T9000 Analys

IOB - Indicator of Behavior (12)

Tidslinje

Lang

en8
zh2
es2

Land

us10
cn2

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

Public Warehouse Light Blog2
Trango ApexLynx2
Trango ApexOrion2
Trango GigaLynx2
Trango GigaOrion2

Sårbarheter

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
1198.55.120.143198.55.120.143.static.quadranet.comT900023/12/2020verifiedHög

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlassSårbarheterÅtkomstvektorTypFörtroende
1T1006CAPEC-126CWE-22Path TraversalpredictiveHög
2T1059CAPEC-242CWE-94Argument InjectionpredictiveHög
3TXXXX.XXXCAPEC-18CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveHög
4TXXXXCAPEC-122CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
5TXXXX.XXXCAPEC-191CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHög
6TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög

IOA - Indicator of Attack (7)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1Fileadd_comment.phppredictiveHög
2Filedata/gbconfiguration.datpredictiveHög
3Filexxx/xxxxxx.xxxpredictiveHög
4Filexxxx/xxxxxxxx.xxxpredictiveHög
5ArgumentxxxxxxxxpredictiveMedium
6ArgumentxxpredictiveLåg
7Argument_xxxxxx[xxxx_xxxx]predictiveHög

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!