PAPERWALL Análise

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (10)

Idioma

zh	10

País

cn	10

Actores

PAPERWALL	2

Interesse

Tipo

Not Defined	8
Content Management System	2

Fabricante

Not Defined	6
Hashicorp	2
Joomla	2

Produto

Elasticsearch	4
Hashicorp Terraform	2
Joomla CMS	2
FLDS	2

Vulnerabilidades

#	Vulnerabilidade	Base	Temp	0day	Hoje	Exp	Mas	CTI	EPSS	CVE
1	0xJacky nginx-ui Certificate Import write_file.go Directório Traversal	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00165	CVE-2024-23827
2	Clash Proxies Name Column direitos alargados	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00274	CVE-2022-26255
3	Hashicorp Terraform Directório Traversal	6.0	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00044	CVE-2023-4782
4	Google Android ShannonRcs Divulgação de Informação	4.4	4.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	0.00042	CVE-2023-20923
5	Google Android ActivityManagerService.java openContentUri Divulgação de Informação	3.3	3.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.00042	CVE-2023-21292
6	Elasticsearch Searchable Snapshot direitos alargados	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00112	CVE-2021-22147
7	Elasticsearch Grok Parser Negação de Serviço	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00138	CVE-2021-22144
8	Elasticsearch Error Report Divulgação de Informação	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	0.96081	CVE-2021-22145
9	Joomla CMS com_easyblog Injecção SQL	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.25	0.00000
10	FLDS redir.php Injecção SQL	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.31	0.00203	CVE-2008-5928

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	Endereço IP	Actor	Identified	Tipo	Aceitação
1	43.153.75.48	PAPERWALL	08/02/2024	verified	Alto
2	43.155.173.104	PAPERWALL	08/02/2024	verified	Alto
3	XX.XXX.XX.XXX	Xxxxxxxxx	08/02/2024	verified	Alto
4	XX.XXX.XX.XXX	Xxxxxxxxx	08/02/2024	verified	Alto
5	XX.XXX.XXX.XXX	Xxxxxxxxx	08/02/2024	verified	Alto
6	XX.XX.XX.XX	Xxxxxxxxx	08/02/2024	verified	Alto
7	XXX.XX.XXX.XX	Xxxxxxxxx	08/02/2024	verified	Alto
8	XXX.XXX.XXX.XX	Xxxxxxxxx	08/02/2024	verified	Alto

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilidades	Tipo de acesso	Tipo	Aceitação
1	T1006	CWE-22	Path Traversal	predictive	Alto
2	TXXXX	CWE-XX	Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxx Xxxxx Xxxxxxxxxxx	predictive	Alto
3	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
4	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (4)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Tipo	Aceitação
1	File	ActivityManagerService.java	predictive	Alto
2	File	redir.php	predictive	Médio
3	File	xxxxx_xxxx.xx	predictive	Alto
4	Argument	xx	predictive	Baixo

Referências (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!