Zeppelin Análise

IOB - Indicator of Behavior (14)

Curso de tempo

Idioma

en8
ru6

País

Actores

Actividades

Interesse

Curso de tempo

Tipo

Fabricante

Produto

pesign2
HCL Traveler Web Admin2
Node.js2
10Web Photo Gallery Plugin2
WordPress2

Vulnerabilidades

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDEndereço IPHostnameActorCampanhasIdentifiedTipoAceitação
145.142.213.167katitoons.comZeppelin12/05/2022verifiedAlto
2XXX.XXX.XXX.XXXXxxxxxxx12/05/2022verifiedAlto

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassificaçãoVulnerabilidadesTipo de acessoTipoAceitação
1T1006CAPEC-126CWE-22Path TraversalpredictiveAlto
2T1059CAPEC-242CWE-94Argument InjectionpredictiveAlto
3TXXXX.XXXCAPEC-209CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveAlto
4TXXXX.XXXCAPEC-191CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveAlto
5TXXXXCAPEC-CWE-XXXXxxxxxxxxx XxxxxxpredictiveAlto
6TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveAlto
7TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (5)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTipoAceitação
1File/etc/pki/pesignpredictiveAlto
2Filefrontend/models/model.phppredictiveAlto
3Filexxxxxxxxxxxxx.xxxpredictiveAlto
4Argumentxxx_xxxxxx_xpredictiveMédio
5Argumentxxxxxx xxxxpredictiveMédio

Referências (2)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!