Mars Stealer Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (888)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	734
ru	46
de	24
zh	20
it	20

Country

us	558
ru	46
de	22
cn	18
it	12

Actors

Mars Stealer	31
Cobalt Strike	15
RedLine Stealer	11
Mirai	7
Remcos	6

Activities

Interest

Timeline

Type

Not Defined	256
Operating System	50
Content Management System	32
Smartphone Operating System	30
WordPress Plugin	28

Vendor

Not Defined	168
Microsoft	50
SourceCodester	30
Google	22
Apple	18

Product

Microsoft Windows	32
Google Android	20
FFmpeg	8
Campcodes Complete Web-Based School Management Sys ...	8
Apache HTTP Server	6

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	PHP Link Directory Administration Page index.html cross site scripting	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00374	0.37	CVE-2007-0529
2	Phplinkdirectory PHP Link Directory conf_users_edit.php cross-site request forgery	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00526	0.04	CVE-2011-0643
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	0.02016	0.00	CVE-2007-1192
4	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.99	CVE-2010-0966
5	Discuz! admin.php cross site scripting	3.6	3.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00054	0.03	CVE-2018-19464
6	WoltLab Burning Book addentry.php sql injection	7.3	6.8	$0-$5k	$0-$5k	Functional	Unavailable	0.00804	0.00	CVE-2006-5509
7	avahi socket.c resource management	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.07514	0.04	CVE-2011-1002
8	Adminer adminer.php server-side request forgery	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02092	0.00	CVE-2021-21311
9	Adult Script Pro download sql injection	8.5	8.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00224	0.04	CVE-2017-15959
10	gnuboard5 Web Page Generation cross site scripting	5.3	5.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00068	0.00	CVE-2021-3831
11	Tiki Wiki CMS Groupware tiki-edit_wiki_section.php cross site scripting	5.2	5.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00110	0.04	CVE-2010-4240
12	DZCP deV!L`z Clanportal browser.php information disclosure	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02733	0.73	CVE-2007-1167
13	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.84	CVE-2007-0354
14	Basilix Webmail login.php3 command injection	7.3	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.07
15	FreeForum forum.php file inclusion	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.16828	0.00	CVE-2006-5230
16	SourceCodester Canteen Management System customer.php builtin_echo cross site scripting	3.5	3.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00051	0.04	CVE-2022-4253
17	GNUBOARD5 Parameter move_update.php cross site scripting	3.5	3.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00100	0.00	CVE-2020-18663
18	SkullSplitter PHP Guestbook guestbook.php cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00814	0.08	CVE-2006-1256
19	Adobe Flash Player memory corruption	10.0	9.0	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.01334	0.00	CVE-2010-2167
20	Tiki TikiWiki tiki-editpage.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01194	0.03	CVE-2004-1386

IOC - Indicator of Compromise (69)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	5.45.84.214		Mars Stealer	05/12/2022	verified	High
2	5.63.155.126	5-63-155-126.cloudvps.regruhosting.ru	Mars Stealer	03/25/2022	verified	High
3	5.181.80.130	ip-80-130-bullethost.net	Mars Stealer	11/28/2022	verified	High
4	13.58.70.215	ec2-13-58-70-215.us-east-2.compute.amazonaws.com	Mars Stealer	11/28/2022	verified	Medium
5	20.185.186.224		Mars Stealer	11/28/2022	verified	High
6	23.239.9.184	23-239-9-184.ip.linodeusercontent.com	Mars Stealer	11/28/2022	verified	High
7	45.9.20.31		Mars Stealer	11/28/2022	verified	High
8	45.67.230.47	vm718000.stark-industries.solutions	Mars Stealer	11/28/2022	verified	High
9	45.77.112.250	45.77.112.250.vultrusercontent.com	Mars Stealer	11/28/2022	verified	High
10	45.140.147.99	vm716958.stark-industries.solutions	Mars Stealer	11/28/2022	verified	High
11	62.3.12.9	zserg.ch	Mars Stealer	11/28/2022	verified	High
12	62.113.99.76		Mars Stealer	11/28/2022	verified	High
13	62.204.41.69		Mars Stealer	11/28/2022	verified	High
14	62.204.41.70		Mars Stealer	11/28/2022	verified	High
15	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
16	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
17	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
18	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
19	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
20	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
21	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
22	XX.XXX.XX.XXX	xxxxxx.xxx.xx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	11/28/2022	verified	High
23	XX.XX.XXX.XXX		Xxxx Xxxxxxx	05/12/2022	verified	High
24	XX.XX.XXX.XXX	xxxxxxx.xxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
25	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
26	XX.XX.XXX.XXX	xxxxxx-xxxx.xxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
27	XX.XXX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
28	XX.XXX.XX.XXX	xx--x-xxxxxxx.xx	Xxxx Xxxxxxx	11/28/2022	verified	High
29	XX.XXX.XXX.XX	xxxx.xxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
30	XX.XXX.XX.XX	xxxx.xxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
31	XX.XX.XXX.XX		Xxxx Xxxxxxx	05/12/2022	verified	High
32	XX.XX.XXX.XX		Xxxx Xxxxxxx	12/15/2023	verified	High
33	XX.XX.XXX.XXX		Xxxx Xxxxxxx	12/15/2023	verified	High
34	XX.XX.XXX.XXX		Xxxx Xxxxxxx	01/21/2024	verified	High
35	XX.XXX.XX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
36	XX.XXX.XX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
37	XX.XXX.XXX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
38	XX.XXX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
39	XX.XXX.XXX.XXX	xxxxxx.xxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	07/21/2022	verified	High
40	XX.XXX.XXX.XXX	xxxxxx.xxx.xxx.xxx.xx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	11/28/2022	verified	High
41	XXX.XXX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
42	XXX.XXX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
43	XXX.XX.XX.XXX	xxx.xx.xx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
44	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	09/20/2023	verified	High
45	XXX.XX.XXX.XX	xxx.xx.xxx	Xxxx Xxxxxxx	12/27/2022	verified	High
46	XXX.XX.XXX.XX	xxxxxxx.xxxxxx.xxx	Xxxx Xxxxxxx	12/30/2022	verified	High
47	XXX.XX.XXX.XX	xxxxxx.xxxxxxxxx.xxx	Xxxx Xxxxxxx	01/19/2023	verified	High
48	XXX.XX.XXX.XXX	xxxxxxxxx.xxx	Xxxx Xxxxxxx	12/27/2022	verified	High
49	XXX.XX.XXX.XXX	xxxxx.xxxxxx-xxxx.xx	Xxxx Xxxxxxx	12/27/2022	verified	High
50	XXX.XX.XXX.XXX	xxxxxx.xxx.xxx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxx Xxxxxxx	11/28/2022	verified	High
51	XXX.XX.X.XXX		Xxxx Xxxxxxx	02/13/2022	verified	High
52	XXX.XXX.XXX.XXX	xxxx.xxxx.xxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
53	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	07/21/2022	verified	High
54	XXX.XXX.XX.XXX	xxx.xxxxxx-xxxxxx.xx	Xxxx Xxxxxxx	02/17/2023	verified	High
55	XXX.X.XX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
56	XXX.X.XXX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
57	XXX.XXX.XXX.XX	xxxxxx.xxxxxxxxx.xxx	Xxxx Xxxxxxx	05/12/2022	verified	High
58	XXX.XXX.XXX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
59	XXX.XXX.XXX.XX	xxx-xxx-xxx-xx-xxxx.xxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
60	XXX.XX.XXX.XX		Xxxx Xxxxxxx	05/12/2022	verified	High
61	XXX.XX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
62	XXX.XXX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
63	XXX.XXX.XXX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
64	XXX.XX.XX.XXX		Xxxx Xxxxxxx	11/28/2022	verified	High
65	XXX.XX.XXX.XX		Xxxx Xxxxxxx	08/04/2022	verified	High
66	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High
67	XXX.X.XX.XXX	xxxxxxxx.xxxxxx-xx-xxxxxx.xx	Xxxx Xxxxxxx	11/28/2022	verified	High
68	XXX.XXX.XXX.XX		Xxxx Xxxxxxx	11/28/2022	verified	High
69	XXX.XXX.XX.XX	xxxxxx.xxx.xxxxxxxx.xxx	Xxxx Xxxxxxx	11/28/2022	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	High
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
3	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	High
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
5	T1068	CAPEC-122	CWE-264, CWE-269, CWE-271, CWE-284	Execution with Unnecessary Privileges	predictive	High
6	TXXXX	CAPEC-	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-	CWE-XXXX	Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx X Xxxxxxxx Xxxxxx	predictive	High
12	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
14	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
15	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
17	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxxxxxx Xxxxxxx	predictive	High
18	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
19	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
23	TXXXX.XXX	CAPEC-	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
24	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
25	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (433)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/?g=log_import_save	predictive	High
2	File	/ad-list	predictive	Medium
3	File	/Admin/add-student.php	predictive	High
4	File	/admin/api/theme-edit/	predictive	High
5	File	/admin/client_user	predictive	High
6	File	/admin/communitymanagement.php	predictive	High
7	File	/admin/court-type	predictive	High
8	File	/admin/generalsettings.php	predictive	High
9	File	/admin/inquiries/view_inquiry.php	predictive	High
10	File	/admin/login.php	predictive	High
11	File	/admin/payment.php	predictive	High
12	File	/admin/transactions/update_status.php	predictive	High
13	File	/api/controllers/admin/app/ComboController.php	predictive	High
14	File	/api/user/password/sent-reset-email	predictive	High
15	File	/application/plugins/controller/Upload.php	predictive	High
16	File	/aqpg/users/login.php	predictive	High
17	File	/bsms_ci/index.php/user/edit_user/	predictive	High
18	File	/cgi-bin/cstecgi.cgi	predictive	High
19	File	/cgi-bin/cstecgi.cgi?action=login	predictive	High
20	File	/cgi-bin/nas_sharing.cgi	predictive	High
21	File	/cgi-bin/wlogin.cgi	predictive	High
22	File	/classes/Master.php?f=save_inquiry	predictive	High
23	File	/control/register_case.php	predictive	High
24	File	/cstecgi.cgi	predictive	Medium
25	File	/dashboard/add-service.php	predictive	High
26	File	/dashboard/updatelogo.php	predictive	High
27	File	/Default/Bd	predictive	Medium
28	File	/download	predictive	Medium
29	File	/event/admin/?page=user/list	predictive	High
30	File	/face-recognition-php/facepay-master/camera.php	predictive	High
31	File	/filemanager/upload/drop	predictive	High
32	File	/forum/away.php	predictive	High
33	File	/forum/PostPrivateMessage	predictive	High
34	File	/getcfg.php	predictive	Medium
35	File	/goform/aspForm	predictive	High
36	File	/goform/RouteStatic	predictive	High
37	File	/home/masterConsole	predictive	High
38	File	/hrm/employeeadd.php	predictive	High
39	File	/hrm/employeeview.php	predictive	High
40	File	/htdocs/cgibin	predictive	High
41	File	/index.php	predictive	Medium
42	File	/lists/index.php	predictive	High
43	File	/login.php	predictive	Medium
44	File	/manage_laundry.php	predictive	High
45	File	/mifs/c/i/reg/reg.html	predictive	High
46	File	/model/update_subject.php	predictive	High
47	File	/netflow/jspui/editProfile.jsp	predictive	High
48	File	/portmap	predictive	Medium
49	File	/register.php	predictive	High
50	File	/search/index	predictive	High
51	File	/settings/download-test-pdf	predictive	High
52	File	/xxxx.xxx	predictive	Medium
53	File	/xx_xxx.xxx	predictive	Medium
54	File	/xxxxxxx/	predictive	Medium
55	File	/xxxxxxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
56	File	/xxx/xxx/xx/xxx_xxx.xxx	predictive	High
57	File	/xxxxxxxxx	predictive	Medium
58	File	/xxxx-xxxxxxxx.xxx	predictive	High
59	File	/xxxx/xxxxxx_xxxxxx.xxx	predictive	High
60	File	/xxxx/xxxx_xxxxxxxxx_xxxxxx_xxxx.xxx	predictive	High
61	File	/xxxx/xxxxxxx xxxxxx/xxx/xxx_xxxx_xxxxxx.xxx	predictive	High
62	File	/xxxx/xxxx_xxxxxxxx.xxx	predictive	High
63	File	/xxxx/xxxxxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
64	File	/xx/xxxxx/xxxxxx-xxxxxx.xxx?xx=x	predictive	High
65	File	/xxx/	predictive	Low
66	File	/xxxxxx/xxxx.xxx	predictive	High
67	File	/xxxxxxxxx/xx-xxxxx/xxxxxxx-xxxxxxx.xxx	predictive	High
68	File	xxxxx.xxx/xxxxx-x.x.xxx/xxxxxxx.xxx/xxxx.xxx	predictive	High
69	File	?x=xxxxxxx/xxxxxxxxx/xxxxxx&xxxxxxxxxx=x	predictive	High
70	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
71	File	xxxxxxx.xxx	predictive	Medium
72	File	xxxxxx.xxx	predictive	Medium
73	File	xxxxxxxx.xxx	predictive	Medium
74	File	xxxxxxxxxxxx.xxx	predictive	High
75	File	xxx_xxxxxxx.xxx	predictive	High
76	File	xxx_xxxx.xxx	predictive	Medium
77	File	xxxxx.xxxxxxxxx.xxx	predictive	High
78	File	xxxxx.xxx	predictive	Medium
79	File	xxxxx.xxx&x=xxxxxxx/xxxxxxxxxxxx/xxxx	predictive	High
80	File	xxxxx/?xxxx=xxxxx	predictive	High
81	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
82	File	xxxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
83	File	xxxxx/xxxxxxxxxxx.xxx	predictive	High
84	File	xxxxx/xxxxxxx.xxx	predictive	High
85	File	xxxxxxxxx.xxx	predictive	High
86	File	xxxxxxx.xxx	predictive	Medium
87	File	xxxxx_xxxx.xxx	predictive	High
88	File	xxxxxxx/xxxxxxx/xxxxxxxx	predictive	High
89	File	xxxxxxxxxx.xxx	predictive	High
90	File	xxxx/xx_*.xxx	predictive	High
91	File	xxxx/xxxxxx/xxxxxx_xxxxxxxxxxxxxxx_xxx_xxxxx	predictive	High
92	File	xxxxxxxxxxxxxxxxx.xxx	predictive	High
93	File	xxx.xxx	predictive	Low
94	File	xxx/xxxxxx/xxxxxx.xxx	predictive	High
95	File	xxx/xxxxx/xxxxxxxxx/_xxxxxxxx.xxxx.xxx	predictive	High
96	File	xxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxxx.xxx	predictive	High
97	File	xxxxxxxxxxx/xxxxxx/xxxxxxx_xxxxx.xxx	predictive	High
98	File	xxx.xxx	predictive	Low
99	File	xxx/xxxx.x	predictive	Medium
100	File	xxxxx-xxxx/xxxxxx.x	predictive	High
101	File	xxx/xxxx_xxxxxx.xxx	predictive	High
102	File	xxxxxxx.xxx	predictive	Medium
103	File	x:\xxxxxxx\xxxxxxxx\xxxxxx\xxx	predictive	High
104	File	xxxxxxxx/xxxxxx/	predictive	High
105	File	xxxxx.xxx	predictive	Medium
106	File	xxxxxxx.xxx	predictive	Medium
107	File	xxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxx/xxx/xxxxxx.xxxxxxxxx.xxx	predictive	High
108	File	xxxxxxx/xxxxxxx/xxxxxxx/xxxx/xxxxxxx.xxx	predictive	High
109	File	xxxxxxxx.xxx	predictive	Medium
110	File	xxxxxxxxxxxxxxxxxxx.xx	predictive	High
111	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
112	File	xxxxxxx.xxx	predictive	Medium
113	File	xxxxxx.xxxx	predictive	Medium
114	File	xxxxx_xxxx.x	predictive	Medium
115	File	xxxxxx.xxx	predictive	Medium
116	File	xxxxxxxxxx.xxx	predictive	High
117	File	xxx.x	predictive	Low
118	File	xxxxxx.x	predictive	Medium
119	File	xxxxxxxxxxx.xxx	predictive	High
120	File	xxxxx.xxx	predictive	Medium
121	File	xxx/xxxxxxxx/xxxx.x	predictive	High
122	File	xx_xxxxxxxx_xxxx.xxx	predictive	High
123	File	xxxx_xxxxxxxxx.xxxxx	predictive	High
124	File	xxxxx.xxx	predictive	Medium
125	File	xx/xxxxxxx.x	predictive	Medium
126	File	xxxxxxxx.xxx	predictive	Medium
127	File	xxxxxxx/xx/xxxxxxx/xxxxxxxxxxxx/xxxxxx.xxx	predictive	High
128	File	xxxxxxx/xxxxxx/xxxx_xxxxxx/xxxxxx/xxxxxx_xxx.xxx	predictive	High
129	File	xxxxxxx/xxxxxx/xxxx_xxxxxx/xxxxxxxxxx/xxxxxx_xxxx.xxx	predictive	High
130	File	xxxxxxxxx.xxx	predictive	High
131	File	xxxxxxxxx.xxx	predictive	High
132	File	xxxxxxxxx.xxx	predictive	High
133	File	xxxxxx.xxx	predictive	Medium
134	File	xxxxxx/xxxxxxxxxx/xxxxxxx/xxxxx.xxx	predictive	High
135	File	x_xxxxxx.xxx	predictive	Medium
136	File	xxxxxxxxxx/xxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxx.xxx	predictive	High
137	File	xxx/xxxxx.xxxxxxxxxxx.xxx	predictive	High
138	File	xxx/xxxxxx.xxx	predictive	High
139	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
140	File	xxxxxxxxxxxxx.xxx	predictive	High
141	File	xxxxxxx/xxxxxxx/xxxxxxxx_xxxxxxxx.xxx.xxx	predictive	High
142	File	xxxxxxx/xxxxxxx.xxx.xxx	predictive	High
143	File	xxxxxxxx/xxxx.xxx	predictive	High
144	File	xxxxx.xxxxxx	predictive	Medium
145	File	xxxxx.xxxx	predictive	Medium
146	File	xxxxx.xxx	predictive	Medium
147	File	xxxxx.xxxx	predictive	Medium
148	File	xxxxx.xxx?xxxx=xxxxx	predictive	High
149	File	xxxxxxxxxxxxxxx.xx	predictive	High
150	File	xx/xxxxxx.xxx	predictive	High
151	File	xxxxx-xx/xxxxxxxx?xxxxxxxx=../	predictive	High
152	File	xxxx_xxxxxxx.xxxx	predictive	High
153	File	xxxxxx.xxxxxxxxxx.xx	predictive	High
154	File	xxxxxxx.xxx	predictive	Medium
155	File	xxx_xxx.xx	predictive	Medium
156	File	xxxxx/xxx_xxx.x	predictive	High
157	File	xxx/xxxxx/xxxxxxxx/xxxx/xxxxxxx_xxxxxxxxx.xx	predictive	High
158	File	xxx/xxx/xxx/x_xxxx.x	predictive	High
159	File	xxx/xxxxxxx/xxxxxx.xx	predictive	High
160	File	xxx/xxxxxx.xx	predictive	High
161	File	xxx/xxxx_xxxxxxx/xxxxxxxxxxx.xx	predictive	High
162	File	xxxxxxxxxx/xxx.x	predictive	High
163	File	xxxxxxxxxxx/xxxxxxxxxxxxxx.x	predictive	High
164	File	xxxxxxx.x	predictive	Medium
165	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	High
166	File	xxxxxxxxx/xxxxxx.xxxxx.xxx	predictive	High
167	File	xxxxx.xxx	predictive	Medium
168	File	xxxxx.xxxx	predictive	Medium
169	File	xxxxx_xx.xxxx	predictive	High
170	File	xxxxxxxxxxxx.xxx	predictive	High
171	File	xxxxxx_xxxxxx.xxx	predictive	High
172	File	xxxxxx_xxxxxx.xxx	predictive	High
173	File	xxxxxx_xxxxxxx.xxx	predictive	High
174	File	xxxxxxxxxx.xxx	predictive	High
175	File	xx.xxx	predictive	Low
176	File	xxx_xxx_xxxxxx.x	predictive	High
177	File	xx_xxxxxx.xxx	predictive	High
178	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	High
179	File	xxx/xxxxx	predictive	Medium
180	File	xxx_xxxx_xxx_xxxxxxxxxx.x	predictive	High
181	File	xxx_xxxx.xxx	predictive	Medium
182	File	xxxx/xxx/xxxx/xxxx/xxx/xxxxxxx/xxxxxx/xxxxxxxxxxxxxxxxxxxx/xxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
183	File	xxxx/xxx/xxxx/xxxxxx/xxxxx/xxxxxxxx/xxxxxxxxxx/xxxxxxxxx.xxx	predictive	High
184	File	xxxxx_xxxxxx_xxxxxxxx.xxx	predictive	High
185	File	xxxxxxxx.xxx	predictive	Medium
186	File	xxxxx.xxxxxxxxxx.xxx	predictive	High
187	File	xxxxxxxx.x	predictive	Medium
188	File	xxxxxxxx-xxxxxxxx.xxx	predictive	High
189	File	xxxxxxxxx.xxx.xxx	predictive	High
190	File	xxxxxxx.xxx	predictive	Medium
191	File	xxxxxx.xxx	predictive	Medium
192	File	xxxx/xxxxx/xxx_xxxxxx.xx	predictive	High
193	File	xxxxxxx/xxxxxxx.x	predictive	High
194	File	xxxxx.xxx	predictive	Medium
195	File	xxxxx_xxxxxx.xxx	predictive	High
196	File	xxxxx.x	predictive	Low
197	File	xxxxxxx_xxxxx.xxx	predictive	High
198	File	xxxxxxx_xxxx.xxx.	predictive	High
199	File	xxxxxxx/xxxxxxxxxx.xx	predictive	High
200	File	xx-xxxxxxx/xx-xxxxxxx.xxx	predictive	High
201	File	xxxxxxx-xxxx.xxx	predictive	High
202	File	xxxx.xxx	predictive	Medium
203	File	xxxxx.xxx	predictive	Medium
204	File	xxxxxxxxxx.xxx	predictive	High
205	File	xxxxxxxx-x.xx	predictive	High
206	File	xxxxxxxx.xxx	predictive	Medium
207	File	xxxxxxxxx.xxx	predictive	High
208	File	xxxxxxx_xxx_xxxxx_xxxxxx.xxxx	predictive	High
209	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	High
210	File	xxxxxx.xxx	predictive	Medium
211	File	xxxxxx_xxxxxx.xxx	predictive	High
212	File	xxxx/xxx/xxx_xxxx.x	predictive	High
213	File	xxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xx	predictive	High
214	File	xxxxxx-xxxxxxxx.xxx	predictive	High
215	File	xxxxxxxxxxxxx.xxx	predictive	High
216	File	xxxxxx/xxxxxxxx.xxx	predictive	High
217	File	xxxxxxx.xxx	predictive	Medium
218	File	xxxxx.xxx	predictive	Medium
219	File	xxxx_xxxxxxxx.xxx	predictive	High
220	File	xxxxxx.xxx	predictive	Medium
221	File	xxxxxxxxxx/xx/xxxxxx.xx	predictive	High
222	File	xxxxxxx.xxxx	predictive	Medium
223	File	xxxxxxxxx/xxxx/xxxxxxxx+xxxxxxxxx.x	predictive	High
224	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxx-xxxxxxxx.xxx	predictive	High
225	File	xxx/xxxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxx.xx	predictive	High
226	File	xxx/xxxx/xxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxx.xxxx	predictive	High
227	File	xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxx/xxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
228	File	xxx/xxxxxxxxx.x	predictive	High
229	File	xxx_xxxxxxxx.x	predictive	High
230	File	xxxxxxxxxxxxxxx.xxx	predictive	High
231	File	xxxxxx_xxx_xxxxxxx.xxx	predictive	High
232	File	xxxxxxx_xxxxxxxx.xxx	predictive	High
233	File	xxxxxxxx.xxx	predictive	Medium
234	File	xxxxxxxxx/xxxxxxxxxx	predictive	High
235	File	xxxxxx/xxxxx/xxxx_xxxxxxx.xxx	predictive	High
236	File	xxxxxx-xxxxxx.xxx	predictive	High
237	File	xxxx-xxxxxxxx.xxx	predictive	High
238	File	xxxx-xxxx_xxxx_xxxxxxx.xxx	predictive	High
239	File	xxx/xxx.xxxxx.xxx	predictive	High
240	File	xxxx.xxx	predictive	Medium
241	File	xxxx/xxxxxx.xxxx	predictive	High
242	File	xxx_xxxx.xxxx	predictive	High
243	File	xxxx/xxxxxxxx.xxx	predictive	High
244	File	xxxxxxxxx.xxx	predictive	High
245	File	xxxx_xxxxxxxx.xxx	predictive	High
246	File	xxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxx.xxxx	predictive	High
247	File	xxxxxx_xxxxx.xxx	predictive	High
248	File	xxxxxxx.xxxx.xxx	predictive	High
249	File	xxxxxx.xxx	predictive	Medium
250	File	xx-xxxxx/xxxxx.xxx?xxxx=xxx-xxxxxxxxx-xxxxxxxx-xxxxxxxx	predictive	High
251	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
252	File	xx-xxxxxxxx.xxx	predictive	High
253	File	xxxx.xx	predictive	Low
254	Library	xxxxxxxxxxxx/xxx/xxxxxx_xxxxxx/xxxxxxxxxx_xxxxxxxx/xxxxxxxxxx/xxxx.xx	predictive	High
255	Library	xxxx/xxx/xxxxxx/xx-xxxx-xxxxxx.xxx	predictive	High
256	Library	xxxxxx.xxx	predictive	Medium
257	Library	xxx/xxxxxxx.xxx.xxx	predictive	High
258	Library	xxxxxxxxx/xxxxxx_xxxxxxxxxx.xxx.xxx	predictive	High
259	Library	xxxx.xxx.xxx	predictive	Medium
260	Library	xxxxx.xxx	predictive	Medium
261	Library	xxxxx.xxx	predictive	Medium
262	Library	xxxxxx/xxxxxxxxx/xxxxx.xxx	predictive	High
263	Library	xxxxxx.xxx	predictive	Medium
264	Library	xxxxxxxxxxxxxx.xxxxx	predictive	High
265	Library	xxxxx.xxx	predictive	Medium
266	Argument	$xxxx	predictive	Low
267	Argument	$_xxxxxx['xxxxx_xxxxxx']	predictive	High
268	Argument	xx/xx	predictive	Low
269	Argument	xxx	predictive	Low
270	Argument	xxxxxxx	predictive	Low
271	Argument	xxxxxxx	predictive	Low
272	Argument	xxxxx	predictive	Low
273	Argument	xxxxx	predictive	Low
274	Argument	xxxxxxxx	predictive	Medium
275	Argument	xxxxxxxx_xxxxxxx_xxxxxx[xxxxx_xxxxxx_xxx]'	predictive	High
276	Argument	xxxxxxxxxx	predictive	Medium
277	Argument	xxxxx	predictive	Low
278	Argument	xxx	predictive	Low
279	Argument	xx	predictive	Low
280	Argument	xxxxxxx[x][xxxx]	predictive	High
281	Argument	xxxxxxx	predictive	Low
282	Argument	xxxxxxx	predictive	Low
283	Argument	xxxxxxx	predictive	Low
284	Argument	xxxxx_xxxx	predictive	Medium
285	Argument	x[xxxxx]	predictive	Medium
286	Argument	xxxxxx_xxx	predictive	Medium
287	Argument	xxxxxxx	predictive	Low
288	Argument	xxxxxxxx_xxxx	predictive	High
289	Argument	xxxxx	predictive	Low
290	Argument	xxxxxxxxxx	predictive	Medium
291	Argument	xxxxx	predictive	Low
292	Argument	xxxxx->xxxx	predictive	Medium
293	Argument	xxxxx/xxxxxxxx	predictive	High
294	Argument	xxxxx	predictive	Low
295	Argument	xxxxxxxxxx	predictive	Medium
296	Argument	xxxxxxx	predictive	Low
297	Argument	xxxxxx	predictive	Low
298	Argument	xxxxx_xxxx_xxxx	predictive	High
299	Argument	xxxxx_xxx	predictive	Medium
300	Argument	xxxxx_xxxxxxxx	predictive	High
301	Argument	xxxx	predictive	Low
302	Argument	xxxx_xx	predictive	Low
303	Argument	xxxxx_xx	predictive	Medium
304	Argument	xxxx	predictive	Low
305	Argument	xxxxxxxx	predictive	Medium
306	Argument	xxxx_xxxxxx	predictive	Medium
307	Argument	xxxxx xxxx	predictive	Medium
308	Argument	xxxxx xxxx/xxxx xxxx	predictive	High
309	Argument	xxxxx xxxx/xxxxxx xxxx/xxxx xxxx	predictive	High
310	Argument	xxxxx	predictive	Low
311	Argument	xxxxxxxx	predictive	Medium
312	Argument	x_xxxx	predictive	Low
313	Argument	xxxx_xx	predictive	Low
314	Argument	xxxxxxx[xx_xxx_xxxx]	predictive	High
315	Argument	xxxxx	predictive	Low
316	Argument	xxxxxxxxx	predictive	Medium
317	Argument	xxxxx_xx	predictive	Medium
318	Argument	xxxx/xxxxxx/xxx	predictive	High
319	Argument	xxxxxxxx	predictive	Medium
320	Argument	xx	predictive	Low
321	Argument	xx_xxxx	predictive	Low
322	Argument	xx_xxxx	predictive	Low
323	Argument	xx_xxxxx	predictive	Medium
324	Argument	xxx	predictive	Low
325	Argument	xxxxx	predictive	Low
326	Argument	xxxxx/xxxxxx_xx	predictive	High
327	Argument	xxxxxxx_xxxx	predictive	Medium
328	Argument	xxxxxxxxxx	predictive	Medium
329	Argument	xx	predictive	Low
330	Argument	xxxx xxxxxxx	predictive	Medium
331	Argument	xxxx_xx	predictive	Low
332	Argument	xxx_xxx_xxxxx	predictive	High
333	Argument	xxx	predictive	Low
334	Argument	xxxxxxxx	predictive	Medium
335	Argument	xxxxxxx	predictive	Low
336	Argument	xxxxx/xxxxxx	predictive	Medium
337	Argument	xxxx	predictive	Low
338	Argument	xxxxx_xxxx	predictive	Medium
339	Argument	xxxx	predictive	Low
340	Argument	xxxx	predictive	Low
341	Argument	xxxxx	predictive	Low
342	Argument	xxxxxxxxx_xxxxxxxx_xxxx	predictive	High
343	Argument	xxx_xxxx	predictive	Medium
344	Argument	xx_xxxxx	predictive	Medium
345	Argument	xxxx_xxxxxxxx/xxxxxx_xxxxxxxx/xxxxxx_xxxxxxxx	predictive	High
346	Argument	xxxx	predictive	Low
347	Argument	xxxx	predictive	Low
348	Argument	xxxx_xxxxxxxxxx	predictive	High
349	Argument	xxxx	predictive	Low
350	Argument	xx	predictive	Low
351	Argument	xxx	predictive	Low
352	Argument	xxxxxxx	predictive	Low
353	Argument	xxxxxx	predictive	Low
354	Argument	xxxxx	predictive	Low
355	Argument	xxx	predictive	Low
356	Argument	xxxx	predictive	Low
357	Argument	xxxxxxxx	predictive	Medium
358	Argument	xxxxxxxx	predictive	Medium
359	Argument	xxxx	predictive	Low
360	Argument	xxxx_xxxx	predictive	Medium
361	Argument	xxxxxxxxx	predictive	Medium
362	Argument	xxx_xxx	predictive	Low
363	Argument	xxxxxxxxxx	predictive	Medium
364	Argument	xxxxxxxxxx	predictive	Medium
365	Argument	xxxxxxxx_xx	predictive	Medium
366	Argument	xxxxxxxxxx	predictive	Medium
367	Argument	xxxxxxx	predictive	Low
368	Argument	xxx	predictive	Low
369	Argument	xxxxxx	predictive	Low
370	Argument	xxxxxxx	predictive	Low
371	Argument	xxxxxxxxxxxx_xx	predictive	High
372	Argument	xxxxxxxxxxxx	predictive	Medium
373	Argument	xxxxxxxxxx	predictive	Medium
374	Argument	xxxxxx	predictive	Low
375	Argument	xxxxxxxxxxx	predictive	Medium
376	Argument	xxxxxx_xxxxxxxx	predictive	High
377	Argument	xxxxxx_xxx	predictive	Medium
378	Argument	xxxxxxxx	predictive	Medium
379	Argument	xxxxxxx	predictive	Low
380	Argument	xxxxxxxx	predictive	Medium
381	Argument	xxxxxx	predictive	Low
382	Argument	xxxx.xxx/xxxx.xxx	predictive	High
383	Argument	xxxxxxx	predictive	Low
384	Argument	xxxxxxxx	predictive	Medium
385	Argument	xxxxxx_xxxx[]	predictive	High
386	Argument	xxxxxxx/xxxxxxx	predictive	High
387	Argument	xxxxxx	predictive	Low
388	Argument	xxx_xxxx	predictive	Medium
389	Argument	xxx	predictive	Low
390	Argument	xxxxxxxx	predictive	Medium
391	Argument	xxxx/xxxxxx xxxx	predictive	High
392	Argument	xxx	predictive	Low
393	Argument	xxxxx	predictive	Low
394	Argument	xxxxx/xxxx_xx/xxxxxx_xxxx/xxxxx/xxxx_xxxx/xxxx_xxxxx/xxxxx_xxxx/xxxxxxxxxxx/xxxxxxx_xxxx/xxxxxxx_xxxx/xxxxxxxx_xxxxxx/xxxxx_xxxx/xxxxxx	predictive	High
395	Argument	xxxxx/xxxxxxxxxxx	predictive	High
396	Argument	xxxx_xxx	predictive	Medium
397	Argument	xxxxxxxxx	predictive	Medium
398	Argument	xxxx	predictive	Low
399	Argument	xxx	predictive	Low
400	Argument	xxxx/xxxxxxxx	predictive	High
401	Argument	xxxxxxxxx	predictive	Medium
402	Argument	xxxxxx	predictive	Low
403	Argument	xxxxxxxx	predictive	Medium
404	Argument	xxxxxxxx	predictive	Medium
405	Argument	xxxxxxxx/xxxxxxxx	predictive	High
406	Argument	xxxxxxxx:xxxxxxxx	predictive	High
407	Argument	xxxxx	predictive	Low
408	Argument	xxxx_xxxxx	predictive	Medium
409	Argument	xxxx_xxxx	predictive	Medium
410	Argument	xx	predictive	Low
411	Argument	xxxxx	predictive	Low
412	Argument	xxx_xxx	predictive	Low
413	Argument	xxxxxxxx	predictive	Medium
414	Argument	x-xxxxxxxxx-xxx	predictive	High
415	Argument	xxxxx/xxxxx	predictive	Medium
416	Argument	xxx_xxxx	predictive	Medium
417	Input Value	"><xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
418	Input Value	' xx (xxxxxx xxxx xxxx(xxxxxx xxxxx(),xxxxxx(xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx,xxxxx(xxxx(x)x))x xxxx xxxxxxxxxxx_xxxxxx.xxxxxxx xxxxx xx x)x)-- xxxx	predictive	High
419	Input Value	-x	predictive	Low
420	Input Value	x" xxxxxxxxxxx=xxxxxx(xxxxxx) xxx="	predictive	High
421	Input Value	xxxx	predictive	Low
422	Input Value	xxxxx"][xxxxxx]xxxxx('xxx')[/xxxxxx]	predictive	High
423	Input Value	<xxxxxxx>xx	predictive	Medium
424	Input Value	<xxxxxx >xxxxx(xxx)</xxxxxx>	predictive	High
425	Input Value	xxxx -x xxxxxxxx=xxxxxx.xxxxxxx xxxx://xxx.xxx.x.x/xxxxxx.xxx	predictive	High
426	Input Value	xxxxxxxxx:xxxxxxxx	predictive	High
427	Input Value	xxxxxxxx	predictive	Medium
428	Pattern	\|xx\|xx\|xx\|	predictive	Medium
429	Network Port	xxxx/xxxxx	predictive	Medium
430	Network Port	xxx	predictive	Low
431	Network Port	xxx/xx (xxx xxxxxxxx)	predictive	High
432	Network Port	xxx/xxxxx	predictive	Medium
433	Network Port	xxx xxxxxx xxxx	predictive	High

References (17)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!