Duqu Анализ

IOB - Indicator of Behavior (1)

Язык

en2

Страна

Акторы

Деятельность

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
1182.253.220.29jtrustnet.comDuqu27.03.2022verifiedВысокий
2XXX.XXX.XX.XXXxxxxxxxx.xxxxxxxxxxxx.xxx.xxXxxx27.03.2022verifiedВысокий

TTP - Tactics, Techniques, Procedures (1)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueКлассУязвимостиВектор доступаТипУверенность
1T1505CAPEC-10CWE-74, CWE-89, CWE-707SQL InjectionpredictiveВысокий

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1Filecomersus_optaffiliateregistrationexec.asppredictiveВысокий
2ArgumentxxxxxxxxxpredictiveСредний

Ссылки (2)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!