DragonOK Анализ

IOB - Indicator of Behavior (4)

Временная шкала

Язык

en4

Страна

Акторы

Деятельность

Интерес

Временная шкала

Тип

Поставщик

Продукт

Dameng DM Database Server2
Microsoft Word2
Microsoft Office2
Microsoft Outlook2

Уязвимости

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
123.229.234.160ip-23-229-234-160.ip.secureserver.netDragonOK27.03.2022verifiedВысокий
258.64.156.140DragonOK27.03.2022verifiedВысокий
3XX.XXX.XXX.XXXXxxxxxxx01.01.2021verifiedВысокий
4XX.XXX.XXX.XXXxxxxxxx01.01.2021verifiedВысокий
5XXX.XX.XXX.XXXxxxxxxx27.03.2022verifiedВысокий
6XXX.XX.XXX.XXXxxxxxxx27.03.2022verifiedВысокий
7XXX.XXX.XXX.XXXXxxxxxxx01.01.2021verifiedВысокий
8XXX.XX.XXX.XXXXxxxxxxx01.01.2021verifiedВысокий

TTP - Tactics, Techniques, Procedures (2)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueУязвимостиВектор доступаТипУверенность
1T1059.007CWE-80Cross Site ScriptingpredictiveВысокий
2TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveВысокий

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1Librarywdm_dll.dllpredictiveСредний
2ArgumentxxxxxxxxpredictiveСредний

Ссылки (3)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!