URLZone Analys

IOB - Indicator of Behavior (16)

Tidslinje

Lang

en14
de2

Land

us14

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

JForum2
TP-LINK TL-WR740N2
Huawei HarmonyOS2
Server2
GNU wget2

Sårbarheter

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
135.188.197.118118.197.188.35.bc.googleusercontent.comURLZone10/03/2022verifiedMedium
2XX.XX.XX.XXXXxxxxxx10/03/2022verifiedHög
3XX.XX.XXX.XXXXxxxxxx10/03/2022verifiedHög
4XX.XX.XX.XXXXxxxxxx10/03/2022verifiedHög
5XXX.XXX.XX.XXXXxxxxxx10/03/2022verifiedHög

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlassSårbarheterÅtkomstvektorTypFörtroende
1T1068CAPEC-122CWE-269Execution with Unnecessary PrivilegespredictiveHög
2TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveHög
3TXXXXCAPEC-116CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög

IOA - Indicator of Attack (6)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1Filedata/gbconfiguration.datpredictiveHög
2Fileinc/filebrowser/browser.phppredictiveHög
3Filexxxxx.xxxpredictiveMedium
4ArgumentxxxxxxxxxxxxxpredictiveHög
5ArgumentxxxxpredictiveLåg
6ArgumentxxxxxxxxxxpredictiveMedium

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!