Triton Analys

IOB - Indicator of Behavior (11)

Tidslinje

Lang

en12

Land

ru12

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

SquirrelMail2
vsftpd2
Microsoft Windows2
Peplink Balance2
Cisco ASA2

Sårbarheter

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
187.245.143.140Triton22/12/2020verifiedHög

TTP - Tactics, Techniques, Procedures (4)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueSårbarheterÅtkomstvektorTypFörtroende
1T1059.007CWE-79Cross Site ScriptingpredictiveHög
2TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
3TXXXXCWE-XXXxx XxxxxxxxxpredictiveHög
4TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög

IOA - Indicator of Attack (8)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/+CSCOE+/logon.htmlpredictiveHög
2Filecgi-bin/MANGA/admin.cgipredictiveHög
3Filexxxxx.xxxpredictiveMedium
4Filexxxxxxx.xxxpredictiveMedium
5ArgumentxxxxxpredictiveLåg
6ArgumentxxxpredictiveLåg
7Input Value::$xxxxx_xxxxxxxxxxpredictiveHög
8Network Portxxx xxxxxx xxxxpredictiveHög

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!