Satellite Service Providers Análise

IOB - Indicator of Behavior (205)

Curso de tempo

Idioma

en148
zh52
es6

País

la198
my2
es2
il2
us2

Actores

Actividades

Interesse

Curso de tempo

Tipo

Fabricante

Produto

Microsoft Windows10
CodeIgniter6
Moodle6
Google Android4
Apache Tomcat4

Vulnerabilidades

#VulnerabilidadeBaseTemp0dayHojeExpMasCTIEPSSCVE
1Tiki Admin Password tiki-login.php Fraca autenticação8.07.7$0-$5k$0-$5kNot DefinedOfficial Fix6.520.00936CVE-2020-15906
2TikiWiki tiki-register.php direitos alargados7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix10.000.01009CVE-2006-6168
3Drupal Sanitization API Roteiro Cruzado de Sítios3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00056CVE-2020-13672
4LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable7.780.00000
5LiteSpeed Cache Plugin Shortcode Roteiro Cruzado de Sítios3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.030.00051CVE-2023-4372
6WebTitan Appliance Extensions Persistent Roteiro Cruzado de Sítios3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.020.00000
7ipTIME NAS-I Bulletin Manage direitos alargados7.17.1$0-$5k$0-$5kNot DefinedNot Defined0.030.00988CVE-2020-7847
8request-baskets API Request {name} direitos alargados6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.000.05974CVE-2023-27163
9DZCP deV!L`z Clanportal config.php direitos alargados7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix1.890.00943CVE-2010-0966
10PHP phpinfo Roteiro Cruzado de Sítios4.33.9$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.260.02101CVE-2007-1287
11nginx direitos alargados6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.260.00241CVE-2020-12440
12Microsoft Windows Scripting Engine Remote Code Execution5.95.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.000.28182CVE-2021-34480
13DevExpress ASP.NET Web Forms ASPxHttpHandlerModule DXR.axd direitos alargados4.34.2$0-$5k$0-$5kNot DefinedNot Defined0.070.00183CVE-2022-41479
14Basilix Webmail login.php3 direitos alargados7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00000
15JoomlaTune Com Jcomments admin.jcomments.php Roteiro Cruzado de Sítios4.34.1$0-$5k$0-$5kProof-of-ConceptNot Defined0.160.00489CVE-2010-5048
16Microsoft Office Remote Code Execution7.06.1$5k-$25k$0-$5kUnprovenOfficial Fix0.000.00169CVE-2023-21735
17Alt-N MDaemon Worldclient direitos alargados4.94.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.040.00090CVE-2021-27182
18CouchCMS mysql2i.func.php Path Divulgação de Informação3.33.3$0-$5k$0-$5kNot DefinedNot Defined0.000.00241CVE-2019-1010042
19SunHater KCFinder upload.php Roteiro Cruzado de Sítios5.75.7$0-$5k$0-$5kNot DefinedNot Defined0.040.00131CVE-2019-14315
20Esri ArcGIS Server Injecção SQL8.18.0$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00123CVE-2021-29114

IOC - Indicator of Compromise (45)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDEndereço IPHostnameActorCampanhasIdentifiedTipoAceitação
15.145.149.142ip-5-145-149-142.hosts.businesscomnetworks.comSatellite Service Providers17/01/2023verifiedAlto
257.72.6.0Satellite Service Providers17/01/2023verifiedAlto
362.56.206.0Satellite Service Providers17/01/2023verifiedAlto
462.128.160.0Satellite Service Providers17/01/2023verifiedAlto
562.128.167.0Satellite Service Providers17/01/2023verifiedAlto
662.145.35.0Satellite Service Providers17/01/2023verifiedAlto
777.220.0.0Satellite Service Providers17/01/2023verifiedAlto
878.41.29.0Satellite Service Providers17/01/2023verifiedAlto
978.41.227.0static-0.227.41.78.in-addr.arpaSatellite Service Providers17/01/2023verifiedAlto
10XX.XX.XX.XXXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
11XX.XX.XX.XXXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
12XX.XX.XX.XXXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
13XX.XX.XX.XXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
14XX.XX.XX.XXXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
15XX.XX.XX.XXXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
16XX.XXX.X.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
17XX.XXX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
18XX.XXX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
19XX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
20XX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
21XX.XXX.XXX.Xxx-xxx-xxx-x.xxxxxxxx.xxxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
22XX.XX.XXX.XXXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
23XX.XX.XXX.XXxxx-xxx.xxxxxxx.xxxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
24XXX.XX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
25XXX.XX.XXX.Xxxxxxxx.xxxxx.xxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
26XXX.XX.XXX.XXxxxxxxx.xxxxx.xxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
27XXX.XX.XXX.XXxxxxxxx.xxxxx.xxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
28XXX.XX.XXX.XXxxxxxxx.xxxxx.xxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
29XXX.XX.XXX.XXxxxxxxxxx.xxxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
30XXX.XX.XXX.XXxxxxxxx.xxxxx.xxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
31XXX.XX.XXX.XXXxxxx.xxxxxxxx.xxxXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
32XXX.XX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
33XXX.XX.X.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
34XXX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
35XXX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
36XXX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
37XXX.XXX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
38XXX.XXX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
39XXX.XXX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
40XXX.XXX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
41XXX.XXX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
42XXX.XXX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
43XXX.XXX.XXX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
44XXX.XX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto
45XXX.XXX.XX.XXxxxxxxxx Xxxxxxx Xxxxxxxxx17/01/2023verifiedAlto

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (104)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTipoAceitação
1File/admin/dl_sendmail.phppredictiveAlto
2File/api/baskets/{name}predictiveAlto
3File/api/v2/cli/commandspredictiveAlto
4File/DXR.axdpredictiveMédio
5File/forum/away.phppredictiveAlto
6File/novel/bookSetting/listpredictiveAlto
7File/novel/userFeedback/listpredictiveAlto
8File/owa/auth/logon.aspxpredictiveAlto
9File/spip.phppredictiveMédio
10File/zm/index.phppredictiveAlto
11Fileadclick.phppredictiveMédio
12Fileadmin.jcomments.phppredictiveAlto
13Filexxxxx/xxxx-xxxxxxx/xxxxxxxxxxxpredictiveAlto
14Filexxxxxxxxxxx/xxxxxxx/xxxxx/xxxxx/xxxxxxxxx/xxxxxxxx.xxxpredictiveAlto
15Filexxxx/xxxxxxxxxxxx.xxxpredictiveAlto
16Filexxxx.xxxpredictiveMédio
17Filexx_xxxx_xx_xxxx_xxxx.xxxpredictiveAlto
18Filexxxx_xxxxxxx.xxxpredictiveAlto
19Filexxxxx.xxxpredictiveMédio
20Filexxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxx_xxxxx.xxxxpredictiveAlto
21Filexxxxx-xxxxxxx.xxxpredictiveAlto
22Filexxxxxxxxxx/xxx_xxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxxpredictiveAlto
23Filexxxxxxxxxx\xxxx.xxxpredictiveAlto
24Filexxxxxxxxxxx.xxxpredictiveAlto
25Filexxxx-xxxxxx.xxxpredictiveAlto
26Filexxxxxxxxxxx.xxxxx.xxxpredictiveAlto
27Filexxxx.xxxpredictiveMédio
28Filexxxxx_xxxx.xxxpredictiveAlto
29Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictiveAlto
30Filexxx/xxxxxx.xxxpredictiveAlto
31Filexxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxxpredictiveAlto
32Filexxxxx.xxxxpredictiveMédio
33Filexxxxx.xxxpredictiveMédio
34Filexxxxx.xxx/xxxxxx.xxx/xxxxxxxxxxxxx.xxx/xxxxxxxx.xxxpredictiveAlto
35Filexxxxx.xxx?x=xxxx&x=xxxx&x=xx_xxx_xxxxxxpredictiveAlto
36Filexxxxx.xxx?x=xxxx&x=xxxxxxx&x=xxxpredictiveAlto
37Filexxxx_xxxxxxx.xxxpredictiveAlto
38Filexxxxx.xxxxpredictiveMédio
39Filexxxxx.xxxpredictiveMédio
40Filexx_xxxx.xpredictiveMédio
41Filexxx/xxxx/xxxx_xxxxxxxxx.xpredictiveAlto
42Filexxxxxxx_xxxx.xxxpredictiveAlto
43Filexxxxxxxxxxxxxxxxx.xxxpredictiveAlto
44Filexxxxxxx.xxxpredictiveMédio
45Filexxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxxpredictiveAlto
46Filexxxx_xxxx_xxxxxx.xxxpredictiveAlto
47Filexxxx_xxxxx.xxxxpredictiveAlto
48Filexxx/xxxx/xxxxpredictiveAlto
49Filexxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxxpredictiveAlto
50Filexxxxxxx.xxx.xx.xxxxxxxxxxx.xxxpredictiveAlto
51Filexxxxxxxxx/xxxxxxxx.xxxpredictiveAlto
52Filexxxx-xxxxx.xxxpredictiveAlto
53Filexxxx-xxxxxxxx.xxxpredictiveAlto
54Filexxxxxx.xxxpredictiveMédio
55Filexxxxxxx-xxxxx.xxxpredictiveAlto
56Filexxxx_xxxxx.xxxpredictiveAlto
57Filexxxx/xxx/xxxx-xxxxx.xxxpredictiveAlto
58Filexxxx.xxxpredictiveMédio
59Filexx-xxxxx-xxxxxx.xxxpredictiveAlto
60Filexxx/xxxxxxxx/xxxxxxxx.xxxpredictiveAlto
61Filexxxx.xxxpredictiveMédio
62File~/xxx/xxxx-xxxxxxxxx.xxxpredictiveAlto
63File~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxxxxxxx.xxxpredictiveAlto
64Libraryxxxxxxx/xxx.xxx.xxx.xxxpredictiveAlto
65Argumentxxx_xxxpredictiveBaixo
66ArgumentxxxxxxxxxpredictiveMédio
67ArgumentxxxxxxxxpredictiveMédio
68Argumentxxx_xxx_xx_xxx_xxxxxxxxxx_xpredictiveAlto
69Argumentxxxxx_xxxxpredictiveMédio
70Argumentxxxx_xxx_xxxxpredictiveAlto
71ArgumentxxxxxxxxxxpredictiveMédio
72ArgumentxxxpredictiveBaixo
73ArgumentxxxxxxxxxxxxxxxpredictiveAlto
74ArgumentxxxxpredictiveBaixo
75Argumentxxxxxxxxx_xxxxxxpredictiveAlto
76ArgumentxxxxxxxxxpredictiveMédio
77Argumentxx_xxxxxxxpredictiveMédio
78ArgumentxxxxpredictiveBaixo
79ArgumentxxxxxxxxpredictiveMédio
80Argumentxxxxxx_xxxxxpredictiveMédio
81Argumentxx_xxpredictiveBaixo
82Argumentxxxxxxx[xxxxxxx]predictiveAlto
83ArgumentxxxxxpredictiveBaixo
84ArgumentxxpredictiveBaixo
85ArgumentxxxxpredictiveBaixo
86ArgumentxxxxpredictiveBaixo
87Argumentxxxxxx/xxxxx/xxxxpredictiveAlto
88ArgumentxxxxxxxpredictiveBaixo
89ArgumentxxxxpredictiveBaixo
90Argumentxxxxxx_xxxxxxpredictiveAlto
91Argumentxxxxxxxx_xxpredictiveMédio
92Argumentxxxxxx_xxxxxpredictiveMédio
93Argumentxxxx_xxxxpredictiveMédio
94ArgumentxxxxpredictiveBaixo
95Argumentxxxxxxxx/xxxxxxpredictiveAlto
96ArgumentxxxxxxxpredictiveBaixo
97ArgumentxxxpredictiveBaixo
98ArgumentxxxxxpredictiveBaixo
99ArgumentxxxpredictiveBaixo
100ArgumentxxxxxxxxpredictiveMédio
101Argument_xxx_xxxxxxxxxxx_predictiveAlto
102Input Valuexxxxxxxxx' xxx 'x'='xpredictiveAlto
103Pattern|xx xx xx xx|predictiveAlto
104Network Portxxx/xxxx (xxx)predictiveAlto

Referências (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!