Autoit Analys

IOB - Indicator of Behavior (476)

Tidslinje

Lang

en446
ar10
es8
zh4
jp4

Land

us54
io52
de44
la10
cn4

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

Linux Kernel10
Google Android8
Adobe Acrobat Reader6
WordPress6
Mozilla Firefox6

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash informationsgivning5.35.2$5k-$25k$0-$5kHighWorkaround0.020.02016CVE-2007-1192
2SmarterTools SmarterMail kataloggenomgång6.46.1$0-$5k$0-$5kNot DefinedOfficial Fix0.040.00062CVE-2019-7213
3Cisco IOS XE IP SLA Responder privilegier eskalering6.96.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00159CVE-2020-3422
4Gempar Script Toko Online shop_display_products.php sql injektion7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00100CVE-2009-0296
5Google Android NFC informationsgivning3.83.6$25k-$100k$0-$5kNot DefinedOfficial Fix0.000.00069CVE-2020-0281
6Huawei AR3200 SCTP Message minneskorruption6.46.4$5k-$25k$5k-$25kNot DefinedNot Defined0.030.00209CVE-2017-15344
7Nextcloud Desktop Client privilegier eskalering5.45.4$0-$5k$0-$5kNot DefinedNot Defined0.000.00051CVE-2020-8140
8unrar minneskorruption8.57.7$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.020.02417CVE-2012-6706
9QNAP QTS Video Station cross site scripting3.73.7$0-$5k$0-$5kNot DefinedNot Defined0.000.00066CVE-2019-7184
10Forma LMS ajax.server.php sql injektion7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00091CVE-2019-5111
11shadowsocks-libev ss-manager svag autentisering7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00072CVE-2019-5164
12shadowsocks-libev UDPRelay svag autentisering5.85.8$0-$5k$0-$5kNot DefinedNot Defined0.000.00125CVE-2019-5163
13AccuSoft ImageGear igcore19d.dll minneskorruption8.68.6$0-$5k$0-$5kNot DefinedNot Defined0.000.00974CVE-2019-5133
14AccuSoft ImageGear GEM Raster Parser igcore19d.dll minneskorruption8.68.6$0-$5k$0-$5kNot DefinedNot Defined0.000.00972CVE-2019-5132
15Forma LMS ajax.server.php sql injektion7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00091CVE-2019-5112
16Cameron Hamilton-Rich axTLS TLS Handshake tls1.c process_certificate minneskorruption7.47.4$0-$5k$0-$5kNot DefinedNot Defined0.060.03059CVE-2019-9689
17Autodesk FBX Software Development Kit FBX File minneskorruption7.07.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00085CVE-2019-7366
18Autodesk Desktop Application DLL Loader privilegier eskalering6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000.00072CVE-2019-7365
19OpenResty ngx.req.get_post_args sql injektion8.58.2$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00637CVE-2018-9230
20PRTG Network Monitor login.htm privilegier eskalering8.58.2$0-$5k$0-$5kNot DefinedOfficial Fix0.040.00288CVE-2018-19410

IOC - Indicator of Compromise (42)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
15.206.225.104hosted-by.blazingfast.ioAutoit12/04/2022verifiedHög
28.248.165.254Autoit18/09/2021verifiedHög
38.249.217.254Autoit18/09/2021verifiedHög
48.253.131.121Autoit18/09/2021verifiedHög
513.56.128.67screenconnect.medsphere.comAutoit18/09/2021verifiedHög
623.3.13.88a23-3-13-88.deploy.static.akamaitechnologies.comAutoit07/08/2021verifiedHög
723.3.13.154a23-3-13-154.deploy.static.akamaitechnologies.comAutoit07/08/2021verifiedHög
823.63.245.19a23-63-245-19.deploy.static.akamaitechnologies.comAutoit18/09/2021verifiedHög
923.63.245.50a23-63-245-50.deploy.static.akamaitechnologies.comAutoit18/09/2021verifiedHög
10XX.XXX.XX.XXXxxx-xxx-xx-xxx.xxxxxx.xxxxxx.xxxxxxxxxxxxxxxxxx.xxxXxxxxx18/09/2021verifiedHög
11XX.XXX.XX.XXxx.xx.xxx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxx03/09/2021verifiedMedium
12XX.XX.XXX.XXXXxxxxx26/03/2022verifiedHög
13XX.XXX.XXX.XXXxxxxxxxxx.xxxXxxxxx12/04/2022verifiedHög
14XX.XX.XX.XXXXxxxxx07/08/2021verifiedHög
15XX.XXX.XXX.Xxxxxxx.xxxxxxxxxxx.xxXxxxxx12/04/2022verifiedHög
16XXX.XX.X.XXXXxxxxx18/09/2021verifiedHög
17XXX.XX.X.XXXXxxxxx18/09/2021verifiedHög
18XXX.XX.X.XXXXxxxxx18/09/2021verifiedHög
19XXX.XX.XX.XXXXxxxxx18/09/2021verifiedHög
20XXX.XX.XX.XXXXxxxxx07/08/2021verifiedHög
21XXX.XX.XX.XXXXxxxxx07/08/2021verifiedHög
22XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx-xxxx.xxxxxxxxxxxx.xxxXxxxxx12/04/2022verifiedHög
23XXX.XXX.XX.XXxxxxx.xxxxxxx.xxXxxxxx07/08/2021verifiedHög
24XXX.XX.XX.XXXXxxxxx26/03/2022verifiedHög
25XXX.XXX.X.XXXXxxxxx18/09/2021verifiedHög
26XXX.XX.XXX.XXXxxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xxXxxxxx18/09/2021verifiedHög
27XXX.XXX.XX.XXXXxxxxx18/09/2021verifiedHög
28XXX.XX.XX.XXXxxxxx07/08/2021verifiedHög
29XXX.XX.XXX.XXXxxxxx18/09/2021verifiedHög
30XXX.XX.XXX.XXXXxxxxx18/09/2021verifiedHög
31XXX.XX.XXX.XXXXxxxxx18/09/2021verifiedHög
32XXX.XXX.XXX.XXXxxx.xxx.xxx.xxx.xxxxxx.xxxxxxxxx.xxxXxxxxx12/04/2022verifiedHög
33XXX.XX.XXX.XXXxxxxx01/04/2022verifiedHög
34XXX.XX.XXX.XXXXxxxxx01/04/2022verifiedHög
35XXX.X.XXX.XXxxxxxxx.xxxx.xxxXxxxxx01/04/2022verifiedHög
36XXX.XX.XXX.XXxxxx.xxxxxxxxxxx.xxxXxxxxx07/08/2021verifiedHög
37XXX.XXX.XXX.XXxxxxx.xxxxxxxxxx.xxXxxxxx07/08/2021verifiedHög
38XXX.XXX.XX.XXxxx.xxxxxXxxxxx18/09/2021verifiedHög
39XXX.XX.XXX.XXXXxxxxx04/05/2022verifiedHög
40XXX.XXX.XXX.XXxxxx.xxxxx.xxxXxxxxx07/08/2021verifiedHög
41XXX.XXX.XX.XXxxxxxxx-xxx.xxxxxx.xxxXxxxxx18/09/2021verifiedHög
42XXX.XXX.XXX.XXXXxxxxx12/04/2022verifiedHög

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSårbarheterÅtkomstvektorTypFörtroende
1T1006CWE-21, CWE-22, CWE-23Path TraversalpredictiveHög
2T1040CWE-319Authentication Bypass by Capture-replaypredictiveHög
3T1055CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveHög
4T1059CWE-88, CWE-94Argument InjectionpredictiveHög
5T1059.007CWE-79, CWE-80Cross Site ScriptingpredictiveHög
6TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
7TXXXX.XXXCWE-XXXXxx Xx Xxxx-xxxxx XxxxxxxxpredictiveHög
8TXXXX.XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHög
9TXXXXCWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHög
10TXXXX.XXXCWE-XXXXxxx XxxxxxxxpredictiveHög
11TXXXXCWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveHög
12TXXXXCWE-XXXxx XxxxxxxxxpredictiveHög
13TXXXX.XXXCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveHög
14TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveHög
15TXXXXCWE-XXXXxxxxxxxx Xxxxxxx Xx Xxxxxxxxx XxxxxxxxxxxpredictiveHög
16TXXXXCWE-XXXXxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxxpredictiveHög
17TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxxxx XxxxpredictiveHög
18TXXXX.XXXCWE-XXXXxxxxxxx Xxxxxx XxxxpredictiveHög
19TXXXX.XXXCWE-XXX, CWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
20TXXXX.XXXCWE-XXXXxxxxxxxpredictiveHög
21TXXXXCWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög
22TXXXXCWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHög
23TXXXX.XXXCWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveHög
24TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHög
25TXXXXCWE-XXXXxxxxxxxxxx XxxxxxpredictiveHög

IOA - Indicator of Attack (194)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/appLms/ajax.server.phppredictiveHög
2File/apps/predictiveLåg
3File/etc/shadowpredictiveMedium
4File/mgmt/tm/util/bashpredictiveHög
5File/ofrs/admin/?page=reportspredictiveHög
6File/onlineordering/GPST/store/initiateorder.phppredictiveHög
7File/products/details.asppredictiveHög
8File/public/login.htmpredictiveHög
9File/RPC2predictiveLåg
10File/ruppredictiveLåg
11File/secure/QueryComponent!Default.jspapredictiveHög
12File/var/hnap/timestamppredictiveHög
13FileAddons/file/mod.file.phppredictiveHög
14Fileadmin-ajax.phppredictiveHög
15Fileadmin.color.phppredictiveHög
16Fileadmin.phppredictiveMedium
17Fileadmin/admin_login.phppredictiveHög
18Fileadmin/index.php?page=manage_carpredictiveHög
19Fileadmin/media.phppredictiveHög
20Fileadmin_events.phppredictiveHög
21Fileaffich.phppredictiveMedium
22FileAp4StscAtom.cpppredictiveHög
23Filexxxxxxxxxxx.xxxpredictiveHög
24Filexxxxxxxxxxx.xxxpredictiveHög
25Filexxx/xxxxxxxx.xxx?xxxxxx=xxxxxxxx_xxxxxx&xxxxxx=xxxxxxxxxxxxxpredictiveHög
26Filexxx\xxxxxxxx\xxxxxxx_xxxx.xxxpredictiveHög
27Filexxxxx_xxxx.xpredictiveMedium
28Filexxxx-xxxx.xpredictiveMedium
29Filexxxx.xxxpredictiveMedium
30Filexxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxpredictiveHög
31Filexxxxxxxxxx(/xxx/xxxxx/xxxxxxxxxx/xxxxxxxxx)predictiveHög
32Filexxx_xxxx.xxpredictiveMedium
33Filexxx-xxx/xxxx-xxxpredictiveHög
34Filexxxxxxxxxxxxxxxx.xxxxpredictiveHög
35Filexxxxx.xxxxx.xxxpredictiveHög
36Filexxxxx.xxxxxxxx.xxxpredictiveHög
37Filexxx.xxxpredictiveLåg
38Filexxxxxxxx.xxxpredictiveMedium
39Filexxxxxxxxxx/xxxxxxxxxxx/xxxxx.xxxxxxxxxxx.xxxpredictiveHög
40Filexxxxxx.xxx.xxxpredictiveHög
41Filexxxxxxxxx.xxxpredictiveHög
42Filexxxx/xxxxxxxxxxxxxxxxxx.xxxpredictiveHög
43Filexxxx/xxxxxxxxxxx.xpredictiveHög
44Filexxxx/xxxxxxx/xxxxxx_xxxxxxx_xx.xxpredictiveHög
45Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHög
46Filexxx.xxxpredictiveLåg
47Filexxxxxx.xxxpredictiveMedium
48Filexxxxxxxxx.xxxpredictiveHög
49Filexxxxxxxxxxxxxxx.xxxpredictiveHög
50Filexxxxxxxxxxxxxx.xxxpredictiveHög
51Filexxxxxxx/xxx/xxx/xxxxxxx/xxxxxxx_xxxxx.xpredictiveHög
52Filexxxxxxx/xxxxxxxxxx/xx/xxxx_xx/xx_xxxxx.xpredictiveHög
53Filexxxxxxx/xxx/xxxx/xxxxx.xpredictiveHög
54Filexxxxxxxxxxx/xxxxxpredictiveHög
55Filexxxx/xxxxxxxxxx/xxxx/xxx/xxxxxx-xxx-xxxxxxxx.xpredictiveHög
56Filexxxxxx.xxxpredictiveMedium
57Filexx/xxxxx/xxxxxxx.xpredictiveHög
58Filexx/xxxx/xxxxxxxx.xpredictiveHög
59Filexxxxxxxxxxxx_xxxx.xxxpredictiveHög
60Filexxxxxx/xxxxxxxxxxxxxpredictiveHög
61Filexxxx.xxxpredictiveMedium
62Filexxxxxx.xxxpredictiveMedium
63Filexxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xxpredictiveHög
64Filexx/xxxxx/xxx.xpredictiveHög
65Filexxxxxxxxx.xxxpredictiveHög
66Filexxx/xxxxxx.xxxpredictiveHög
67Filexxxxxxxx/xxxxx_xxxxxxxx.xxxpredictiveHög
68Filexxxxxxxx/xxxxxxxxx_xxx_xxxx.xxxpredictiveHög
69Filexxxxx.xxxpredictiveMedium
70Filexxxxxxxx/xxxxx_xxxxxx.xxxpredictiveHög
71Filexxxxx.xxxxxxx.xxxpredictiveHög
72Filexxxx_xxxx.xxxpredictiveHög
73Filexxxxx.xpredictiveLåg
74Filexxxxxxxxx/xxxxxxx/xxxxx.xxxpredictiveHög
75Filexxx_xxxx.xxpredictiveMedium
76Filexxxx.xxxpredictiveMedium
77Filexxxxxxxx/xxxx_xxxxxx/xxxx_xxxxx_xxxxx.xxxpredictiveHög
78Filexxxx/xxx/xxx.xpredictiveHög
79Filexxxxxxxxx/xxxxxxxx.xxxpredictiveHög
80Filexxxxx.xxxpredictiveMedium
81Filexxxxxx.xxxpredictiveMedium
82Filexx/xxx.xpredictiveMedium
83Filexxx_xxxxx.xxxpredictiveHög
84Filexxxxxxx_xxxxxxx/xxxxxxx/xxxxx_xxxxxxxxx.xxxpredictiveHög
85Filexxxxxxxx.xxxxxpredictiveHög
86FilexxxpredictiveLåg
87Filexxxxxxx.xxx.xxxpredictiveHög
88FilexxxxpredictiveLåg
89Filexxxx.xxxpredictiveMedium
90Filexxxxxxx/xxxxx/xxxxxxx/xxxxxx.xxxpredictiveHög
91Filexxx.xpredictiveLåg
92Filexxxx.xxxpredictiveMedium
93Filexxxxxxx.xxxxxx.xxxpredictiveHög
94Filexxxxxx/xxxxx/xxxx/xxxxxxx.xxxxpredictiveHög
95Filexxxxxx.xxxxpredictiveMedium
96Filexxxx-xxxxx.xpredictiveMedium
97Filexxxxxx_xxx_xxxxxx.xpredictiveHög
98Filexxxx.xxxpredictiveMedium
99Filexxxxxxx.xxxpredictiveMedium
100Filexxxxxx_xxxx.xxxpredictiveHög
101Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHög
102Filexxxxxxxxxxxx.xxxpredictiveHög
103Filexxxxx.xxxpredictiveMedium
104Filexxxxxxxxxx.xxxpredictiveHög
105Filexxx/xxxxxxxxxxpredictiveHög
106Filexxxxx.xpredictiveLåg
107Filexxxxxxxxxxxxxxxx.xxxpredictiveHög
108Filexxxx.xpredictiveLåg
109Filexxxx_xxxxx.xpredictiveMedium
110Filexxxxx.xxxpredictiveMedium
111Filexxxx.xxxpredictiveMedium
112Filexxxxxxxxxxxx.xxxpredictiveHög
113Filexxxxxxx.xxxpredictiveMedium
114FilexxxxxxxpredictiveLåg
115Filexxxxxxx/xxxxxxxxxxxxxxxxxxxx.xxxpredictiveHög
116Filexx-xxxxxxxxx.xxxpredictiveHög
117File_xxxx_/xxxxxxx/xxxxxxpredictiveHög
118Libraryxxxxxxxx.xxxpredictiveMedium
119Libraryxxxxxx_xxx[xxx_xxxpredictiveHög
120Libraryxxxxxxxx.xxxpredictiveMedium
121Libraryxxxxxxxxx.xxxpredictiveHög
122Libraryxxxxxxx.xxxpredictiveMedium
123Libraryxxx/xxxxxxxxxx/xxxxx/xxxxxx.xxxpredictiveHög
124Libraryxxxxxxxx.xxxpredictiveMedium
125Argumentxxx_xxxx_xxxxxpredictiveHög
126ArgumentxxxxxxxpredictiveLåg
127ArgumentxxxxxpredictiveLåg
128ArgumentxxxpredictiveLåg
129ArgumentxxxxpredictiveLåg
130ArgumentxxxxxxxxpredictiveMedium
131ArgumentxxxxxxxxpredictiveMedium
132ArgumentxxxpredictiveLåg
133ArgumentxxxxxpredictiveLåg
134Argumentxxx_xxpredictiveLåg
135ArgumentxxxpredictiveLåg
136ArgumentxxxxxxxxxxxxxxxxxxxxxxpredictiveHög
137ArgumentxxxpredictiveLåg
138Argumentxxxx_xxpredictiveLåg
139Argumentxxxxxx_xxx[xxx_xxx]predictiveHög
140Argumentxxxx/xxxxpredictiveMedium
141ArgumentxxxxpredictiveLåg
142ArgumentxxxxxxxpredictiveLåg
143ArgumentxxxxxxxpredictiveLåg
144ArgumentxxxxxxpredictiveLåg
145Argumentxxxx_xxxxxx_xxxxxxxxxpredictiveHög
146ArgumentxxxxxxxxxxpredictiveMedium
147Argumentxxxxxx_xxxpredictiveMedium
148Argumentxxxxxx_xxxxxxpredictiveHög
149ArgumentxxxxxxxpredictiveLåg
150ArgumentxxxxxxxxpredictiveMedium
151Argumentxxxxx_xxpredictiveMedium
152Argumentxxxx_xxxxpredictiveMedium
153Argumentxxxx_xxxxxxpredictiveMedium
154ArgumentxxpredictiveLåg
155ArgumentxxxxxxxxxxpredictiveMedium
156ArgumentxxxxxpredictiveLåg
157Argumentxxxx_xxpredictiveLåg
158ArgumentxxxxpredictiveLåg
159Argumentxxxx_xxxxpredictiveMedium
160ArgumentxxxxxxxxpredictiveMedium
161Argumentxxx_xxxxxxx_xxxpredictiveHög
162Argumentxxxxx_xxxx/xxxxx_xxxxxxxpredictiveHög
163ArgumentxxxxxxpredictiveLåg
164Argumentxxxxxxxxx_xxxx_xxxxpredictiveHög
165Argumentxxx_xxxxx_xxxxpredictiveHög
166ArgumentxxpredictiveLåg
167Argumentxxxxxxxxxxxx xxxxpredictiveHög
168ArgumentxxxxpredictiveLåg
169ArgumentxxxxxxpredictiveLåg
170ArgumentxxxxxxxxpredictiveMedium
171Argumentxxxx_xx_xx_xxxpredictiveHög
172ArgumentxxxxpredictiveLåg
173Argumentxxxxx_xxxx_xxxxpredictiveHög
174Argumentxxxxxxx_xxpredictiveMedium
175ArgumentxxxpredictiveLåg
176Argumentxxxxx_xxxxxxpredictiveMedium
177Argumentxxxxxx xxxxxxxxpredictiveHög
178ArgumentxxxxxxxxxpredictiveMedium
179ArgumentxxxxxxxxxxxxpredictiveMedium
180Argumentxxxxxx_xxxx_xxxxpredictiveHög
181Argumentxxxxxx/xxxxx/xxxxxx/xxxxxxx/xxxxxxxxxpredictiveHög
182Argumentxxxxxxx_xxpredictiveMedium
183Argumentxxxx/xxxxxx/xxxxxpredictiveHög
184Argumentxxx_xxxxxxxpredictiveMedium
185Argumentxxxx_xxxxxpredictiveMedium
186ArgumentxxxxxxxxxxpredictiveMedium
187ArgumentxxxxxxxxxxxxpredictiveMedium
188Argumentxx_xxpredictiveLåg
189ArgumentxxxpredictiveLåg
190Argumentxxxxxxxxxxx/xxxxx_xxxxxpredictiveHög
191Argumentxxxxxx_xxxxpredictiveMedium
192ArgumentxxxpredictiveLåg
193Network Portxx xxxxxxx xxx.xx.xx.xxpredictiveHög
194Network Portxxx/xxxxxpredictiveMedium

Referenser (9)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!