PLEAD Análise

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (8)

Idioma

en	6
zh	2

País

cn	6
us	2

Actores

PLEAD	1

Interesse

Tipo

Not Defined	6
JavaScript Library	2

Fabricante

Not Defined	6
eSyndicat	2

Produto

PDF.js Viewer Plugin	2
Yii Framework	2
eSyndicat Directory Software	2
ProcessMaker Enterprise Core	2

Vulnerabilidades

#	Vulnerabilidade	Base	Temp	0day	Hoje	Exp	Mas	EPSS	CTI	CVE
1	eSyndicat Directory Software suggest-listing.php Roteiro Cruzado de Sítios	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.05
2	PDF.js Viewer Plugin Shortcode Roteiro Cruzado de Sítios	4.4	4.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00058	0.04	CVE-2021-24759
3	ProcessMaker Enterprise Core Injecção SQL	7.0	7.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00063	0.00	CVE-2016-9048
4	Citrix Application Delivery Controller/Gateway Directório Traversal	8.5	8.4	$25k-$100k	$0-$5k	High	Official Fix	0.97537	0.00	CVE-2019-19781
5	Liferay Portal CE JSON Payload direitos alargados	7.5	7.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01289	0.02	CVE-2019-16891
6	Yii Framework Exception Error ErrorHandler.php Divulgação de Informação	6.4	6.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00246	0.05	CVE-2018-6010
7	Node.js Pathname Validator direitos alargados	7.4	7.1	$0-$5k	$0-$5k	High	Official Fix	0.96684	0.03	CVE-2017-14849
8	PHPWind goto.php Roteiro Cruzado de Sítios	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00254	0.05	CVE-2015-4135

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	Endereço IP	Hostname	Actor	Identified	Tipo	Aceitação
1	45.76.102.145	45.76.102.145.vultrusercontent.com	PLEAD	27/03/2022	verified	Alto
2	XX.XXX.XX.XXX		Xxxxx	27/03/2022	verified	Alto
3	XX.XXX.XX.XX	xx-xxx-xx-xx.xxxxx-xx.xxxxx.xxx	Xxxxx	27/03/2022	verified	Alto
4	XXX.XX.XXX.XXX	xxx-xx-xxx-xxx.xxxxx-xx.xxxxx.xxx	Xxxxx	27/03/2022	verified	Alto
5	XXX.XXX.XXX.XX	xxx-xxx-xxx-xx.xxxxx-xx.xxxxx.xxx	Xxxxx	27/03/2022	verified	Alto

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Classificação	Vulnerabilidades	Tipo de acesso	Tipo	Aceitação
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	Alto
2	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Alto
3	TXXXX	CAPEC-19	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
4	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
5	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (5)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Tipo	Aceitação
1	File	base/ErrorHandler.php	predictive	Alto
2	File	goto.php	predictive	Médio
3	File	xxxxxxx-xxxxxxx.xxx	predictive	Alto
4	Argument	xxxxx	predictive	Baixo
5	Argument	xxx	predictive	Baixo

Referências (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ VoltarVisão GeralPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!