Invicta Stealer 分析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (283)

语言

en	240
ja	10
zh	10
ar	6
it	6

国家/地区

us	284

演员

Cobalt Strike	1
DCRat	1
Hook	1
Rhadamanthys	1
Ave Maria	1

利益

类型

Not Defined	76
Content Management System	22
Forum Software	6
Survey Software	4
Programming Language Software	4

供应商

Not Defined	54
SourceCodester	6
Esoftpro	4
Oracle	4
HP	4

产品

SourceCodester Inventory Management System	4
Esoftpro Online Guestbook Pro	4
SQuery	4
WordPress	4
HP Integrated Lights-Out	4

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	5.42
2	esoftpro Online Guestbook Pro ogp_show.php SQL注入	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00135	0.20	CVE-2010-4996
3	Esoftpro Online Guestbook Pro ogp_show.php 跨网站脚本	4.3	4.2	$0-$5k	$0-$5k	High	Unavailable	0.00209	0.04	CVE-2009-2441
4	Squitosoft Squito Gallery photolist.inc.php 内存损坏	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01371	0.04	CVE-2005-2258
5	Esoftpro Online Guestbook Pro ogp_show.php 跨网站脚本	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00101	0.08	CVE-2009-2448
6	Esoftpro Online Guestbook Pro ogp_show.php 跨网站脚本	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00129	0.06	CVE-2009-2447
7	HP Integrated Lights-Out 信息公开	9.8	8.5	$5k-$25k	$0-$5k	Unproven	Official Fix	0.02286	0.00	CVE-2012-3271
8	htmltonuke htmltonuke.php 权限升级	7.3	6.7	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.01849	0.04	CVE-2006-0308
9	Storytlr 跨网站脚本	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00129	0.03	CVE-2014-100037
10	WordPress AdServe adclick.php SQL注入	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00073	0.07	CVE-2008-0507
11	Appindex MWChat start_lobby.php 权限升级	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.01895	0.00	CVE-2005-1869
12	Cisco BroadWorks Application Delivery Platform Single Sign-On Remote Code Execution	9.9	9.7	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00143	0.00	CVE-2023-20238
13	Zentrack index.php 权限升级	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.03
14	Jetbox One CMS 内存损坏	5.9	5.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01999	0.05	CVE-2004-1448
15	Mambo Artlinks component artlinks.dispnew.php 权限升级	8.1	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01742	0.03	CVE-2006-3949
16	xoops Xoopsgallery Module mod_gallery SQL注入	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.01520	0.08	CVE-2008-0138
17	MosXML mod_mainmenu.php 权限升级	7.3	6.4	$0-$5k	$0-$5k	Unproven	Unavailable	0.00441	0.01	CVE-2008-5206
18	SourceCodester Best Courier Management System Manage Account Page 跨网站脚本	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00050	0.00	CVE-2023-5302
19	Comersus Open Technologies Comersus Cart comersus_optreviewreadexec.asp SQL注入	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00308	0.03	CVE-2007-3323
20	UBB.threads login.php 跨网站脚本	3.5	3.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.02

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP地址	Hostname	参与者	活动	Identified	类型	可信度
1	94.156.253.17		Invicta Stealer		2024-04-03	verified	高

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	高
2	T1059	CWE-94	Argument Injection	predictive	高
3	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	高
4	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
5	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
6	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
7	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
8	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
9	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
11	TXXXX	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
12	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (169)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/admin/list_addr_fwresource_ip.php	predictive	高
2	File	/DXR.axd	predictive	中
3	File	/forum/away.php	predictive	高
4	File	/importexport.php	predictive	高
5	File	/log/decodmail.php	predictive	高
6	File	/multi-vendor-shopping-script/product-list.php	predictive	高
7	File	/see_more_details.php	predictive	高
8	File	/servlet/webacc	predictive	高
9	File	/SysManage/AddUpdateRole.aspx	predictive	高
10	File	/textpattern/index.php	predictive	高
11	File	adclick.php	predictive	中
12	File	adDetail.asp	predictive	中
13	File	admin.a6mambocredits.php	predictive	高
14	File	admin.cropcanvas.php	predictive	高
15	File	admin/theme-edit.php	predictive	高
16	File	adminBanned.php	predictive	高
17	File	adminBoards.php	predictive	高
18	File	adminForums.php	predictive	高
19	File	allopass-error.php	predictive	高
20	File	allopass.php	predictive	中
21	File	announce.php	predictive	中
22	File	app/ajax/search_sell_paymen_report.php	predictive	高
23	File	xxxxxxxx.xxxxxxx.xxx	predictive	高
24	File	xxx.xxx	predictive	低
25	File	xxxx_xxxxxxxx.xxx	predictive	高
26	File	xx_xxxx.xxx	predictive	中
27	File	xxxx_xxxxxxxx/xx.xxx	predictive	高
28	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	高
29	File	xxxxx.xxx	predictive	中
30	File	xxxxxxxx.xx	predictive	中
31	File	xxxxxxxx.xxx.xxx	predictive	高
32	File	xxxx_xxxxxxx.xxx	predictive	高
33	File	xxx/xxxx/xxx_xxxx.x	predictive	高
34	File	xxxxxxxxxxx.xxxxx.xxx	predictive	高
35	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
36	File	xxxxxxxx.xxxx.xxx	predictive	高
37	File	xxxxxxxxxxxx_xxxx.xxx	predictive	高
38	File	xxxx_xxxxxxx.xxx.xxx	predictive	高
39	File	xxxxxxxxxx.xxx	predictive	高
40	File	xxxx.xxx.xxx	predictive	中
41	File	xxxxxxxxxx.xxx	predictive	高
42	File	xxxxx_xxxxxx.xxx	predictive	高
43	File	xxxxxxxxx.xxx	predictive	高
44	File	xxx/xxxxxx.xxx	predictive	高
45	File	xxxxxxx.xxx	predictive	中
46	File	xxxxxxx/xxxxx/xxxxxxx.x	predictive	高
47	File	xxxxxxxx/xxxx.xxx	predictive	高
48	File	xxxxxxxx/xxxxxxxxxxxx.xxx.xxx	predictive	高
49	File	xxxxx.xxx	predictive	中
50	File	xxxxxx.xxx	predictive	中
51	File	xxxxxxx.xxx	predictive	中
52	File	xxxxxx/xxxx/xxxxxx_xxx.xxx	predictive	高
53	File	xxxxxxxx.xxx.xxx	predictive	高
54	File	xxxxx.xxx	predictive	中
55	File	xxx_xxxxxxxx.xxx	predictive	高
56	File	xxxxx-x.x	predictive	中
57	File	xxxxxxxx.xxx	predictive	中
58	File	xxxxxxx/xxx_xxxxxxxx.xxx	predictive	高
59	File	xxx_xxxxxxx.xxx	predictive	高
60	File	xxx_xxxxxxx_xxxx.xxx	predictive	高
61	File	xxx_xxxxxxx_xxxxxxxxxxx.xxx	predictive	高
62	File	xxx_xxxxxxx_xxxxxxxxxx.xxx	predictive	高
63	File	xxxx.xxx	predictive	中
64	File	xxx_xxxx.xxx	predictive	中
65	File	xxxxxxxxx.xxx.xxx	predictive	高
66	File	xxxxxx.xxxxx.xxx	predictive	高
67	File	xxxx.xxx	predictive	中
68	File	xxxxxxx.xxxxxxx.xxxxxx.xxx	predictive	高
69	File	xxx.xxx	predictive	低
70	File	xxxxxxx_xxxxxx_xxxxxxxx.xxx	predictive	高
71	File	xxxxxx_xxx_xxxxxx.xxx	predictive	高
72	File	xxxx.xxx	predictive	中
73	File	xxxxxxxxxxxxxxx.xxx	predictive	高
74	File	xxxxxxxx.xxx/xxxxxx.xxx/xxxxxxxx.xxx	predictive	高
75	File	xxxx_xxxxxxxx.xxx/xxxx_xxxx.xxx	predictive	高
76	File	xxxxx/xxxxxxxx/xxxxxxxxx.xxx	predictive	高
77	File	xx_xxxx.xxx	predictive	中
78	File	xxxxx_xxxx.xxx	predictive	高
79	File	xxxxx_xxxxx.xxx	predictive	高
80	File	xxxxxxxxxxxxx.xxx	predictive	高
81	File	xxxxx/xxxx_xxxxxx_xxxxxx.xxx	predictive	高
82	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	高
83	File	xxxx.xxx	predictive	中
84	File	xxxxxxxxx.xxx	predictive	高
85	File	xxxx_xxxxxxx_xxxx.xxx	predictive	高
86	File	xxxx/xxxx-x-xxxxxx.x	predictive	高
87	File	xx-xxxxx.xxx	predictive	中
88	File	xx-xxxxxxxxx.xxx	predictive	高
89	File	xxxxxxxxxxxx.xxx	predictive	高
90	File	_xxxxxxxxx.xxx	predictive	高
91	Library	xxx.xxx/xxxxxxx.xxxxxxx/xxxx.xxx/xxxxxxx.xxxxxxx.xxxxxx.xxx	predictive	高
92	Library	xxxxxx[xxxxxx_xxxx	predictive	高
93	Library	xxxxxxx/xxx.xxx.xxx.xxx	predictive	高
94	Library	xxxx.xxx.xxx	predictive	中
95	Argument	xxxxx	predictive	低
96	Argument	xxxxxxxx_xxxx	predictive	高
97	Argument	xxxxxxxx	predictive	中
98	Argument	xxxx_xxx	predictive	中
99	Argument	xxxxx	predictive	低
100	Argument	xxxx	predictive	低
101	Argument	xxx	predictive	低
102	Argument	xxx_xx	predictive	低
103	Argument	xxxxxxx[x][xxxx]	predictive	高
104	Argument	xxxxxx	predictive	低
105	Argument	xxxxxxxxxx	predictive	中
106	Argument	xxxxxx[xxxxxx_xxxx]	predictive	高
107	Argument	xxxxxxxxxxxx	predictive	中
108	Argument	xxxxxxxx	predictive	中
109	Argument	xxxxxxxx	predictive	中
110	Argument	xxxxxxxx	predictive	中
111	Argument	xxxxxxx	predictive	低
112	Argument	xxxxxx_xxxx	predictive	中
113	Argument	xxxxx	predictive	低
114	Argument	xxxxx_xxxx_xxxx	predictive	高
115	Argument	xxxxx	predictive	低
116	Argument	xxxxxxxxx	predictive	中
117	Argument	xx_xxxxxxx	predictive	中
118	Argument	xxxx	predictive	低
119	Argument	xxxxxxx	predictive	低
120	Argument	xxxxx xxxx	predictive	中
121	Argument	xxxxxxx_xxxxxxx	predictive	高
122	Argument	xxxxxxxxxxxxxx[xxxxxxxxxxxxxxxxxx]	predictive	高
123	Argument	xxxx[xxxxxxx]	predictive	高
124	Argument	xxxxxxxx	predictive	中
125	Argument	xxxx	predictive	低
126	Argument	xx	predictive	低
127	Argument	xxxxxxxxx	predictive	中
128	Argument	xxxxx_xxx	predictive	中
129	Argument	xxxx	predictive	低
130	Argument	xxxxxxx	predictive	低
131	Argument	xxx_xxxx_xxxx	predictive	高
132	Argument	xxx	predictive	低
133	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	高
134	Argument	xxxxxxxxx_xxxx_xxxx	predictive	高
135	Argument	xxxxxxx_xxxx	predictive	中
136	Argument	xxxxx_xxx	predictive	中
137	Argument	xxxxxx_xxxxxx[xxxxxx_xxxx]	predictive	高
138	Argument	xxxx	predictive	低
139	Argument	xxxxxx	predictive	低
140	Argument	xxxx_xxxx	predictive	中
141	Argument	xxxxxxxxx	predictive	中
142	Argument	xxxxx_xxxx_xxx	predictive	高
143	Argument	xxxxx_xxxx_xxxx	predictive	高
144	Argument	xxxxxxx_xxx	predictive	中
145	Argument	xx	predictive	低
146	Argument	xxxxxxxxxx[x]	predictive	高
147	Argument	xx_xxxx	predictive	低
148	Argument	xxxxxx	predictive	低
149	Argument	xxxxx	predictive	低
150	Argument	xxxxxxxxxx	predictive	中
151	Argument	xxxxxxx	predictive	低
152	Argument	xxxx_xxxx	predictive	中
153	Argument	xxx	predictive	低
154	Argument	xxxxxx	predictive	低
155	Argument	xxxxxx_xxxxxx	predictive	高
156	Argument	xxx_xxxxx	predictive	中
157	Argument	xxxx_xxxx	predictive	中
158	Argument	xxx	predictive	低
159	Argument	xx_xx	predictive	低
160	Argument	xxxxxxxx_xxx	predictive	中
161	Argument	xxx_xxxxxxxxxxxx	predictive	高
162	Argument	xxxxxxxxxx	predictive	中
163	Argument	xx_xx	predictive	低
164	Argument	xxxxxxxxxxx	predictive	中
165	Argument	_xxxx[_xxx_xxxx_xxxx	predictive	高
166	Input Value	xxxx	predictive	低
167	Input Value	xxxxxx	predictive	低
168	Input Value	\xxx../../../../xxx/xxxxxx	predictive	高
169	Network Port	xxx xxxxxx xxxx	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!