Mettle Analys

IOB - Indicator of Behavior (27)

Tidslinje

Lang

en28

Land

us22
vn6

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

Dnsmasq6
Microsoft Windows2
nginx2
Google Android2
pfSense2

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1Dnsmasq extract_name minneskorruption5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.001440.02CVE-2021-45954
2TP-LINK TL-WR841N Firmware kataloggenomgång7.57.5$0-$5k$0-$5kHighNot Defined0.029520.04CVE-2012-5687
3devise-two-factor informationsgivning5.45.4$0-$5k$0-$5kNot DefinedNot Defined0.000430.02CVE-2024-0227
4pfSense diag_command.php csrf_callback förfalskning på begäran över webbplatsen6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.001800.00CVE-2019-16667
5Apache Superset REST API Get Endpoint privilegier eskalering5.85.8$5k-$25k$5k-$25kNot DefinedNot Defined0.002700.04CVE-2022-45438
6WordPress Scheduled Task wp-cron.php förnekande av tjänsten6.56.5$5k-$25k$0-$5kNot DefinedNot Defined0.000960.02CVE-2023-22622
7Dnsmasq fuzz_rfc1035.c resize_packet minneskorruption5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.001440.02CVE-2021-45955
8Dnsmasq print_mac minneskorruption5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.001440.03CVE-2021-45956
9Dnsmasq rfc1035.c extract_name minneskorruption7.77.3$0-$5k$0-$5kNot DefinedOfficial Fix0.108720.03CVE-2020-25682
10Dnsmasq fuzz_rfc1035.c answer_request minneskorruption5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.001440.04CVE-2021-45957
11PHP FPM SAPI minneskorruption8.07.7$25k-$100k$0-$5kNot DefinedOfficial Fix0.001480.04CVE-2021-21703
12Magento Deserialization privilegier eskalering8.08.0$0-$5k$0-$5kNot DefinedNot Defined0.005870.00CVE-2020-3716
13Magento sql injektion8.58.4$0-$5k$0-$5kNot DefinedOfficial Fix0.005820.03CVE-2019-7139
14Google Android file_input_stream.cc Read minneskorruption7.57.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.001050.00CVE-2019-2105
15Google Android TQS App memscpy minneskorruption8.58.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.001870.00CVE-2015-9173
16nginx HTTP/2 förnekande av tjänsten6.06.0$0-$5k$0-$5kNot DefinedOfficial Fix0.029740.02CVE-2018-16844
17Moodle Installation informationsgivning5.35.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.001870.03CVE-2012-4403
18NoneCms App.php privilegier eskalering8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.966780.02CVE-2018-20062
19Creolabs Gravity gravity_lexer.c minneskorruption8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.003310.00CVE-2017-1000172
20Squid Proxy HTTP Request svag autentisering8.78.1$5k-$25k$0-$5kUnprovenOfficial Fix0.528680.03CVE-2016-4553

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
1118.70.80.143Mettle12/02/2022verifiedHög
2XXX.XXX.XX.XXXXxxxxx12/02/2022verifiedHög

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSårbarheterÅtkomstvektorTypFörtroende
1T1006CWE-22Path TraversalpredictiveHög
2T1059.007CWE-80Cross Site ScriptingpredictiveHög
3TXXXXCWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
4TXXXX.XXXCWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHög
5TXXXXCWE-XXXxx XxxxxxxxxpredictiveHög
6TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög

IOA - Indicator of Attack (11)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1Filediag_command.phppredictiveHög
2Filefile_input_stream.ccpredictiveHög
3Filexxxx_xxxxxxx.xpredictiveHög
4Filexxxxxxx_xxxxx.xpredictiveHög
5Filexxxxxxx.xpredictiveMedium
6Filexxxxxxxx/xxxxxxxxpredictiveHög
7Filexx-xxxx.xxxpredictiveMedium
8Libraryxxxxxxxx/xxxxxxx/xxxxx/xxx.xxxpredictiveHög
9Argumentxxxxxxxx_xxpredictiveMedium
10ArgumentxxxxxxpredictiveLåg
11Argumentxxxxxxxxxx/xxxxxxxxxxxxxxxpredictiveHög

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!