Rakos 分析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (397)

语言

en	316
ru	32
fr	10
zh	10
de	8

国家/地区

us	204
ru	66
cn	18
me	12
gb	8

演员

Rakos	10
Cobalt Strike	6
Locky	6
TrickBot	4
NjRAT	3

利益

类型

Not Defined	162
Content Management System	20
Programming Language Software	14
Database Administration Software	10
Bug Tracking Software	8

供应商

Not Defined	114
Microsoft	10
Apache	8
HP	8
SourceCodester	6

产品

WordPress	10
phpMyAdmin	10
unrar-free	6
Devilz Clanportal	6
Apache Tomcat	4

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 信息公开	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php 权限升级	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.15	CVE-2010-0966
3	Zyxel NAS326/NAS542 Web Server 权限升级	9.8	9.8	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00068	0.04	CVE-2023-4473
4	nginx 权限升级	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	4.87	CVE-2020-12440
5	Microsoft IIS 跨网站脚本	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.09	CVE-2017-0055
6	DZCP deV!L`z Clanportal browser.php 信息公开	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02733	0.84	CVE-2007-1167
7	MikroTik RouterOS Winbox/HTTP Interface 权限升级	7.8	7.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00055	0.03	CVE-2023-30799
8	Laravel Framework Token Encrypter.php decrypt 权限升级	6.8	6.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.62418	0.03	CVE-2018-15133
9	Linux Kernel fbcon vt.c KD_FONT_OP_COPY 信息公开	5.0	4.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00042	0.00	CVE-2020-28974
10	Devilz Clanportal File Upload 未知漏洞	5.3	4.4	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.05362	0.06	CVE-2006-6338
11	Devilz Clanportal index.php SQL注入	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00784	0.00	CVE-2006-3347
12	Microsoft IIS IP/Domain Restriction 权限升级	6.5	5.7	$25k-$100k	$0-$5k	Unproven	Official Fix	0.00817	0.03	CVE-2014-4078
13	WordPress WP_Query class-wp-query.php SQL注入	8.5	8.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00318	0.02	CVE-2017-5611
14	SourceCodester Petrol Pump Management Software product.php 权限升级	4.7	4.5	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.00	CVE-2024-2058
15	CKFinder File Name 权限升级	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00155	0.04	CVE-2019-15862
16	Elementor Plugin 权限升级	5.5	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.04	CVE-2024-24934
17	guzzlehttp psr7 Header Parser 权限升级	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00095	0.01	CVE-2022-24775
18	DrayTek Vigor 2960 Web Management Interface mainfunction.cgi 权限升级	7.4	7.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00273	0.13	CVE-2023-1162
19	BeCustom Plugin 跨网站请求伪造	6.5	6.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00122	0.04	CVE-2022-3747
20	Cisco IOS XE Web UI Remote Code Execution	9.9	9.7	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.89428	0.03	CVE-2023-20198

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP地址	Hostname	参与者	Identified	类型	可信度
1	5.34.180.64	vds-merkyl-88517.itldc-customer.net	Rakos	2021-05-31	verified	高
2	5.34.183.231	vds-454576.hosted-by-itldc.com	Rakos	2021-05-31	verified	高
3	46.8.44.55		Rakos	2021-05-31	verified	高
4	XXX.XX.XX.XX	xxx.xxxxxxx.xxx	Xxxxx	2021-05-31	verified	高
5	XXX.XX.XX.XX	xxxxxxx-xxxxxx.xxxxxx-xx.xxxxx.xxx	Xxxxx	2021-05-31	verified	高
6	XXX.XX.XXX.XXX	xxx.xx.xxx.xxx.xxxxxxxxx-xxx	Xxxxx	2021-05-31	verified	高
7	XXX.XX.XXX.XXX	xxxxx-xxxxxxxxxxxxxxxx-xxxxxx.xxxxxx-xx-xxxxx.xxx	Xxxxx	2021-05-31	verified	高
8	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxx-xxx	Xxxxx	2021-05-31	verified	高
9	XXX.XXX.XXX.XXX	xxxxxxxxxxx.xxxxxx.xxx	Xxxxx	2021-05-31	verified	高
10	XXX.XX.XXX.XX	xxxxxxx.xxx	Xxxxx	2021-05-31	verified	高
11	XXX.XX.XXX.XX	xx.xxxxx-xxxxxxxx.xxx	Xxxxx	2021-05-31	verified	高

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	高
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	T1059	CWE-94	Argument Injection	predictive	高
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
6	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
7	TXXXX	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	高
8	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
9	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
10	TXXXX.XXX	CWE-XXX	Xxxx Xxxxxxxx	predictive	高
11	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	高
12	TXXXX	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
14	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	高
16	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
17	TXXXX.XXX	CWE-XX	Xxxxxxxxxxxxx	predictive	高
18	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	高
19	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
20	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (208)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	//proc/kcore	predictive	中
2	File	/addWhiteListDomain.imss	predictive	高
3	File	/admin/app/product.php	predictive	高
4	File	/anony/mjpg.cgi	predictive	高
5	File	/cgi-bin/wlogin.cgi	predictive	高
6	File	/cobbler-api	predictive	中
7	File	/customer_support/index.php	predictive	高
8	File	/forum/away.php	predictive	高
9	File	/inc/parser/xhtml.php	predictive	高
10	File	/include/makecvs.php	predictive	高
11	File	/index.php	predictive	中
12	File	/login/index.php	predictive	高
13	File	/preview.php	predictive	中
14	File	/protocol/index.php	predictive	高
15	File	/requests.php	predictive	高
16	File	/search-result.php	predictive	高
17	File	/secret_coder.sql	predictive	高
18	File	/shop.php	predictive	中
19	File	/uncpath/	predictive	中
20	File	/view_order.php	predictive	高
21	File	/wp-admin/admin.php?page=wp_file_manager_properties	predictive	高
22	File	add.php	predictive	低
23	File	adminer.php	predictive	中
24	File	adm_config_report.php	predictive	高
25	File	xxxxx.xxx	predictive	中
26	File	xxx/xx-xxxxx-xxxxxxx/xxx-xx-xxxxx-xxxxxxx.xxx	predictive	高
27	File	xxxx-xxxx.x	predictive	中
28	File	xxx.xxx	predictive	低
29	File	xxxxx.xxxxxxxxx.xxx	predictive	高
30	File	xxxxxxxxxx.xxx	predictive	高
31	File	xxxxxxxxx.xxx	predictive	高
32	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
33	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	高
34	File	xxxxxx/xx/xx_xxxxx.x	predictive	高
35	File	xxxx:x.x/xx:x/xx:x/xx:x/xx:x/x:x/x:x/x:x/x:x	predictive	高
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
37	File	xxxxxxx.xxx	predictive	中
38	File	xxxxxx.xxx	predictive	中
39	File	xxxx_xxxx.xxx	predictive	高
40	File	xxxxxxx/xxx/xxxxxxxx/xx.x	predictive	高
41	File	xxxxxxx/xxx/xx/xx.x	predictive	高
42	File	xxxxxxxxxxxx.xxx	predictive	高
43	File	xxxx.xxx	predictive	中
44	File	xxxxx.xxx	predictive	中
45	File	xxxxxxxx_xxx_xxx_xxxx.xxx	predictive	高
46	File	xxxxxx.xxx	predictive	中
47	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
48	File	xxxxxxxxxxxx.xxx	predictive	高
49	File	xxxxxxxxxx.xxx	predictive	高
50	File	xxxxxxxxx.xxx	predictive	高
51	File	xxxx.xxx	predictive	中
52	File	xxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxx	predictive	高
53	File	xx_xxxxxxx.x	predictive	中
54	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	高
55	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxx.xxx	predictive	高
56	File	xxxxxxx/xxxxxxxxx/xxxxxxxxxxxxx.xxx	predictive	高
57	File	xxxxxxxxxx.xx/xxx-xxxxx.xxx	predictive	高
58	File	xxx/xxxxxx.xxx	predictive	高
59	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
60	File	xxxxx.xxx	predictive	中
61	File	xx.xxx	predictive	低
62	File	xxxxxx.x	predictive	中
63	File	xxxx.xxx	predictive	中
64	File	xx.xxx	predictive	低
65	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	高
66	File	xxxxx_xx.xxxx	predictive	高
67	File	xxxxxx.xxx	predictive	中
68	File	xxxxxxxxxxxxx.xxx	predictive	高
69	File	xxxxxxxxxxxx.xxx	predictive	高
70	File	xxxxxxxx_xxxxxxx.xxx	predictive	高
71	File	xxxx.xxx	predictive	中
72	File	xxxxxxx/xxxxxx/xxxxxx/xxxxxxxxx.xxx#xxx	predictive	高
73	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxxx.xxx	predictive	高
74	File	xxxxxx\xxxx_xxx\xxxxx\xxxxxxxx.xxx	predictive	高
75	File	xxxxxxxxxx_xxxxxxx.xxx	predictive	高
76	File	xxxxxxx-xxxxx.xx	predictive	高
77	File	xxxxx_xxxxxxxx.xxx	predictive	高
78	File	xxxx/xxxxxxx/xxxxx.xxx	predictive	高
79	File	xxxxx.xxx	predictive	中
80	File	xxxxxxx.xxx	predictive	中
81	File	xxxxxx.xxx/xxxx_xxxx_xxxx.xxx	predictive	高
82	File	xxxxxxxx/xxxxxx-xxxxx/xxxxxxxxxxx/xxxx.xx	predictive	高
83	File	xxxx.xxx	predictive	中
84	File	xxxxxxx/xxxxxx.xxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	高
85	File	xxxxx.xxx	predictive	中
86	File	xxxxx-xxxx.xxx	predictive	高
87	File	xxxxxxx.xxx	predictive	中
88	File	xxxxxxxx.xxx	predictive	中
89	File	xxxxxxx_xxxx.xxx	predictive	高
90	File	xxxxxxx.xxx	predictive	中
91	File	xxxxx.xxx	predictive	中
92	File	xxxxxxxx.xxx	predictive	中
93	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	高
94	File	xxxx.xx	predictive	低
95	File	xxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xx	predictive	高
96	File	xxxxxxxxxxxxxxxx.xx	predictive	高
97	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	高
98	File	xxx/xxxxxx_xxx.xxx	predictive	高
99	File	xxxxxxxxxxxx.xxx	predictive	高
100	File	xxxxx.x	predictive	低
101	File	xxxxxxxxxxx.xxx	predictive	高
102	File	xxxxxxxx/xxxxxxxx	predictive	高
103	File	xxxxxxxx.xxx	predictive	中
104	File	xxxxxxxxxx.xxx	predictive	高
105	File	xxxxxxx.xxx	predictive	中
106	File	xx_xxxxxxxx.xxx	predictive	高
107	File	xxxxx.xxx	predictive	中
108	File	xxxxxxxx.xxx	predictive	中
109	File	xx-xxxxx/xxxxxxx.xxx	predictive	高
110	File	xx-xxxxxx.xxx	predictive	高
111	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	高
112	File	xx-xxxxxxxx/xxxx.xxx	predictive	高
113	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	高
114	File	xx-xxxxxxxx.xxx	predictive	高
115	File	~/xxxxxxxxx/	predictive	中
116	Library	xxxxxxx.xxx	predictive	中
117	Library	xxxxxxxxxxxx.xxx	predictive	高
118	Library	xxxx.xxx.xxx	predictive	中
119	Library	xxxxxx.xxx	predictive	中
120	Library	xxxxxxxxxxx.xxx	predictive	高
121	Library	xxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxx	predictive	高
122	Library	xxxxxxx/xxx/xxxxxxxxx/xxxxx_xxxxxxx.xxx	predictive	高
123	Library	xxx/xx_xxx.x	predictive	中
124	Library	xxxxxxxx.x	predictive	中
125	Argument	xx/xx	predictive	低
126	Argument	xx_xxxxx_xxx_xxxx	predictive	高
127	Argument	xxxxxx	predictive	低
128	Argument	xxxxxxxxxxxxxxxxxxxxx	predictive	高
129	Argument	xxxxxxxx	predictive	中
130	Argument	xxx	predictive	低
131	Argument	xxxx/xxxxx/xxxxx_xxxxxxxxxxx	predictive	高
132	Argument	xxxxxx[xxxx]	predictive	中
133	Argument	xxxxxxxxxxx(xxxxxx)	predictive	高
134	Argument	xxxx/xxxxxx/xxx	predictive	高
135	Argument	xxxxxx	predictive	低
136	Argument	xxxxx/xxxxx/xxxxx/xxxxxxxx	predictive	高
137	Argument	xxxxx xxxxx	predictive	中
138	Argument	xxxxx	predictive	低
139	Argument	xxxx	predictive	低
140	Argument	xxxxxxxx	predictive	中
141	Argument	xxxxxx_xxxxxx_xx	predictive	高
142	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxx/xxxxxxx	predictive	高
143	Argument	xxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxx/xxxxxxx	predictive	高
144	Argument	xxxxxxxxxxxx	predictive	中
145	Argument	xxxxxxxxxxxxxx($xxx)	predictive	高
146	Argument	xxxxx_xx	predictive	中
147	Argument	xxx_xxxx	predictive	中
148	Argument	xxxx	predictive	低
149	Argument	xxxx xxxxxxx	predictive	中
150	Argument	xxxx_xxxx	predictive	中
151	Argument	xxxx	predictive	低
152	Argument	xxxx	predictive	低
153	Argument	xx	predictive	低
154	Argument	xx	predictive	低
155	Argument	xxxxx	predictive	低
156	Argument	xxxxx	predictive	低
157	Argument	xxxxxx	predictive	低
158	Argument	xxxx	predictive	低
159	Argument	xxxxxx	predictive	低
160	Argument	xxxx	predictive	低
161	Argument	xxxxxx	predictive	低
162	Argument	xxxxx[xxxxx][xx]	predictive	高
163	Argument	xxxxx	predictive	低
164	Argument	xx/xx/xx/xx/x	predictive	高
165	Argument	xxxx	predictive	低
166	Argument	xxxxxxxx	predictive	中
167	Argument	xxxx_xxxx	predictive	中
168	Argument	xxxxxx	predictive	低
169	Argument	xxxx	predictive	低
170	Argument	xxxx_xxxx	predictive	中
171	Argument	xxxxxxxx	predictive	中
172	Argument	xxxxxx	predictive	低
173	Argument	xxxx	predictive	低
174	Argument	xxxxxxxx	predictive	中
175	Argument	xxxxx	predictive	低
176	Argument	xxxxxxx_xx	predictive	中
177	Argument	xxxxxxx_xxxxx	predictive	高
178	Argument	xxx	predictive	低
179	Argument	xxx=xxxx	predictive	中
180	Argument	xxxxxxxx	predictive	中
181	Argument	xxxxxx_xxxx	predictive	中
182	Argument	xxxxxxxxxx	predictive	中
183	Argument	xxxxxx	predictive	低
184	Argument	xxxxxxxx/xxxxxxxxx	predictive	高
185	Argument	xxxxxx	predictive	低
186	Argument	xxxxxxxx_xxxx	predictive	高
187	Argument	xxxxxxxxxx_xxxx	predictive	高
188	Argument	xxx	predictive	低
189	Argument	xxx	predictive	低
190	Argument	xxxx-xxxxx	predictive	中
191	Argument	xxxxxxxxx	predictive	中
192	Argument	xxxxxxxx/xxxxxxxx	predictive	高
193	Argument	xxxxxxxx:xxxxxxxx	predictive	高
194	Argument	xxxx_xxxxx	predictive	中
195	Argument	xxxx	predictive	低
196	Argument	x-xxxx-xxxxx	predictive	中
197	Argument	xxxxx_xxxxxxxxxx_xxxxx	predictive	高
198	Input Value	../	predictive	低
199	Input Value	>><xxx/xxx/xxxxxxx=xxxxx(x)>	predictive	高
200	Input Value	xxxx.xxx"><xxxxxx>xxxxx(xxxxxxxx.xxxxxx);</xxxxxx>)	predictive	高
201	Input Value	xxxxxxx	predictive	低
202	Input Value	xxxxxxxxx:xxxxxxxx	predictive	高
203	Pattern	\|xx xx xx\|	predictive	中
204	Network Port	xxx	predictive	低
205	Network Port	xxx/xx (xxxxxx)	predictive	高
206	Network Port	xxx/xxxxx	predictive	中
207	Network Port	xxx/xxxxx	predictive	中
208	Network Port	xxx xxxxxx xxxx	predictive	高

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!