FatalRAT Analys

IOB - Indicator of Behavior (6)

Tidslinje

Lang

en6

Land

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

IBM WebSphere Application Server2
Ruijie EG2
Western Digital My Cloud2
Western Digital My Cloud Mirror Gen22
Western Digital My Cloud EX2 Ultra2

Sårbarheter

IOC - Indicator of Compromise (12)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSårbarheterÅtkomstvektorTypFörtroende
1T1068CWE-264Execution with Unnecessary PrivilegespredictiveHög
2TXXXXCWE-XXXxx XxxxxxxxxpredictiveHög
3TXXXX.XXXCWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHög

IOA - Indicator of Attack (3)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1Filejson_reader.cpppredictiveHög
2Filexxx/xxxxxx/xxxxxxxx/xxxxxxxxx.xxxpredictiveHög
3Argumentxxxxxxxxxx_xxxxpredictiveHög

Referenser (4)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!