CoinMiner Анализ

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (19)

Временная шкала

Язык

en16
es2
ru2

Страна

us6
cn2

Акторы

Kinsing1
Mirai1
Fileless1
RedLine1
BumbleBee1

Деятельность

Интерес

Временная шкала

Тип

Web Browser10
Not Defined2
Content Management System2
Learning Management Software2

Поставщик

Google10
Not Defined2
Joomla2
aEnrich2

Продукт

Google Chrome10
Active Intelligent Visualization2
Joomla CMS2
aEnrich eHRD Learning Management2

Уязвимости

#УязвимостиBaseTemp0dayСегодняЭ�RemCTIEPSSCVE
1Joomla CMS LDAP Authentication Password эскалация привилегий7.57.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.01039CVE-2017-14596
2DZCP deV!L`z Clanportal config.php эскалация привилегий7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.570.00943CVE-2010-0966
3Active Auction House ItemInfo.asp sql-инъекция6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000.00685CVE-2005-1029
4Google Chrome Network Service повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30553
5Google Chrome Extension повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30552
6Google Chrome V8 эскалация привилегий6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.13946CVE-2021-30551
7Google Chrome Accessibility повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30550
8Google Chrome Spell Check повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00286CVE-2021-30549
9Google Chrome Loader повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30548
10Google Chrome ANGLE повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00829CVE-2021-30547
11Google Chrome Autofill повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30546
12Google Chrome Extension повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30545
13Google Chrome BFCache повреждение памяти6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.000.00808CVE-2021-30544
14Active Intelligent Visualization Vdc Header sql-инъекция6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.000.00140CVE-2021-44835
15aEnrich eHRD Learning Management раскрытие информации5.55.4$0-$5k$0-$5kNot DefinedNot Defined0.000.00153CVE-2022-28740
16GNU PSPP pspp-dump-sav.c read_bytes_internal повреждение памяти6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.000.00062CVE-2022-39831

IOC - Indicator of Compromise (114)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
12.58.149.237CoinMiner18.03.2024verifiedВысокий
24.4.0.0Coinminer05.04.2020verifiedВысокий
35.9.157.2static.2.157.9.5.clients.your-server.deCoinMiner18.03.2024verifiedВысокий
45.196.13.2929.ip-5-196-13.euCoinMiner22.07.2021verifiedВысокий
55.196.23.240240.ip-5-196-23.euCoinMiner22.07.2021verifiedВысокий
613.107.21.200CoinMiner22.07.2021verifiedВысокий
718.210.126.40ec2-18-210-126-40.compute-1.amazonaws.comCoinMiner17.07.2021verifiedСредний
823.21.48.44ec2-23-21-48-44.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
923.21.76.253ec2-23-21-76-253.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
1023.21.126.66ec2-23-21-126-66.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
1123.21.140.41ec2-23-21-140-41.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
1223.21.252.4ec2-23-21-252-4.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
1323.224.232.68CoinMiner18.03.2024verifiedВысокий
1446.41.150.129CoinMiner18.03.2024verifiedВысокий
1547.103.63.1CoinMiner02.02.2024verifiedВысокий
1649.12.80.38static.38.80.12.49.clients.your-server.deCoinMiner17.07.2021verifiedВысокий
1749.12.80.40static.40.80.12.49.clients.your-server.deCoinMiner17.07.2021verifiedВысокий
1849.12.113.223static.223.113.12.49.clients.your-server.deCoinMiner18.03.2024verifiedВысокий
1950.19.48.59ec2-50-19-48-59.compute-1.amazonaws.comCoinMiner18.01.2024verifiedСредний
2050.19.96.218ec2-50-19-96-218.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
2150.19.252.36ec2-50-19-252-36.compute-1.amazonaws.comCoinMiner23.07.2021verifiedСредний
2251.15.54.102102-54-15-51.instances.scw.cloudCoinMiner22.07.2021verifiedВысокий
2351.15.58.224224-58-15-51.instances.scw.cloudCoinMiner22.07.2021verifiedВысокий
24XX.XX.XX.XXXxxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22.07.2021verifiedВысокий
25XX.XX.XX.XXxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22.07.2021verifiedВысокий
26XX.XX.XX.XXXxxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22.07.2021verifiedВысокий
27XX.XX.XX.XXxx-xx-xx-xx.xxxxxxxxx.xxx.xxxxxXxxxxxxxx22.07.2021verifiedВысокий
28XX.XX.XXX.XXXxxx.xx-xx-xx-xxx.xxXxxxxxxxx30.03.2022verifiedВысокий
29XX.XX.XX.XXXxxxx.xxxxxxx.xxxXxxxxxxxx22.07.2021verifiedВысокий
30XX.XXX.XX.XXxxxx.xxxxxxx.xxxXxxxxxxxx22.07.2021verifiedВысокий
31XX.XXX.XX.XXXxxx.xx-xx-xxx-xx.xxXxxxxxxxx22.07.2021verifiedВысокий
32XX.XX.X.XXXXxxxxxxxx22.07.2021verifiedВысокий
33XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
34XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
35XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
36XX.XXX.XX.XXXxxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
37XX.XXX.XXX.XXxxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
38XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
39XX.XXX.XXX.XXXxxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxxXxxxxxxxx23.07.2021verifiedСредний
40XX.XX.XX.XXXxxxxxxxx17.07.2021verifiedВысокий
41XX.XXX.XXX.XXXXxxxxxxxx18.03.2024verifiedВысокий
42XX.XXX.XXX.XXXXxxxxxxxx18.03.2024verifiedВысокий
43XX.XX.XXX.XXXxxxxxxxxxxx.xxxXxxxxxxxx30.03.2022verifiedВысокий
44XX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxxxxx30.03.2022verifiedВысокий
45XX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
46XX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17.07.2021verifiedВысокий
47XX.XXX.XXX.XXXxxxx.xxxxxxxxxxxx.xxXxxxxxxxx22.07.2021verifiedВысокий
48XX.XXX.XXX.XXxx.xxxx.xxxxx.xxxXxxxxxxxx16.04.2022verifiedВысокий
49XX.XX.XXX.XXXxxxxxxxx31.03.2022verifiedВысокий
50XX.XXX.XX.XXXxxxx.xxxxxx-xxxxx.xxxXxxxxxxxx08.04.2022verifiedВысокий
51XX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17.07.2021verifiedВысокий
52XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx16.04.2022verifiedВысокий
53XX.XXX.XXX.XXxxxx.xxxxxxx.xxxXxxxxxxxx22.07.2021verifiedВысокий
54XX.XXX.XX.XXXXxxxxxxxx18.03.2024verifiedВысокий
55XX.XXX.XX.XXXXxxxxxxxx16.12.2023verifiedВысокий
56XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
57XX.XXX.XXX.XXxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
58XX.XXX.XXX.XXXxxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
59XX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
60XX.XXX.XX.XXxxxxxx.xx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
61XX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
62XX.XXX.XXX.XXxxxxxx.xx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
63XXX.XXX.XXX.XXXxxx-xx.xxxxxxxxxxxxx.xxxXxxxxxxxx18.01.2024verifiedВысокий
64XXX.XX.XX.XXXXxxxxxxxx23.07.2021verifiedВысокий
65XXX.XX.XX.XXXXxxxxxxxx17.07.2021verifiedВысокий
66XXX.XX.XX.XXXXxxxxxxxx17.07.2021verifiedВысокий
67XXX.XX.XX.XXXxxxxxxxx17.07.2021verifiedВысокий
68XXX.XX.XX.XXXxxxxxxxx17.07.2021verifiedВысокий
69XXX.XX.XXX.XXXxxxxxxxx02.02.2024verifiedВысокий
70XXX.XX.XX.XXXXxxxxxxxx02.02.2024verifiedВысокий
71XXX.XXX.X.XXXXxxxxxxxx16.04.2022verifiedВысокий
72XXX.XXX.XX.XXXXxxxxxxxx31.03.2022verifiedВысокий
73XXX.XXX.X.XXXxxxxxxxx02.02.2024verifiedВысокий
74XXX.XXX.X.XXXxxxxxx.xxx.x.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
75XXX.XX.XXX.XXXXxxxxxxxx02.02.2024verifiedВысокий
76XXX.XXX.XX.XXXxxxxxxxx02.02.2024verifiedВысокий
77XXX.XXX.XX.XXXxxxxxxxx22.07.2021verifiedВысокий
78XXX.XXX.XX.XXxxxxxx.xx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx23.07.2021verifiedВысокий
79XXX.XXX.XX.XXXxxxxxxxxXxxxxxxxx23.07.2021verifiedВысокий
80XXX.XXX.XX.XXXxxxx.xxxxxxx.xxxXxxxxxxxx22.07.2021verifiedВысокий
81XXX.XXX.XXX.XXXxxxxxxxx.xxxx-xxxxxxx.xxXxxxxxxxx17.07.2021verifiedВысокий
82XXX.XX.XXX.XXXxxx.xx-xxx-xx-xxx.xxXxxxxxxxx22.07.2021verifiedВысокий
83XXX.XX.XXX.XXXxxxxxxxx.xx-xxx-xx-xxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
84XXX.XX.XX.XXxxx-xxxxxxxx.xxx.xxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
85XXX.XXX.XXX.XXXxxxxxxxx23.10.2023verifiedВысокий
86XXX.XXX.XXX.XXXxxxxxxxx23.10.2023verifiedВысокий
87XXX.XXX.XXX.XXXxxxxxxxx31.03.2022verifiedВысокий
88XXX.XX.XXX.XXXXxxxxxxxx16.04.2022verifiedВысокий
89XXX.XX.XX.XXXxxx-xxxxxxxx.xx-xxxxxxXxxxxxxxx23.07.2021verifiedВысокий
90XXX.XXX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
91XXX.XX.XXX.XXxxxxxx.xx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17.07.2021verifiedВысокий
92XXX.XXX.XXX.XXXXxxxxxxxx18.03.2024verifiedВысокий
93XXX.XX.XXX.XXXxxxxxxx.xxxxxxxxx.xxXxxxxxxxx22.07.2021verifiedВысокий
94XXX.XX.XX.XXxxxxxx.xx.xx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx17.07.2021verifiedВысокий
95XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxxx23.07.2021verifiedВысокий
96XXX.XXX.XXX.XXXXxxxxxxxx18.03.2024verifiedВысокий
97XXX.XXX.XX.XXXxxxxxx.xxx.xx.xxx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxxxxx22.07.2021verifiedВысокий
98XXX.XX.XX.XXXXxxxxxxxx17.07.2021verifiedВысокий
99XXX.XX.XXX.XXXXxxxxxxxx23.07.2021verifiedВысокий
100XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
101XXX.XXX.XXX.XXxxx-xxx-xxx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
102XXX.XXX.XX.XXXXxxxxxxxx02.02.2024verifiedВысокий
103XXX.XX.XXX.XXXxxxxxxxxxx.xxxxxxxxxxxxx.xxxXxxxxxxxx18.03.2024verifiedВысокий
104XXX.XXX.XX.XXxxx.xxx.xx.xx.xxxxxxx.xxxxxxxxxx.xxXxxxxxxxx02.02.2024verifiedВысокий
105XXX.XXX.XX.XXXxxxxxxxx.xxxxxxx.xxXxxxxxxxx10.10.2022verifiedВысокий
106XXX.XXX.XXX.XXxxxxxxxx12.12.2023verifiedВысокий
107XXX.XXX.XXX.Xxxxxxxxx.xx.xxxxxxxXxxxxxxxx10.10.2022verifiedВысокий
108XXX.XXX.XXX.XXxxxxx.xxxxxXxxxxxxxx17.07.2021verifiedВысокий
109XXX.X.XXX.XXXxxxxxxxx22.07.2021verifiedВысокий
110XXX.XXX.XXX.XXXxxxxxxx-xxxxx.xxXxxxxxxxx18.03.2024verifiedВысокий
111XXX.XXX.XXX.XXXXxxxxxxxx31.03.2022verifiedВысокий
112XXX.XX.XX.XXxxxxxx.xxxXxxxxxxxx10.10.2022verifiedВысокий
113XXX.XXX.XXX.XXXxxx.xx-xxx-xxx-xxx.xxXxxxxxxxx22.07.2021verifiedВысокий
114XXX.XX.XX.XXXxxxxxxxx02.02.2024verifiedВысокий

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueУязвимостиВектор доступаТипУверенность
1T1059CWE-94Argument InjectionpredictiveВысокий
2TXXXXCWE-XX, CWE-XXXxx XxxxxxxxxpredictiveВысокий
3TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveВысокий

IOA - Indicator of Attack (5)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1Fileinc/config.phppredictiveВысокий
2FileItemInfo.asppredictiveСредний
3Filexxxxxxxxx/xxxx-xxxx-xxx.xpredictiveВысокий
4ArgumentxxxxxxxxpredictiveСредний
5ArgumentxxxxxxpredictiveНизкий

Ссылки (26)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

◂ ПредыдущийОбзорДалее ▸

Do you know our Splunk app?

Download it now for free!