OriginLogger 分析
IOB - Indicator of Behavior (3)
活动
利益
漏洞
IOC - Indicator of Compromise (5)
These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.
| ID | IP地址 | Hostname | 参与者 | 活动 | Identified | 类型 | 可信度 |
|---|---|---|---|---|---|---|---|
| 1 | 23.106.223.46 | OriginLogger | 2022-09-20 | verified | 高 | ||
| 2 | XX.XXX.XXX.XX | Xxxxxxxxxxxx | 2022-09-20 | verified | 高 | ||
| 3 | XX.XXX.XXX.XX | Xxxxxxxxxxxx | 2022-09-20 | verified | 高 | ||
| 4 | XX.XXX.XXX.XX | Xxxxxxxxxxxx | 2022-09-20 | verified | 高 | ||
| 5 | XXX.XX.XXX.XX | xxxx.xxxxxxxxxxxxxx.xxx | Xxxxxxxxxxxx | 2022-09-20 | verified | 高 |
TTP - Tactics, Techniques, Procedures (2)
Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.
| ID | Technique | 分类 | 漏洞 | 访问向量 | 类型 | 可信度 |
|---|---|---|---|---|---|---|
| 1 | CAPEC-111 | CWE-352, CWE-384, CWE-862, CWE-863 | Unknown Vulnerability | predictive | 高 | |
| 2 | TXXXX.XXX | CAPEC-10 | CWE-XX, CWE-XX, CWE-XXX | Xxxxx Xxxx Xxxxxxxxx | predictive | 高 |
参考 (2)
The following list contains external sources which discuss the actor and the associated activities: