East Asia Unknown Анализ

IOB - Indicator of Behavior (2)

Временная шкала

Язык

en2

Страна

Акторы

Деятельность

Интерес

Временная шкала

Тип

Поставщик

Продукт

Microsoft IIS2

Уязвимости

IOC - Indicator of Compromise (7)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
152.84.186.239server-52-84-186-239.cdg50.r.cloudfront.netEast Asia Unknown08.04.2022verifiedВысокий
261.106.60.47East Asia Unknown08.04.2022verifiedВысокий
3XXX.XX.XXX.XXXXxxx Xxxx Xxxxxxx08.04.2022verifiedВысокий
4XXX.XX.XXX.XXXxxx Xxxx Xxxxxxx08.04.2022verifiedВысокий
5XXX.XXX.XXX.XXXXxxx Xxxx Xxxxxxx08.04.2022verifiedВысокий
6XXX.XXX.XX.XXXxxxxxxxx.xxxxxxxxxxxxxx.xxxXxxx Xxxx Xxxxxxx08.04.2022verifiedВысокий
7XXX.XX.XXX.XXXXxxx Xxxx Xxxxxxx08.04.2022verifiedВысокий

TTP - Tactics, Techniques, Procedures (2)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueКлассУязвимостиВектор доступаТипУверенность
1T1059.007CAPEC-209CWE-79Cross Site ScriptingpredictiveВысокий
2TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveВысокий

IOA - Indicator of Attack (3)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1File/uncpath/predictiveСредний
2Filexxxxxx_xxxx.xxxpredictiveВысокий
3ArgumentxxpredictiveНизкий

Ссылки (2)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!