EvilGnome Анализ

IOB - Indicator of Behavior (49)

Временная шкала

Язык

en48
es2

Страна

ru46
us4

Акторы

Деятельность

Интерес

Временная шкала

Тип

Поставщик

Продукт

Oracle MySQL Server2
Signiant Manager+Agents2
SUSE Linux Enterprise Server2
SUSE Manager Server2
Joomla CMS2

Уязвимости

#УязвимостиBaseTemp0dayСегодняЭ�RemEPSSCTICVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash раскрытие информации5.35.2$5k-$25kРасчетHighWorkaround0.020160.00CVE-2007-1192
2Veritas NetBackup bpcd эскалация привилегий8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.004700.00CVE-2015-6550
3cnoa OA слабая аутентификация7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000910.06CVE-2023-2799
4SUSE Linux Enterprise Server/Manager Server rmt-server-regsharing Service эскалация привилегий8.38.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000420.04CVE-2022-31254
5Signiant Manager+Agents XML External Entity5.55.3$0-$5k$0-$5kNot DefinedOfficial Fix0.002210.04CVE-2021-46660
6Philips Engage Software эскалация привилегий2.92.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2021-23173
7b2evolution CMS User Login sql-инъекция8.07.9$0-$5k$0-$5kNot DefinedNot Defined0.002040.00CVE-2021-31632
8WordPress Sandbox flashmediaelement.swf Cross-Domain эскалация привилегий6.05.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.000810.00CVE-2016-9263
9Oracle MySQL Server Encryption раскрытие информации5.35.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.001730.00CVE-2019-2923
10Notepad++ Scintilla SciLexer.dll эскалация привилегий7.06.9$0-$5k$0-$5kNot DefinedOfficial Fix0.005980.03CVE-2019-16294
11Omron CX-One CX-Programmer Password Storage раскрытие информации5.95.7$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.04CVE-2015-0988
12Dahuasecurity Dvr5408 Authorization эскалация привилегий9.89.8$0-$5k$0-$5kNot DefinedNot Defined0.003200.00CVE-2013-5754
13Dahua IP Camera/IP PTZ Temporary Password слабое шифрование7.47.4$0-$5k$0-$5kNot DefinedNot Defined0.006010.04CVE-2017-9315
14Mailman эскалация привилегий6.56.3$0-$5k$0-$5kNot DefinedOfficial Fix0.001600.00CVE-2018-13796
15WordPress pluggable.php wp_validate_redirect Redirect8.07.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.006500.03CVE-2016-2221
16Axesstel MU553S ConfigSet неизвестная уязвимость6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000710.00CVE-2017-11350
17Microsoft Office Remote Code Execution7.06.9$5k-$25k$0-$5kHighOfficial Fix0.421710.03CVE-2017-0262
18Google Chrome URI эскалация привилегий5.44.9$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.002880.00CVE-2012-4906
19Joomla CMS sql-инъекция7.36.9$5k-$25k$0-$5kProof-of-ConceptNot Defined0.002640.00CVE-2013-1453
20Joomla CMS Password Reset эскалация привилегий7.37.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.002070.00CVE-2012-1598

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
1195.62.52.10152-101.static.ipcserver.netEvilGnome12.02.2024verifiedВысокий

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueКлассУязвимостиВектор доступаТипУверенность
1T1068CAPEC-19CWE-264, CWE-284Execution with Unnecessary PrivilegespredictiveВысокий
2T1078.001CWE-259Use of Hard-coded PasswordpredictiveВысокий
3TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveВысокий
4TXXXXCAPEC-1CWE-XXXXxxxxxxxxx XxxxxxpredictiveВысокий
5TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveВысокий
6TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveВысокий
7TXXXXCAPEC-CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveВысокий

IOA - Indicator of Attack (8)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1File/index.php?app=main&func=passport&action=loginpredictiveВысокий
2Filecgi-bin/ConfigSetpredictiveВысокий
3Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveВысокий
4Filexxxxxxxxxxxxxxxxx.xxxpredictiveВысокий
5Filexx-xxxxxxxx/xxxxxxxxx.xxxpredictiveВысокий
6Libraryxxxxxxxx.xxxpredictiveСредний
7ArgumentxxxxxxxxxxxxpredictiveСредний
8ArgumentxxxxxxxxxpredictiveСредний

Ссылки (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!