Dkvn Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (63)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	60
it	2
sv	2

Country

us	56
ca	2

Actors

Dkvn	2

Activities

Interest

Timeline

Type

Not Defined	12
Content Management System	4
Operating System	4
Office Suite Software	2
Cloud Software	2

Vendor

Not Defined	10
Microsoft	4
Jadu Limited	2
Apple	2
Cloudera	2

Product

Jadu Limited Jadu CMS	2
Unix	2
Apple OS X Server	2
Microsoft Office	2
Cloudera HUE	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	0.02016	0.00	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	2.13	CVE-2010-0966
3	magmi ajax_gettime.php cross site scripting	5.2	5.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00195	0.00	CVE-2017-7391
4	Audacity DLL Loader avformat-55.dll access control	6.5	6.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.00	CVE-2017-1000010
5	Ashley Brown iWeb Server Encoded URL path traversal	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01529	0.00	CVE-2003-0475
6	Cisco IOS Point-to-Point Tunneling Protocol Server Memory information disclosure	5.3	5.2	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00264	0.00	CVE-2016-6398
7	Magento GraphQL API cross-site request forgery	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00070	0.03	CVE-2021-21027
8	Cloudera HUE LdapBackend improper authentication	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00081	0.00	CVE-2019-7319
9	Microsoft Windows CredSSP improper authentication	6.2	5.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.70801	0.04	CVE-2018-0886
10	Splunk Enterprise splunk-launch.conf access control	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00042	0.00	CVE-2017-18348
11	Spidersales viewCart.asp sql injection	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00219	0.03	CVE-2004-0348
12	jforum User input validation	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.06	CVE-2019-7550
13	Active Web Softwares Active Business Directory default.asp sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.00	CVE-2008-5972
14	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	1.83
15	Maran PHP Shop prod.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00137	0.00	CVE-2008-4879
16	X-CMS PHP member_news.php sql injection	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00172	0.00	CVE-2018-18887
17	Ecommerce Online Store Kit shop.php sql injection	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03763	0.00	CVE-2004-0300
18	StashCat Backend Database Stored key management	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00060	0.00	CVE-2017-11136
19	PHPWind goto.php redirect	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00348	0.40	CVE-2015-4134
20	BXCP index.php sql injection	7.3	7.0	$0-$5k	$0-$5k	High	Official Fix	0.00307	0.00	CVE-2006-0821

IOC - Indicator of Compromise (5)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	45.40.183.1	ip-45-40-183-1.ip.secureserver.net	Dkvn	04/12/2022	verified	High
2	XX.XXX.XXX.X	xxxxx.xxxxxxx.xxx	Xxxx	04/12/2022	verified	High
3	XXX.XX.XXX.XXX	xx.xxxxxxx.xxx.xx	Xxxx	04/12/2022	verified	High
4	XXX.XXX.XXX.XXX	xx-xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxx.xxx	Xxxx	04/12/2022	verified	High
5	XXX.XXX.XXX.XXX	xxxxxx.xxx	Xxxx	04/12/2022	verified	High

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
3	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	High
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
5	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
6	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
7	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High

IOA - Indicator of Attack (31)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	$SPLUNK_HOME/etc/splunk-launch.conf	predictive	High
2	File	/etc/master.passwd	predictive	High
3	File	/etc/passwd	predictive	Medium
4	File	/forum/away.php	predictive	High
5	File	xxxxxx_xx.x	predictive	Medium
6	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
7	File	xxxxxxx.xxx	predictive	Medium
8	File	xxxxxxxx.xxx	predictive	Medium
9	File	xxxx.xxx	predictive	Medium
10	File	xxx/xxxxxx.xxx	predictive	High
11	File	xxxxx.xxx	predictive	Medium
12	File	xxxxx-xxx-xxxxxx/xxxxx/xxx/xxxx_xxxxxxx.xxx	predictive	High
13	File	xxxxxx/xxxxxx_xxxx.xxx	predictive	High
14	File	xxxx.xxx	predictive	Medium
15	File	xxxxxxxx.xxx	predictive	Medium
16	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
17	File	xxxx.xxx	predictive	Medium
18	File	xxxxxxxx.xxx	predictive	Medium
19	File	xxxxxxxx.xxx	predictive	Medium
20	Library	xxxxxxxx-xx.xxx	predictive	High
21	Argument	xxxxxx	predictive	Low
22	Argument	xxxxxxxx	predictive	Medium
23	Argument	xxx	predictive	Low
24	Argument	xxxxx	predictive	Low
25	Argument	xx	predictive	Low
26	Argument	xxxxxx	predictive	Low
27	Argument	xxx	predictive	Low
28	Argument	xxxx	predictive	Low
29	Argument	xxx	predictive	Low
30	Argument	xxxxxx	predictive	Low
31	Input Value	%xx%xx%xx	predictive	Medium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!