Tortilla Analys
IOB - Indicator of Behavior (3)
Aktiviteter
Intressera
Sårbarheter
Kampanjer (1)
These are the campaigns that can be associated with the actor:
- Microsoft Exchange
IOC - Indicator of Compromise (3)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
ID | IP-adress | Hostname | Skådespelare | Kampanjer | Identified | Typ | Förtroende |
---|---|---|---|---|---|---|---|
1 | 54.221.65.242 | ec2-54-221-65-242.compute-1.amazonaws.com | Tortilla | Microsoft Exchange | 04/11/2021 | verified | Medium |
2 | XXX.XXX.XX.XXX | xxxx.xx | Xxxxxxxx | Xxxxxxxxx Xxxxxxxx | 04/11/2021 | verified | Hög |
3 | XXX.XXX.XX.XXX | Xxxxxxxx | Xxxxxxxxx Xxxxxxxx | 04/11/2021 | verified | Hög |
TTP - Tactics, Techniques, Procedures (1)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
ID | Technique | Sårbarheter | Åtkomstvektor | Typ | Förtroende |
---|---|---|---|---|---|
1 | T1068 | CWE-269 | Execution with Unnecessary Privileges | predictive | Hög |
Referenser (2)
The following list contains external sources which discuss the actor and the associated activities: