Tortilla 分析

IOB - Indicator of Behavior (3)

时间轴

语言

it2
en2

国家/地区

演员

活动

利益

时间轴

类型

供应商

产品

Linux Kernel2
Delta Electronics Delta Industrial Automation PMSo ...2

漏洞

活动 (1)

These are the campaigns that can be associated with the actor:

  • Microsoft Exchange

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP地址Hostname参与者活动Identified类型可信度
154.221.65.242ec2-54-221-65-242.compute-1.amazonaws.comTortillaMicrosoft Exchange2021-11-04verified
2XXX.XXX.XX.XXXxxxx.xxXxxxxxxxXxxxxxxxx Xxxxxxxx2021-11-04verified
3XXX.XXX.XX.XXXXxxxxxxxXxxxxxxxx Xxxxxxxx2021-11-04verified

TTP - Tactics, Techniques, Procedures (1)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechnique漏洞访问向量类型可信度
1T1068CWE-269Execution with Unnecessary Privilegespredictive

参考 (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!