxxxpredictiveBaixo
140ArgumentxxxxxxxxpredictiveMédio
141Argumentxx_xxpredictiveBaixo
142Argumentxx_xxxxpredictiveBaixo
143ArgumentxxpredictiveBaixo
144Argumentx_xxxxxxxpredictiveMédio
145ArgumentxxxxpredictiveBaixo
146ArgumentxxxxxpredictiveBaixo
147ArgumentxxpredictiveBaixo
148ArgumentxxxxxpredictiveBaixo
149ArgumentxxxxxpredictiveBaixo
150ArgumentxxxpredictiveBaixo
151Argumentxxx_xxxpredictiveBaixo
152ArgumentxxxxxpredictiveBaixo
153Argumentxxxxxxx_xxxxpredictiveMédio
154ArgumentxxxxxxpredictiveBaixo
155ArgumentxxxpredictiveBaixo
156ArgumentxxxxxxpredictiveBaixo
157ArgumentxxxxxxxpredictiveBaixo
158ArgumentxxxxxxxxxpredictiveMédio
159Argumentxxx_xxpredictiveBaixo
160ArgumentxxxxpredictiveBaixo
161ArgumentxxxxpredictiveBaixo
162Argumentxx_xxpredictiveBaixo
163ArgumentxxxxxxpredictiveBaixo
164ArgumentxxxxxpredictiveBaixo
165ArgumentxxxxpredictiveBaixo
166Argumentxxxx[xx]predictiveMédio
167Argumentxxxxx_xxxx_xxxxpredictiveAlto
168ArgumentxxxxxxpredictiveBaixo
169Argumentxxx-xxxxxxpredictiveMédio
170Argumentxxxxxx/xxxxxx_xxxxxxpredictiveAlto
171Argumentxxxxxx_xxxxxxpredictiveAlto
172Argumentxxxxxx_xxxxxpredictiveMédio
173Argumentxxxxxx_xxxxpredictiveMédio
174ArgumentxxxxxxxxpredictiveMédio
175ArgumentxxxxpredictiveBaixo
176Argumentxxxx_xxpredictiveBaixo
177ArgumentxxxpredictiveBaixo
178ArgumentxxxxxpredictiveBaixo
179ArgumentxxxxxxxpredictiveBaixo
180ArgumentxxxxxpredictiveBaixo
181ArgumentxxxxxxxxxpredictiveMédio
182ArgumentxxxxxxxxxxxpredictiveMédio
183ArgumentxxxxxxpredictiveBaixo
184ArgumentxxxxxxxxpredictiveMédio
185Argumentxxx:xxxxpredictiveMédio
186Argumentxxxxx/xxxxxxpredictiveMédio
187Argumentxxx_xxx_xxxxxxxx_xxxpredictiveAlto
188Argumentx_xxxxxxxxpredictiveMédio
189Input Valuex%xx%xx%xxxxxxx%xxxxxxxx%xxxxxxxxxx%xxxxxx%xx%xxxxxxx_xxxxx%xx%xx--%xx%xxpredictiveAlto
190Input Valuex+xxxxx+xxxxxx+x,xxxxxxx,xxxxxxxxxxx+xxxx+xxxxx#predictiveAlto
191Input Value<?xxx xxxxxx($_xxx['x']); ?>predictiveAlto
192Input Value??x:\predictiveBaixo
193Input Valuexxxx -x xxxxxxxx=xxxxxx.xxxxxxx xxxx://xxx.xxx.x.x/xxxxxx.xxxpredictiveAlto
194Network Portxxx/xx (xxx)predictiveMédio
195Network Portxxx/xxxxpredictiveMédio
196Network Portxxx xxxxxx xxxxpredictiveAlto

Referências (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!