MrBlack Analys

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Lang

en	978
ja	4
pl	4
es	4
it	4

Land

us	752
es	4
pl	2
cn	2
fr	2

Skådespelare

Mirai	2
MrBlack	2
Prophet Spider	1
BumbleBee	1
Mirai_ptea	1

Intressera

Typ

Not Defined	360
Smartphone Operating System	88
Operating System	70
Content Management System	48
Web Browser	28

Säljare

Not Defined	318
Apple	70
Google	54
Microsoft	46
Cisco	30

Produkt

Google Android	54
Apple iOS	24
Linux Kernel	18
Microsoft Windows	16
Apple Mac OS X	12

Sårbarheter

#	Sårbarhet	Base	Temp	0day	I dag	Utn	Rem	EPSS	CTI	CVE
1	Backdoor.Win32.Destrukor.20 Service Port 6969 svag autentisering	5.3	4.7	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00000	0.00
2	Facebook WhatsApp Messenger VoIP Stack minneskorruption	8.5	8.4	$25k-$100k	$5k-$25k	High	Official Fix	0.02520	0.03	CVE-2019-3568
3	ZhiCms giftcontroller.php privilegier eskalering	8.1	7.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.24	CVE-2024-0603
4	SourceCodester Contact Manager App add.php sql injektion	7.5	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00063	0.10	CVE-2023-4872
5	Apple macOS Kernel minneskorruption	7.8	7.5	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00065	0.04	CVE-2023-23504
6	Apple tvOS Kernel minneskorruption	7.8	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00065	0.00	CVE-2023-23504
7	Indexu suggest_category.php cross site scripting	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.10
8	frontaccounting faplanet kataloggenomgång	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00148	0.24	CVE-2014-125080
9	githuis P2Manage Database.cs Execute sql injektion	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00148	0.14	CVE-2015-10054
10	Events Extension events.php searchResults sql injektion	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00148	0.19	CVE-2018-25076
11	liftkit database Query.php processOrderBy sql injektion	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00141	0.00	CVE-2016-15020
12	abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb privilegier eskalering	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00137	0.13	CVE-2022-4890
13	SourceCodester Online Food Ordering System Login Module admin_class.php sql injektion	6.7	6.5	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00108	0.05	CVE-2023-0305
14	SourceCodester Online Food Ordering System Signup Module admin_class.php sql injektion	6.7	6.5	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00108	0.05	CVE-2023-0304
15	Backdoor.Win32.Destrukor.20 Service Port 6969 privilegier eskalering	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00000	0.00
16	Backdoor.Win32.Eclipse.h Service Port 6210 svag autentisering	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00000	0.00
17	Builder XtremeRAT user.info svag autentisering	3.7	3.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
18	Builder XtremeRAT privilegier eskalering	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.00
19	Backdoor.Win32.HoneyPot.a Service Port 21 svag autentisering	5.3	4.7	$0-$5k	Beräknande	Proof-of-Concept	Workaround	0.00000	0.00

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP-adress	Hostname	Skådespelare	Identified	Typ	Förtroende
1	101.33.238.116		MrBlack	18/01/2022	verified	Hög
2	119.91.92.254		MrBlack	18/01/2022	verified	Hög
3	XXX.XX.XXX.XXX		Xxxxxxx	17/11/2021	verified	Hög
4	XXX.XXX.XXX.XXX	xxxxxxx.xxx.xxxx.xxx	Xxxxxxx	16/12/2021	verified	Hög
5	XXX.XXX.XXX.XXX		Xxxxxxx	25/02/2022	verified	Hög
6	XXX.XX.XX.XXX		Xxxxxxx	19/02/2024	verified	Hög
7	XXX.XXX.XXX.XX	xxxx.xxxx.xxxxxxxxxxxxx-xxxxxxxxxxxxxxxx.xxxx	Xxxxxxx	20/12/2021	verified	Hög
8	XXX.XXX.XXX.XXX	xxx.xxxxxxxxx.xxx	Xxxxxxx	16/12/2021	verified	Hög

TTP - Tactics, Techniques, Procedures (28)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Klass	Sårbarheter	Åtkomstvektor	Typ	Förtroende
1		CAPEC-10	CWE-17, CWE-19, CWE-20, CWE-59, CWE-61, CWE-73, CWE-74, CWE-93, CWE-99, CWE-113, CWE-119, CWE-120, CWE-121, CWE-122, CWE-125, CWE-134, CWE-170, CWE-185, CWE-189, CWE-190, CWE-191, CWE-200, CWE-266, CWE-275, CWE-284, CWE-285, CWE-287, CWE-290, CWE-345, CWE-352, CWE-354, CWE-362, CWE-371, CWE-388, CWE-399, CWE-400, CWE-404, CWE-415, CWE-416, CWE-444, CWE-476, CWE-502, CWE-610, CWE-611, CWE-617, CWE-661, CWE-668, CWE-693, CWE-697, CWE-704, CWE-707, CWE-732, CWE-754, CWE-787, CWE-789, CWE-835, CWE-843, CWE-862, CWE-863, CWE-908, CWE-918	Unknown Vulnerability	predictive	Hög
2	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23	Path Traversal	predictive	Hög
3	T1040	CAPEC-114	CWE-287, CWE-294, CWE-310, CWE-319	Authentication Bypass by Capture-replay	predictive	Hög
4	T1055	CAPEC-10	CWE-74, CWE-707	Improper Neutralization of Data within XPath Expressions	predictive	Hög
5	T1059	CAPEC-10	CWE-74, CWE-94, CWE-707	Argument Injection	predictive	Hög
6	T1059.007	CAPEC-10	CWE-74, CWE-79, CWE-80, CWE-707	Cross Site Scripting	predictive	Hög
7	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Hög
8	TXXXX.XXX	CAPEC-0	CWE-XXX, CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	Hög
9	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Hög
10	TXXXX	CAPEC-10	CWE-XX, CWE-XX, CWE-XX, CWE-XXX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Hög
11	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	Hög
12	TXXXX	CAPEC-0	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Hög
13	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Hög
14	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	Hög
15	TXXXX	CAPEC-10	CWE-XX, CWE-XX, CWE-XXX	Xxx Xxxxxxxxx	predictive	Hög
16	TXXXX.XXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Hög
17	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Hög
18	TXXXX	CAPEC-37	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	Hög
19	TXXXX.XXX	CAPEC-10	CWE-XX, CWE-XXX, CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	Hög
20	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	Hög
21	TXXXX.XXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	Hög
22	TXXXX.XXX	CAPEC-114	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Hög
23	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	Hög
24	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Hög
25	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	Hög
26	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Hög
27	TXXXX.XXX	CAPEC-19	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Hög
28	TXXXX	CAPEC-0	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	Hög

IOA - Indicator of Attack (408)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Klass	Indicator	Typ	Förtroende
1	File	'phpshell.php	predictive	Hög
2	File	.backup/	predictive	Medium
3	File	.mscreenrc	predictive	Medium
4	File	/admin/edit.php	predictive	Hög
5	File	/admin/powerline	predictive	Hög
6	File	/admin/subnets/ripe-query.php	predictive	Hög
7	File	/aya/module/admin/ust_tab_e.inc.php	predictive	Hög
8	File	/cgi-bin/portal	predictive	Hög
9	File	/cgi-bin/system_mgr.cgi	predictive	Hög
10	File	/classes/Master.php?f=delete_message	predictive	Hög
11	File	/controller/pay.class.php	predictive	Hög
12	File	/forgetpassword.php	predictive	Hög
13	File	/goform/Diagnosis	predictive	Hög
14	File	/HNAP1	predictive	Låg
15	File	/index.php	predictive	Medium
16	File	/insurance/clientStatus.php	predictive	Hög
17	File	/jart/prj3/solve_direct/main.jart	predictive	Hög
18	File	/linkedcontent/listfiles.php	predictive	Hög
19	File	/module/admin_notifiers/rules.php	predictive	Hög
20	File	/rapi/read_url	predictive	Hög
21	File	/service-list	predictive	Hög
22	File	/supervisor/procesa_carga.php	predictive	Hög
23	File	/test/cookie/	predictive	Hög
24	File	/timeline2.php	predictive	Hög
25	File	/tmp/foo2zjs	predictive	Medium
26	File	/tmp/kamailio_fifo	predictive	Hög
27	File	/usr/bin/tddp	predictive	Hög
28	File	add.php	predictive	Låg
29	File	addtocart.asp	predictive	Hög
30	File	add_edit_event.php	predictive	Hög
31	File	admin.php	predictive	Medium
32	File	admin/graph_trend.php	predictive	Hög
33	File	admin/manage-comments.php	predictive	Hög
34	File	admin/moduleinterface.php	predictive	Hög
35	File	adminpanel/modules/pro/inc/ajax.php	predictive	Hög
36	File	admin\db\DoSql.php	predictive	Hög
37	File	admin_class.php	predictive	Hög
38	File	aide.php3	predictive	Medium
39	File	ajax/ph_save.php	predictive	Hög
40	File	all-offers/	predictive	Medium
41	File	ansible.cfg	predictive	Medium
42	File	Ap4EsDescriptor.cpp	predictive	Hög
43	File	app/plug/controller/giftcontroller.php	predictive	Hög
44	File	arch/arm/kernel/process.c	predictive	Hög
45	File	as2guiie.cab	predictive	Medium
46	File	xxx.xx	predictive	Låg
47	File	xxxxxxxxxx_xxxx.xxx	predictive	Hög
48	File	xxxx-xxxx.x	predictive	Medium
49	File	xxxxxxx\xxxxx\xxxx_xxxxxx.xxx	predictive	Hög
50	File	xxxxxxxxxxxxxx.xxxx	predictive	Hög
51	File	xxxx_xxxxx_xxxxx.xxx	predictive	Hög
52	File	xxxxxx_xxxxxxx.xxx	predictive	Hög
53	File	xxxxx.xxx	predictive	Medium
54	File	xxxxxx/xxxx-xxxxxx-xxxxxx.x	predictive	Hög
55	File	xxxxxx/xxxx-xxxx-xxxxxxx-xxxx.x	predictive	Hög
56	File	xxxxxxxxx.xxx	predictive	Hög
57	File	xxx-xxx/xxxx/xxxxx/xxxxxxx/xxxxxxxx/xxxxx	predictive	Hög
58	File	xxx-xxx/xxxxxxx.xxx	predictive	Hög
59	File	xxx/xxxx.xxx	predictive	Medium
60	File	xxx/xxxxxx	predictive	Medium
61	File	xxxxxx/xxxxxxxxxxxxxx.xxx?xxxxxx=x	predictive	Hög
62	File	xxxxxxxxxxx_xxxx	predictive	Hög
63	File	xxxx.x	predictive	Låg
64	File	xxxxxxx/xxxxxx.xxx	predictive	Hög
65	File	xxxxxxx/xxxxxxx.xxx	predictive	Hög
66	File	xxxxxxxxxx.xxx	predictive	Hög
67	File	xxx/xxxx.x	predictive	Medium
68	File	xxx/xxxxxxxx.x	predictive	Hög
69	File	xxxxxxx.xxx	predictive	Medium
70	File	xxxxxx/xxx.x	predictive	Medium
71	File	xxxxxx/xxx.x	predictive	Medium
72	File	xxxxxx/xxx.x	predictive	Medium
73	File	xxxxxx/xxx.x	predictive	Medium
74	File	xxxxxx.xx	predictive	Medium
75	File	xxxxxx/xxxxxxxxxxxx/xxx_xxxxxxxxx_xxxxxxxx_x_x.xx	predictive	Hög
76	File	xxxxxxxxxx.xxxx	predictive	Hög
77	File	xxxx/xxxx.xxx.xxx	predictive	Hög
78	File	xxxxxx/xxx/x_xxxxxxxx_xxxxxxxx.x	predictive	Hög
79	File	xxxxxx.xxx	predictive	Medium
80	File	xxxxx_xxxxxxx_xxxx.xxx	predictive	Hög
81	File	xxxxxxxxxxxx.xxx	predictive	Hög
82	File	xxxxxxxxxxxx.xxx	predictive	Hög
83	File	xxxx_xxxx.xxx	predictive	Hög
84	File	xxxxxx.xxx	predictive	Medium
85	File	xxx.xxx	predictive	Låg
86	File	xxxx.xxx	predictive	Medium
87	File	xxxxxxx/xxx/xxxxxxxxx/xxx-xxxxxx-xxxx.x	predictive	Hög
88	File	xxxxxxx/xxxxxx/xxxxx-xxx.x	predictive	Hög
89	File	xxxxxxx/xxx/xxx/xxx/xxxxxx_xxx/xxxxxx_xxx_xxxx.x	predictive	Hög
90	File	xxxxxxx/xxx/xxxxxxxx/xxx/xxx_xxx_xxx.x	predictive	Hög
91	File	x/xxxxx/xxxxxxxxxx.xxx	predictive	Hög
92	File	xxxxxx/xxx/xxxx.xxx	predictive	Hög
93	File	xxxx/xxxxxxxxxx/xxxxxx-xxxx.x	predictive	Hög
94	File	xxxx/xxxxxxxxxx/xxxxxx-xxx-xxx.x	predictive	Hög
95	File	xxxxxxxx.xxx	predictive	Medium
96	File	xxxx-xxxxxxx	predictive	Medium
97	File	xxxx.xxx	predictive	Medium
98	File	xxxx/xxxxx	predictive	Medium
99	File	xxxxxx.xxx	predictive	Medium
100	File	xxxxxx.xxx	predictive	Medium
101	File	xxxxx/xxxx.xxxx.xxx	predictive	Hög
102	File	xx/xxxxxxx.x	predictive	Medium
103	File	xxxxxxxxx.xxx	predictive	Hög
104	File	xxxxxxxxx_xxxxxxx.xxx	predictive	Hög
105	File	xxxxxxx.xxx	predictive	Medium
106	File	xxxxxxx_xxx.xxx.xxx	predictive	Hög
107	File	xxxxxxxxxx.xxx	predictive	Hög
108	File	xxxxxxxxxx.xxx	predictive	Hög
109	File	xxxxx/xxxxxx/xxxxxx.xx	predictive	Hög
110	File	xxxxx/xxxxxx/xxxxxx.xx	predictive	Hög
111	File	xx_xxxx.xxx	predictive	Medium
112	File	xxxxxxxxxxx.xx	predictive	Hög
113	File	xxxxxxxx/xxxx/xxxx.xx	predictive	Hög
114	File	xxxx_xxxxxx_xxxx.xxx	predictive	Hög
115	File	xxxxxxxxxx.xxxx	predictive	Hög
116	File	xxxx.xxx	predictive	Medium
117	File	xxxxxx-xxx.x	predictive	Medium
118	File	xxx/xxxxxx.xxx	predictive	Hög
119	File	xxxxxxxx/xxxxx-xxxxxxxxx.xxx	predictive	Hög
120	File	xxxxx.xxx	predictive	Medium
121	File	xxxxx.xxx	predictive	Medium
122	File	xxxxx_xx.xxx	predictive	Medium
123	File	xxxx.xxx.xxx	predictive	Medium
124	File	xxxxxx.xxx/xxxxxx.xxx	predictive	Hög
125	File	xxxxxxxx/xxx_xxxx_xxxx.x	predictive	Hög
126	File	xxxxx/xxxxxxxxxxxx/xxxxx	predictive	Hög
127	File	xxxxxxxxxx.x	predictive	Medium
128	File	xxxxxxxx/xxxx_xxxxxxx/xxxx_xxxxx_xxxxx.xxx	predictive	Hög
129	File	xxxxxxxxxxxxxxx.xxx	predictive	Hög
130	File	xxxxxxxxxx/xxxxxxxx.x	predictive	Hög
131	File	xxxxxxxxxxx/xxxxxx_x.x	predictive	Hög
132	File	xxxx/xxx/xxx/xxx_xxxx.x	predictive	Hög
133	File	xxxxxxx/xxx_xxxxxxxx.x	predictive	Hög
134	File	xxxxx.xxx	predictive	Medium
135	File	xxxxx.xxx	predictive	Medium
136	File	xxxxxxxxx-xxx.xxx	predictive	Hög
137	File	xxxxxxxxx.xxx	predictive	Hög
138	File	xxxxxxx/xxxxxxxxxx/xxxx_xxxxxxxx.xxxxxxxxx.xxx	predictive	Hög
139	File	xxxxxxx.xxx	predictive	Medium
140	File	xxxxxxx/x_xxxx.x	predictive	Hög
141	File	xxxxxx.xxx	predictive	Medium
142	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	Hög
143	File	xxx/xxxx/xxxxxxxxx.x	predictive	Hög
144	File	xxxxxxx/xxxxxxx	predictive	Hög
145	File	xxxx.xxx	predictive	Medium
146	File	xxxxxxxxxxx/xxxxxxxxxx.xxx.xxx	predictive	Hög
147	File	xxxxxx.xxxx	predictive	Medium
148	File	xxxx_xxxxx.x	predictive	Medium
149	File	xxxxxxxx.x	predictive	Medium
150	File	xxxxxxxxxxxxxxx.xxx	predictive	Hög
151	File	xxxxxxx.xxx	predictive	Medium
152	File	xxxxxxx.xxx	predictive	Medium
153	File	xxxx.xxx	predictive	Medium
154	File	xxxxxx.xxx	predictive	Medium
155	File	xxxxxx_xxxx.xxx	predictive	Hög
156	File	xxxxx.xxx	predictive	Medium
157	File	xxxxxxxxxxxx.xxx	predictive	Hög
158	File	xxxxxxxxxxxxx.xxx	predictive	Hög
159	File	xxxxxxxxxx/xxxxxxxx.xx	predictive	Hög
160	File	xxxxxxx.xxx	predictive	Medium
161	File	xxxxxx.xxx	predictive	Medium
162	File	xxxxxxxx.x	predictive	Medium
163	File	xxxx_xxxx.x/xxxxxxx_xxxxxxxx.x/xxxxxx_xxxxxxxxxxx.x	predictive	Hög
164	File	xxxx_xxxxx.x	predictive	Medium
165	File	xxxxxxxxxxxx/xxxxxxxxxxx.xxx	predictive	Hög
166	File	xxxxxxxxxxxx.xxx	predictive	Hög
167	File	xxx_xxxx.xxx.xxx	predictive	Hög
168	File	xxxxxx.xxxxx	predictive	Medium
169	File	xxxxxx.xxx	predictive	Medium
170	File	xxxxxxxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxx.xxx	predictive	Hög
171	File	xxxxxx_xxxx_xxxxxx.xxx	predictive	Hög
172	File	xxxxxxxxx.xxx	predictive	Hög
173	File	xxxxxxx.xxx	predictive	Medium
174	File	xxxx.xxx	predictive	Medium
175	File	xxxxxxxx/xxxxxxxx.xxx	predictive	Hög
176	File	xxxxxx_xxxxxxx.xxx	predictive	Hög
177	File	xx-xxx.xxx	predictive	Medium
178	File	xxx/xxxxx/xxxxx.xxx	predictive	Hög
179	File	xxxxx.xxx	predictive	Medium
180	File	xxxxx.xxx	predictive	Medium
181	File	xxxxxxxxx.xxx.xxx	predictive	Hög
182	File	xxxxxxx_xxxxxxxx.xxx	predictive	Hög
183	File	xxxx_xxxx_xxxxxx.xxx	predictive	Hög
184	File	xxxxxxxxxx.xxx	predictive	Hög
185	File	xxxxxx/xxxxxxxx/xxxx.xxx	predictive	Hög
186	File	xxxxxxxxxxx%\xx\xx.xxx	predictive	Hög
187	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	Hög
188	File	xxxxxxxx.xxx	predictive	Medium
189	File	xxxx_xxxx.x	predictive	Medium
190	File	xxxxx.xxx	predictive	Medium
191	File	xxxxx/xxxxxxxxxx.xxx	predictive	Hög
192	File	xxxxxxxxxxx.xx	predictive	Hög
193	File	xxxx.x	predictive	Låg
194	File	xxxxxxx.xxx	predictive	Medium
195	File	xxxxxx.xxx	predictive	Medium
196	File	xxx.xxx	predictive	Låg
197	File	xxxxxx.xxxxxxx.xxxxxxxxxxxxxxxxxxxxxxxx	predictive	Hög
198	File	xxxx.xxxx	predictive	Medium
199	File	xxxx/xxxx/xxxx	predictive	Hög
200	File	xxxx/xxxxxxx_xxxx.xxx	predictive	Hög
201	File	xxxxxxxxxxxxx.xx	predictive	Hög
202	File	xxxxxxxxxxx.xxx	predictive	Hög
203	File	xxxxxxxxxxx.xxx	predictive	Hög
204	File	xxxxx.xxx	predictive	Medium
205	File	xxxx/xxxxxxxxxxxx.xxx	predictive	Hög
206	File	xxxx_xx_xxxx.xxx	predictive	Hög
207	File	xxx_xxx.xxx	predictive	Medium
208	File	xxx-xxx	predictive	Låg
209	File	xxxxxx/xxxxx/xxxx_xxx.xxx	predictive	Hög
210	File	xxxxx-xxxxxx.xxx	predictive	Hög
211	File	xx-xxxxx/xxxxx.xxx	predictive	Hög
212	File	xx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxxxxxxxxxxxxx	predictive	Hög
213	File	xx-xxxxx/xxxxx.xxx?xxxx=xxxxxxx_xxxxxxxx	predictive	Hög
214	File	xx-xxxxx/xxxxxxxx/xxxxx.xxx	predictive	Hög
215	File	xx-xxxxx/xxxxx.xxx	predictive	Hög
216	File	xx-xxxxxxx/xxxxxxx/xxxxxxxxx-xxxxxxx/	predictive	Hög
217	File	xxxxxxx.xxx	predictive	Medium
218	File	xxx-xxxx/xxx-xxxx.xx	predictive	Hög
219	File	xxxx/xxx.x	predictive	Medium
220	File	\xxx\xxxxxx-xxxxxx.xxx	predictive	Hög
221	File	_xxxxxxx_xxxx_xxxx_xx_xxxxxx.xxxx.xxx	predictive	Hög
222	Library	xxxxxxxxxxxxx.xxx	predictive	Hög
223	Library	xxxxxxxxx.xxx	predictive	Hög
224	Library	xxxxxxxx.xxx	predictive	Medium
225	Library	xxx/xxxxx.xxx.xxx	predictive	Hög
226	Library	xxxx.xxx	predictive	Medium
227	Library	xxxxxxx.xxx	predictive	Medium
228	Library	xxx/xxxxxxxxxxx/xxxxxxxxxxxx/xxxxxx.xxx	predictive	Hög
229	Library	xxx/xxxxxxxxx/xxxxxxxx.xxxxx.xxx	predictive	Hög
230	Library	xxx/xxx.xx	predictive	Medium
231	Library	xxx/xxxxxxxxx/xxxx/xxxx_xxx.x	predictive	Hög
232	Library	xxx/xxxx/xxx/xxxxx.xx	predictive	Hög
233	Library	xxx_xxx_x.xxx/xxxxxxxxxxxxxx.xxx	predictive	Hög
234	Library	xxxxxx.xxx.xxxxxx.xxx	predictive	Hög
235	Library	xxx.xxx	predictive	Låg
236	Library	xxxxxxxx.xxx	predictive	Medium
237	Library	xxxxxxx.xxx	predictive	Medium
238	Library	xxxxxxxx.xxx	predictive	Medium
239	Library	xxxxxxxx.xxx	predictive	Medium
240	Library	xxx_xxxx.xxx.xxx	predictive	Hög
241	Library	xxxxxxxxx.xxx.xxx	predictive	Hög
242	Library	xxxxxxxxxxx.xxx	predictive	Hög
243	Argument	$xxxx	predictive	Låg
244	Argument	$_xxxxxx[$xxxx->_xxxxxxxx]	predictive	Hög
245	Argument	$_xxx['xxxxxxx']	predictive	Hög
246	Argument	-x	predictive	Låg
247	Argument	xxx	predictive	Låg
248	Argument	xxxxxx	predictive	Låg
249	Argument	xxx	predictive	Låg
250	Argument	xxxx	predictive	Låg
251	Argument	xxxx	predictive	Låg
252	Argument	xxxx	predictive	Låg
253	Argument	xxxxxxxx	predictive	Medium
254	Argument	xxxxxxxxxx	predictive	Medium
255	Argument	xxxxxxx_xxxx	predictive	Medium
256	Argument	xxxxxxxxxxxx	predictive	Medium
257	Argument	xxxxxx	predictive	Låg
258	Argument	xxxxxxxxxxxxx	predictive	Hög
259	Argument	xxxxxxx	predictive	Låg
260	Argument	xxxxxxxx	predictive	Medium
261	Argument	xxx_xx	predictive	Låg
262	Argument	xxx	predictive	Låg
263	Argument	xxxxxx_xxxxx	predictive	Medium
264	Argument	xxxxxxxx	predictive	Medium
265	Argument	xxxxxxxx	predictive	Medium
266	Argument	xxx	predictive	Låg
267	Argument	xxxxxxx	predictive	Låg
268	Argument	xxxxx_xxxx	predictive	Medium
269	Argument	xxx	predictive	Låg
270	Argument	xxxx	predictive	Låg
271	Argument	xxxxxx_xx	predictive	Medium
272	Argument	xxx	predictive	Låg
273	Argument	xxxx[xxxxxxxx]	predictive	Hög
274	Argument	xxxxxxx/xxxxxxxxxxx	predictive	Hög
275	Argument	xxxxxxx_xxxxxx	predictive	Hög
276	Argument	xxx_x_xxx	predictive	Medium
277	Argument	xxxx	predictive	Låg
278	Argument	xxxxxxx	predictive	Låg
279	Argument	xxxx	predictive	Låg
280	Argument	xxx_xxxxxxxxx	predictive	Hög
281	Argument	xxx	predictive	Låg
282	Argument	xxxxxxx	predictive	Låg
283	Argument	xxxxxx	predictive	Låg
284	Argument	xxxx	predictive	Låg
285	Argument	xxxxxxxx[xxxxx]/xxxx	predictive	Hög
286	Argument	xxxxxx_xxxxxx_xxxxxx	predictive	Hög
287	Argument	xxxxx	predictive	Låg
288	Argument	xxxxx	predictive	Låg
289	Argument	xxxxx/xxxxxxxxx	predictive	Hög
290	Argument	xxxxx/xxxxxx/xxxxxxxx	predictive	Hög
291	Argument	xxxxx	predictive	Låg
292	Argument	xxxxx_xxx	predictive	Medium
293	Argument	xxxxxxxxx	predictive	Medium
294	Argument	xxxxxx_xxxxxx_xxx	predictive	Hög
295	Argument	xxxx	predictive	Låg
296	Argument	xxxxxxx	predictive	Låg
297	Argument	xxxxxxxx	predictive	Medium
298	Argument	xxxxxxxxxx	predictive	Medium
299	Argument	xxxx	predictive	Låg
300	Argument	xxxxxxx_xxxxx	predictive	Hög
301	Argument	xxxxxxxx	predictive	Medium
302	Argument	xxx	predictive	Låg
303	Argument	xxxxxxx	predictive	Låg
304	Argument	xxxx	predictive	Låg
305	Argument	xxxxxxx[xx_xxx_xxxx]	predictive	Hög
306	Argument	xxxxx	predictive	Låg
307	Argument	xxxx	predictive	Låg
308	Argument	xxxx	predictive	Låg
309	Argument	xx	predictive	Låg
310	Argument	xx/xxxxxxxxxx[xxxx]	predictive	Hög
311	Argument	xxxxxxxxxxxxxxxx	predictive	Hög
312	Argument	xxxxxxxx	predictive	Medium
313	Argument	xxxxxxxxx	predictive	Medium
314	Argument	xxxxxxxx_xxx_xxxx	predictive	Hög
315	Argument	xx	predictive	Låg
316	Argument	xxxxxx	predictive	Låg
317	Argument	xxxx_xx	predictive	Låg
318	Argument	xxx	predictive	Låg
319	Argument	xxxx	predictive	Låg
320	Argument	xxxx_xxxx	predictive	Medium
321	Argument	xxxx	predictive	Låg
322	Argument	xxxxx xxxxxxx/xxxxxx xxxxxxx/xxxxxxxx xxxxxxxxxxxx	predictive	Hög
323	Argument	xx_xxx	predictive	Låg
324	Argument	xxxx xxxx/xxxx xx	predictive	Hög
325	Argument	xxxxxxxxxxx	predictive	Medium
326	Argument	xxxxxxx	predictive	Låg
327	Argument	xxxxxx[]	predictive	Medium
328	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	Hög
329	Argument	xxxxx	predictive	Låg
330	Argument	xxxxxxxxxxx	predictive	Medium
331	Argument	xxx	predictive	Låg
332	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	Hög
333	Argument	xxx_xx	predictive	Låg
334	Argument	xxxxxx	predictive	Låg
335	Argument	xxxx	predictive	Låg
336	Argument	xxxxxxx	predictive	Låg
337	Argument	xxxxxx_xxxxxxxx	predictive	Hög
338	Argument	xxxx_xx	predictive	Låg
339	Argument	xxxxxx	predictive	Låg
340	Argument	xxxxxx	predictive	Låg
341	Argument	xxxxx_xx/xxxxx	predictive	Hög
342	Argument	xxxxx_xxxxxx	predictive	Medium
343	Argument	xxxx	predictive	Låg
344	Argument	xxxxxxxx	predictive	Medium
345	Argument	xxxxxxxx	predictive	Medium
346	Argument	xxxx	predictive	Låg
347	Argument	xxxx[xx]	predictive	Medium
348	Argument	xxxx_xxxx	predictive	Medium
349	Argument	xxxxxxxxxxxxx	predictive	Hög
350	Argument	xxxxx_xxxx_xxxx	predictive	Hög
351	Argument	xxxxxxxx_xxxxx	predictive	Hög
352	Argument	xxxx-xxxxxxx	predictive	Medium
353	Argument	xxxxxx	predictive	Låg
354	Argument	xxxxxxxxx	predictive	Medium
355	Argument	xxxxxxx	predictive	Låg
356	Argument	xxxxxxx_xxxx	predictive	Medium
357	Argument	x_xxxx_xx	predictive	Medium
358	Argument	xxxxxxxxxxx	predictive	Medium
359	Argument	xxxxxxxx	predictive	Medium
360	Argument	xxxxxxxx	predictive	Medium
361	Argument	xxxxxx	predictive	Låg
362	Argument	xxxxxxxxxx	predictive	Medium
363	Argument	xxxxxx	predictive	Låg
364	Argument	xxxxxxxxx	predictive	Medium
365	Argument	xxxxxxx	predictive	Låg
366	Argument	xxx_xxx	predictive	Låg
367	Argument	xxxxxxx	predictive	Låg
368	Argument	xxxx xxxx	predictive	Medium
369	Argument	xx_xxxxxx_xxxxx	predictive	Hög
370	Argument	xxxx	predictive	Låg
371	Argument	xxxxxxxxx	predictive	Medium
372	Argument	xxxxxxxxxx	predictive	Medium
373	Argument	xxx	predictive	Låg
374	Argument	xxxxxxxxxxxxxxxxxxxxxxxx	predictive	Hög
375	Argument	xxxx_xxxxx	predictive	Medium
376	Argument	xxxxxxxxxxxxxx	predictive	Hög
377	Argument	xxx	predictive	Låg
378	Argument	xxxx	predictive	Låg
379	Argument	xxxx	predictive	Låg
380	Argument	xxxxxxxx	predictive	Medium
381	Argument	xxxxxxxxxx	predictive	Medium
382	Argument	xxxxxxx	predictive	Låg
383	Argument	xxxxx/xxxxxxxxxxx	predictive	Hög
384	Argument	xxxx	predictive	Låg
385	Argument	xxx_xxx	predictive	Låg
386	Argument	xxxxxxxxxx_xx	predictive	Hög
387	Argument	xxxxxx[xxxxxx]	predictive	Hög
388	Argument	xxx	predictive	Låg
389	Argument	xxxxxxxxxxxxx	predictive	Hög
390	Argument	xxxx	predictive	Låg
391	Argument	xxx	predictive	Låg
392	Argument	xxxxxx	predictive	Låg
393	Argument	xxxxxxxx	predictive	Medium
394	Argument	xxxx	predictive	Låg
395	Argument	xxxxx/xxx/xxx	predictive	Hög
396	Argument	xxxxx_x_xxxxxxxxx_xxxx	predictive	Hög
397	Argument	xxx_xxxxxxxxxx	predictive	Hög
398	Argument	_xxxxxxxx_xx	predictive	Medium
399	Input Value	#!	predictive	Låg
400	Input Value	xxxxxxxxxxxxxxxx	predictive	Hög
401	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	Hög
402	Input Value	xxxxxxx'</xxxxxx><xxxx xxxxxx=xxxxx(xxxxxxxx.xxxxxx)>	predictive	Hög
403	Input Value	xxx%xx(xxxxxx*xxxx(xxxxxx(xxxxx(x)))x)	predictive	Hög
404	Input Value	xxx/xxxxxxx	predictive	Medium
405	Pattern	xxxx /x	predictive	Låg
406	Pattern	xx-xxxxxxxx/xxxx.xxx	predictive	Hög
407	Network Port	xxx/xxxxx	predictive	Medium
408	Network Port	xxx/xxx (xxxx)	predictive	Hög

Referenser (1)

The following list contains external sources which discuss the actor and the associated activities:

https://github.com/vuldb/cyber_threat_intelligence/tree/main/actors/MrBlack

Samples (7)

The following list contains associated samples:

◂ TidigareÖversiktNästa ▸

Do you know our Splunk app?

Download it now for free!