Sint Maarten Unknown Анализ

IOB - Indicator of Behavior (16)

Временная шкала

Язык

en16

Страна

Акторы

Деятельность

Интерес

Временная шкала

Тип

Поставщик

Продукт

Microsoft Windows4
SMC D3G0804W2
Green Packet DX-3502
Samsung Smart Phone2
Cisco IOS XR2

Уязвимости

#УязвимостиBaseTemp0dayСегодняЭ�RemEPSSCTICVE
1tcpdf File Upload эскалация привилегий7.47.1$0-$5k$0-$5kNot DefinedOfficial Fix0.001540.03CVE-2017-6100
2Mozilla Thunderbird повреждение памяти6.36.0$25k-$100k$0-$5kNot DefinedOfficial Fix0.001150.00CVE-2022-2505
3Microsoft Windows Clipboard User Service Privilege Escalation7.26.5$25k-$100k$5k-$25kUnprovenOfficial Fix0.000430.08CVE-2022-21869
4Samsung Smart Phone FACM Application эскалация привилегий4.94.8$0-$5k$0-$5kNot DefinedOfficial Fix0.000440.04CVE-2022-39855
5Oracle Java SE JSSE неизвестная уязвимость7.47.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.001110.06CVE-2023-21930
6Microsoft Windows MSHTML Remote Code Execution8.87.9$100k и многое другое$5k-$25kProof-of-ConceptOfficial Fix0.968740.02CVE-2021-40444
7Microsoft Windows Multimedia Library winmm.dll повреждение памяти10.09.5$100k и многое другое$0-$5kHighOfficial Fix0.972810.04CVE-2012-0003
8Cisco IOS XR IPsec Packet Processor отказ в обслуживании5.65.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.001510.00CVE-2020-3190
9SMC D3G0804W WiFi Network Configuration Page межсайтовый скриптинг4.14.1$0-$5k$0-$5kNot DefinedNot Defined0.000580.00CVE-2020-7249
10Green Packet DX-350 слабая аутентификация8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.006590.00CVE-2017-9932
11WordPress Thumbnail эскалация привилегий7.57.5$5k-$25k$5k-$25kNot DefinedNot Defined0.009900.03CVE-2018-1000773
12HP Integrated Lights-Out IPMI Protocol эскалация привилегий8.28.0$5k-$25k$0-$5kHighWorkaround0.271960.02CVE-2013-4786
13PHP glob обход каталога7.36.4$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.008730.02CVE-2007-4663

IOC - Indicator of Compromise (58)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-адресHostnameАкторКампанииIdentifiedТипУверенность
145.12.70.212trolleybus.globalhilive.comSint Maarten Unknown11.01.2023verifiedВысокий
245.12.71.212Sint Maarten Unknown11.01.2023verifiedВысокий
346.36.202.40Sint Maarten Unknown11.01.2023verifiedВысокий
446.36.203.36Sint Maarten Unknown11.01.2023verifiedВысокий
546.36.203.40Sint Maarten Unknown11.01.2023verifiedВысокий
665.198.230.0Sint Maarten Unknown26.05.2023verifiedВысокий
765.217.50.0Sint Maarten Unknown26.05.2023verifiedВысокий
865.248.160.0Sint Maarten Unknown26.05.2023verifiedВысокий
972.252.8.0Sint Maarten Unknown11.01.2023verifiedВысокий
10131.161.84.0ip-131-161-084-000.v4.isp.telem.sxSint Maarten Unknown11.01.2023verifiedВысокий
11168.0.84.0168-000-084-000.xdsl.telemgroup.sxSint Maarten Unknown11.01.2023verifiedВысокий
12168.197.108.0Sint Maarten Unknown11.01.2023verifiedВысокий
13XXX.X.XX.XXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
14XXX.X.XXX.XXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
15XXX.XXX.X.Xxxx-x-x-xxx-xxx.xxxxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
16XXX.XXX.XX.Xxxx-x-x.xxx-xxx.xxxx.xxxx.xxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
17XXX.XXX.XXX.XXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
18XXX.XXX.XX.XXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
19XXX.XXX.XX.Xxxxx-xxxxxxxx.xxxxx-xxxxxxx.xxXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
20XXX.XX.XXX.XXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
21XXX.XX.XX.XXXXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
22XXX.XX.XXX.XXXXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
23XXX.X.XX.XXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
24XXX.X.XX.XXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
25XXX.XX.XXX.Xxxxx.xxxx.xxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
26XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx11.01.2023verifiedВысокий
27XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
28XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
29XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
30XXX.XXX.X.XXXxxxxx-xxx-x-xxx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
31XXX.XXX.X.XXXxxxxx-xxx-x-xxx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
32XXX.XXX.X.XXXxxxxx-xxx-x-xxx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
33XXX.XXX.X.XXXxxxxx-xxx-x-xxx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
34XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx21.03.2023verifiedВысокий
35XXX.XXX.X.XXxx-x-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
36XXX.XXX.X.XXxx-x-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
37XXX.XXX.X.XXxx-x-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
38XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
39XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
40XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
41XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
42XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
43XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
44XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
45XXX.XXX.X.XXXxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
46XXX.XXX.X.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
47XXX.XXX.XX.Xxxxx-xxx-xx-x.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
48XXX.XXX.XX.Xxxxxx-xxx-xx-x.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx21.03.2023verifiedВысокий
49XXX.XXX.XX.XXXxxxx-xx-xxx.xxxxxxxxxx.xxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
50XXX.XXX.XX.XXXxxxx-xx-xxx.xxxxxxxxxx.xxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
51XXX.XXX.XX.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx21.03.2023verifiedВысокий
52XXX.XXX.XX.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx21.03.2023verifiedВысокий
53XXX.XXX.XX.XXxxxxx-xxx-xx-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
54XXX.XXX.XX.XXxxxxx-xxx-xx-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
55XXX.XXX.XX.XXxxxxx-xxx-xx-xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
56XXX.XXX.XX.XXXxxxxx-xxx-xx-xxx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
57XXX.XXX.XX.Xxx-xxx-xxx-xxx-xxx.xx.xxxxxxxx.xxxXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий
58XXX.XX.XX.XXxxx Xxxxxxx Xxxxxxx26.05.2023verifiedВысокий

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueУязвимостиВектор доступаТипУверенность
1T1006CWE-22Path TraversalpredictiveВысокий
2TXXXX.XXXCWE-XXXxxxx Xxxx XxxxxxxxxpredictiveВысокий
3TXXXXCWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveВысокий
4TXXXX.XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveВысокий
5TXXXXCWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveВысокий

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDКлассIndicatorТипУверенность
1Librarywinmm.dllpredictiveСредний
2ArgumentxxxxpredictiveНизкий

Ссылки (4)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!