Hotcroissant Analys

IOB - Indicator of Behavior (11)

Tidslinje

Lang

en10
ru2

Land

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

Microsoft Windows2
Thomas R. Pasawicz HyperBook Guestbook2
MDaemon Webmail2
Python2
Yokogawa CENTUM CS 30002

Sårbarheter

Kampanjer (1)

These are the campaigns that can be associated with the actor:

  • Hotcroissant

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
194.177.123.138LazarusHotcroissant17/12/2020verifiedHög

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSårbarheterÅtkomstvektorTypFörtroende
1T1059.007CWE-79Cross Site ScriptingpredictiveHög
2TXXXXCWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
3TXXXXCWE-XXXxx XxxxxxxxxpredictiveHög
4TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög

IOA - Indicator of Attack (9)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/MIME/INBOX-MM-1/predictiveHög
2Filecoders/dpx.cpredictiveMedium
3Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHög
4Filexxxxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxxpredictiveHög
5Filexxxxx.xxxpredictiveMedium
6Filexxxxxxxx/xxxxxxxxpredictiveHög
7ArgumentxxpredictiveLåg
8ArgumentxxxxxpredictiveLåg
9Argumentx-xxxx-xxxxxpredictiveMedium

Referenser (3)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!