Phorpiex Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (215)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en178
ja14
zh8
pt4
pl4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us122
gb22
cn14
jp14
il6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

Unknown1

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined90
Content Management System22
Groupware Software6
Programming Language Software6
Application Server Software6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Not Defined90
Apache8
Oracle8
Cisco6
Synacor4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Drupal6
WordPress4
OpenResty4
Cisco Secure Client Software4
Nibbleblog2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1TikiWiki tiki-register.php input validation7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.0107510.00CVE-2006-6168
2CS-Cart index.php cross site scripting4.34.1$0-$5k$0-$5kHighOfficial Fix0.002970.00CVE-2008-1458
3H2 Database Engine CLI information disclosure6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.000420.07CVE-2022-45868
4Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.020160.00CVE-2007-1192
5Zscaler Client Connector Configuration File link following6.86.7$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.09CVE-2023-28797
6Cisco Secure Client Software denial of service5.55.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.04CVE-2023-20240
7gin Context.FileAttachment Privilege Escalation5.55.3$0-$5k$0-$5kNot DefinedNot Defined0.000620.03CVE-2023-29401
8Juniper Junos OS buffer overflow7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.000860.00CVE-2023-22416
9SnakeYAML Constructor deserialization8.18.1$0-$5k$0-$5kNot DefinedNot Defined0.008110.00CVE-2022-1471
10exceedone Exment/laravel-admin sql injection7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.001290.03CVE-2022-37333
11cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal6.36.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000790.07CVE-2022-4065
12Oracle Database Enterprise Edition Recovery EXECUTE ON DBMS_IR.EXECUTESQLSCRIPT Privilege Escalation7.27.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.001640.44CVE-2022-21511
13Visualizer Tables and Charts Manager Plugin deserialization7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.002310.00CVE-2022-2444
14Fortinet FortiOS CLI information disclosure4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000440.00CVE-2021-32600
15Lars Ellingsen Guestserver guestbook.cgi cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001690.07CVE-2005-4222
16DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009430.99CVE-2010-0966
17Apache HTTP Server Response Split data processing5.95.8$5k-$25k$0-$5kNot DefinedOfficial Fix0.002700.06CVE-2016-8743
18WordPress WP_Query class-wp-query.php sql injection8.58.4$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.003180.04CVE-2017-5611
19Drupal Session Data data processing8.17.7$0-$5k$0-$5kNot DefinedOfficial Fix0.042710.00CVE-2016-3171
20SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000450.11CVE-2024-1875

Campaigns (1)

These are the campaigns that can be associated with the actor:

  • Sextortion

IOC - Indicator of Compromise (154)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
12.61.176.216dynamic-2-61-176-216.pppoe.khakasnet.ruPhorpiex02/19/2022verifiedHigh
22.184.139.149Phorpiex02/19/2022verifiedHigh
35.232.28.65Phorpiex02/19/2022verifiedHigh
47.5.7.7Phorpiex04/28/2022verifiedHigh
517.42.251.10mx01.mail.icloud.comPhorpiex05/06/2022verifiedHigh
620.72.235.82Phorpiex02/19/2022verifiedHigh
720.109.209.108Phorpiex02/19/2022verifiedHigh
820.206.235.31Phorpiex07/09/2022verifiedHigh
924.201.245.37mx.videotron.caPhorpiex04/28/2022verifiedHigh
1031.59.189.431-59-189-4.shatel.irPhorpiex02/19/2022verifiedHigh
1134.212.80.54cxr.mx.a.cloudfilter.netPhorpiex04/28/2022verifiedHigh
1235.45.98.140Phorpiex07/09/2022verifiedHigh
1335.205.61.6767.61.205.35.bc.googleusercontent.comPhorpiex05/11/2022verifiedMedium
1435.225.160.245245.160.225.35.bc.googleusercontent.comPhorpiex04/28/2022verifiedMedium
1537.255.99.93Phorpiex02/19/2022verifiedHigh
1639.41.234.182Phorpiex02/19/2022verifiedHigh
1742.248.182.125Phorpiex02/19/2022verifiedHigh
1842.248.182.234Phorpiex02/19/2022verifiedHigh
1942.248.183.250Phorpiex02/19/2022verifiedHigh
2046.70.200.184Phorpiex02/19/2022verifiedHigh
2146.224.180.246Phorpiex02/19/2022verifiedHigh
2246.225.106.121Phorpiex02/19/2022verifiedHigh
2357.197.27.187Phorpiex07/09/2022verifiedHigh
2458.74.224.218Phorpiex07/09/2022verifiedHigh
2560.162.101.123Phorpiex07/09/2022verifiedHigh
2663.251.106.25Phorpiex07/22/2021verifiedHigh
2764.8.70.104mx.tds.netPhorpiex04/28/2022verifiedHigh
2864.98.36.4mx.b.hostedemail.comPhorpiex04/28/2022verifiedHigh
2964.136.44.37mx.dca.untd.comPhorpiex04/28/2022verifiedHigh
3066.199.229.25166-199-229-251.reverse.ezzi.netPhorpiex04/29/2022verifiedHigh
3166.218.85.151unknown.yahoo.comPhorpiex04/28/2022verifiedHigh
32XX.XXX.XXX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
33XX.XXX.XXX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
34XX.XXX.XXX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
35XX.XXX.XXX.XXxxxxxxxxx.xxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
36XX.XXX.XXX.XXxxxxxxxxx.xxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
37XX.XXX.XXX.XXxxxxxxxxx.xxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
38XX.XXX.XXX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
39XX.XXX.XXX.XXXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
40XX.XXX.XXX.XXXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
41XX.XXX.XXX.XXXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
42XX.XX.XX.Xxxxx-xxx.xxx.xxxxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
43XX.XXX.XXX.XXxxxxxxxxxxxx-xxx.xxxx.xxxx.xxxxxxxxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
44XX.XXX.XXX.XXxx.xxxxxxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
45XX.X.XXX.XXXxxxxxxx08/29/2021verifiedHigh
46XX.XXX.XXX.XXxxxxxxxx-xx-xx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
47XX.XXX.XXX.XXXxxxxxxxx-xx-xx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
48XX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
49XX.XXX.X.XXxxxx.xxxx.xxxXxxxxxxx05/06/2022verifiedHigh
50XX.XXX.XXX.XXXxxxx-xx-xxx-xxx-xxx.xxxxxxx.xxxXxxxxxxx07/09/2022verifiedHigh
51XX.XXX.XX.XXxxx-xxx-xx-xx.xxxxxxxx.xxxxx.xxXxxxxxxx07/09/2022verifiedHigh
52XX.XX.XXX.XXXxxxxxx.xx-xxx-xxx-xxx-xxx.xxxxxx.xxXxxxxxxx07/09/2022verifiedHigh
53XX.XXX.XX.XXXXxxxxxxx02/10/2022verifiedHigh
54XX.XXX.XX.XXXXxxxxxxx02/10/2022verifiedHigh
55XX.XXX.XX.XXXxxxx.xxxxxxxxxxxxxxxx.xxxXxxxxxxx02/10/2022verifiedHigh
56XX.XX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
57XX.XX.XXX.XXXxxxxxxx08/29/2021verifiedHigh
58XX.XX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
59XX.XX.XXX.XXXxxxxxxx08/29/2021verifiedHigh
60XX.XX.XXX.XXXXxxxxxxx02/10/2022verifiedHigh
61XX.XX.XXX.XXXXxxxxxxx02/10/2022verifiedHigh
62XX.XX.XXX.XXXXxxxxxxx07/22/2021verifiedHigh
63XX.XX.XXX.XXXXxxxxxxx07/09/2022verifiedHigh
64XX.XX.XXX.XXxx-xx-xxx-xx.xxxx.xxxxxxxxxx.xxXxxxxxxx02/10/2022verifiedHigh
65XX.XXX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
66XX.XXX.XX.XXXxx-xxx-xx-xxx.xxxxxx.xxXxxxxxxx02/19/2022verifiedHigh
67XX.XX.X.XXxx.xx.x.xx.xxxxxxx-xxxxx.xx.xxxx.xxxxx.xxXxxxxxxx02/10/2022verifiedHigh
68XX.XXX.XXX.XXxxxx-xx.xxx.xxxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
69XX.XXX.XX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
70XX.XXX.XX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
71XX.XXX.XX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
72XX.XXX.XX.XXxxxxxxxxx.xxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
73XXX.XX.XXX.XXXxxxxxxx07/09/2022verifiedHigh
74XXX.XX.X.XXXXxxxxxxx02/19/2022verifiedHigh
75XXX.XXX.XXX.XXXxxxxxxx07/09/2022verifiedHigh
76XXX.XX.XX.XXXxxxxxxx07/09/2022verifiedHigh
77XXX.XX.XX.XXXXxxxxxxx04/28/2022verifiedHigh
78XXX.XX.X.XXXxxxxxxx04/28/2022verifiedHigh
79XXX.XX.X.XXXxxxxxxx04/28/2022verifiedHigh
80XXX.XX.XX.XXXXxxxxxxx05/06/2022verifiedHigh
81XXX.XX.XX.XXXxxxxxxx04/28/2022verifiedHigh
82XXX.XX.XXX.XXxxxxxxxxx.xxxx.xxxx.xxx.xxx.xxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
83XXX.XXX.XXX.XXxxx-xxx-xxx-xx-xxxxxx.xxxxxxxxxx.xxxXxxxxxxx02/19/2022verifiedHigh
84XXX.XXX.XXX.XXXXxxxxxxx02/19/2022verifiedHigh
85XXX.XXX.XX.XXXXxxxxxxx02/10/2022verifiedHigh
86XXX.XXX.XXX.XXXXxxxxxxx02/19/2022verifiedHigh
87XXX.XX.XX.XXXXxxxxxxx07/09/2022verifiedHigh
88XXX.XXX.XXX.XXxxxxxxx07/09/2022verifiedHigh
89XXX.XX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
90XXX.XX.XXX.XXXXxxxxxxx07/09/2022verifiedHigh
91XXX.XXX.XX.XXxx.xxxxx.xxxXxxxxxxx02/10/2022verifiedHigh
92XXX.XXX.XXX.XXXXxxxxxxx07/09/2022verifiedHigh
93XXX.XXX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
94XXX.XXX.XXX.XXXxxxxxxx02/10/2022verifiedHigh
95XXX.XXX.XX.XXXxxxxxxx02/10/2022verifiedHigh
96XXX.XXX.XXX.XXXxxxxxxxxx.xxxx.xxXxxxxxxx07/09/2022verifiedHigh
97XXX.XXX.XXX.XXxxxxxx-xx.xxxxxxx.xxxXxxxxxxx04/29/2022verifiedHigh
98XXX.XXX.XXX.XXxxxxxx-xx.xxxxxxx.xxxXxxxxxxx04/29/2022verifiedHigh
99XXX.XXX.XXX.XXxx-xxx-xx-xxxx.xxxxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
100XXX.XXX.XXX.XXXxx-xxx-xx-xxxx.xxxxxxx.xxxXxxxxxxx05/06/2022verifiedHigh
101XXX.XXX.XX.XXXxxx-xxxxxx.xxxxxxx.xxxXxxxxxxx07/09/2022verifiedHigh
102XXX.XX.XX.XXXxxxxxxxxxxXxxxxxxx05/06/2022verifiedHigh
103XXX.XXX.XXX.XXXxxxxxxx07/09/2022verifiedHigh
104XXX.XX.XXX.XXXXxxxxxxx07/09/2022verifiedHigh
105XXX.XXX.XXX.XXXXxxxxxxx07/09/2022verifiedHigh
106XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxxxxxxxxx.xxx.xxXxxxxxxx07/09/2022verifiedHigh
107XXX.XXX.XX.XXXXxxxxxxx07/09/2022verifiedHigh
108XXX.XXX.XX.XXxxx-xxx-xx-xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxxxx02/10/2022verifiedHigh
109XXX.XXX.X.XXXxxxxxxxx-xx-xxxx.xxxxx.xxxXxxxxxxx04/29/2022verifiedHigh
110XXX.XXX.XXX.XXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
111XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
112XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
113XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
114XXX.XXX.X.XXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
115XXX.XXX.X.XXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
116XXX.XXX.XX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
117XXX.XXX.XX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
118XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
119XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
120XXX.XXX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
121XXX.XXX.XXX.XXXxx-xx-xxxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
122XXX.XXX.XXX.XXXxxxxxxx.xxx.xxxx.xxxXxxxxxxx07/22/2021verifiedHigh
123XXX.XX.XXX.XXXXxxxxxxx02/10/2022verifiedHigh
124XXX.XXX.XXX.XXXxxxxxxx02/19/2022verifiedHigh
125XXX.XXX.XX.XXXXxxxxxxxXxxxxxxxxx02/10/2022verifiedHigh
126XXX.XXX.XX.XXXXxxxxxxx02/10/2022verifiedHigh
127XXX.XXX.XXX.XXXxxxxxxx02/09/2022verifiedHigh
128XXX.XXX.XXX.XXXxxxxxxx02/09/2022verifiedHigh
129XXX.XXX.XXX.XXXxxxxxxx02/09/2022verifiedHigh
130XXX.XX.XXX.XXxxx-xx-xxx-xx.xxxxxxxxxx.xxxxx.xxxXxxxxxxx02/19/2022verifiedHigh
131XXX.XXX.XXX.XXXxxxx-xxx-xxx-xxx-xxx.xxxxxxx.xxXxxxxxxx02/19/2022verifiedHigh
132XXX.XXX.XXX.XXXXxxxxxxx02/19/2022verifiedHigh
133XXX.X.XX.XXXXxxxxxxx12/21/2023verifiedHigh
134XXX.XX.XXX.XXxxxxxxx.xxxxxxxxxxxxxxxx.xxxXxxxxxxxXxxxxxxxxx02/10/2022verifiedHigh
135XXX.XX.XXX.XXxxxxxxx.xxxxxxxxxxxxxxxx.xxxXxxxxxxxXxxxxxxxxx02/10/2022verifiedHigh
136XXX.XX.XXX.XXxxxxxxx.xxxxxxxxxxxxxxxx.xxxXxxxxxxxXxxxxxxxxx02/10/2022verifiedHigh
137XXX.X.XX.XXXXxxxxxxx07/09/2022verifiedHigh
138XXX.XXX.XXX.XXXxxxxxxx07/09/2022verifiedHigh
139XXX.XX.XX.XXxxxxxxxx.xxxx.xxxxxx.xxxxxxxxxxx.xxxXxxxxxxx04/29/2022verifiedHigh
140XXX.XXX.XXX.XXxx-xx-xxx-xx-xx-xx.xxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
141XXX.XXX.XX.XXXxxxxx.xxx-xxx-xx.xxxxxx.xxxxxxxxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
142XXX.XX.XXX.XXxx.xxxxxxxxxxxxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
143XXX.XX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
144XXX.XX.XXX.XXxx-xx-xxx.xxxxx.xxxXxxxxxxx07/22/2021verifiedHigh
145XXX.XXX.XXX.XXXXxxxxxxx02/10/2022verifiedHigh
146XXX.XX.XX.XXxx.xxx.xxxxxx.xxx.xxxxxx.xxxXxxxxxxx04/28/2022verifiedHigh
147XXX.XX.XXX.XXXxxx-xx-xxx-xxx.xxx.xxxxxxxxxxxx.xxXxxxxxxx05/06/2022verifiedHigh
148XXX.XXX.XX.Xxxxx.xxxx.xxx.xxxXxxxxxxx04/28/2022verifiedHigh
149XXX.XXX.XX.XXxxxx.xxx.xxxXxxxxxxx04/28/2022verifiedHigh
150XXX.XX.XXX.XXxxxxxxxx-xx-xxx.xxxxx.xxxXxxxxxxx04/29/2022verifiedHigh
151XXX.X.XXX.XXXxxxxxxx05/06/2022verifiedHigh
152XXX.X.XXX.XXXxxxxxxx05/11/2022verifiedHigh
153XXX.XX.XXX.XXXXxxxxxxx02/19/2022verifiedHigh
154XXX.XXX.XX.XXXxxxxxxx02/10/2022verifiedHigh

TTP - Tactics, Techniques, Procedures (15)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassVulnerabilitiesAccess VectorTypeConfidence
1T1006CAPEC-126CWE-22Path TraversalpredictiveHigh
2T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveHigh
3T1059CAPEC-242CWE-94, CWE-1321Argument InjectionpredictiveHigh
4TXXXX.XXXCAPEC-209CWE-XX, CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveHigh
5TXXXXCAPEC-122CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
6TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHigh
7TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveHigh
8TXXXXCAPEC-108CWE-XXXxx XxxxxxxxxpredictiveHigh
9TXXXXCAPEC-50CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveHigh
10TXXXX.XXXCAPEC-459CWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
11TXXXXCAPEC-116CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
12TXXXX.XXXCAPEC-CWE-XXXxxxxxxxxxxxxpredictiveHigh
13TXXXXCAPEC-20CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHigh
14TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHigh
15TXXXXCAPEC-CWE-XXXXxxxxxxxxxx XxxxxxpredictiveHigh

IOA - Indicator of Attack (126)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/admin/add-category.phppredictiveHigh
2File/admin/read.php?mudi=getSignalpredictiveHigh
3File/cgi-bin/system_mgr.cgipredictiveHigh
4File/cgi-bin/wlogin.cgipredictiveHigh
5File/cloud_config/router_post/get_reset_pwd_veirfy_codepredictiveHigh
6File/etc/tomcat8/Catalina/attackpredictiveHigh
7File/index.phppredictiveMedium
8File/librariespredictiveMedium
9File/proc/pid/attrpredictiveHigh
10File/register.phppredictiveHigh
11File/RestAPIpredictiveMedium
12File/service/uploadpredictiveHigh
13File/view/student_exam_mark_insert_form1.phppredictiveHigh
14File/wp-admin/admin-ajax.phppredictiveHigh
15Filexxxxxxx.xxxpredictiveMedium
16Filexxxxx.xxxpredictiveMedium
17Filexxxxx/xxxx_xxxxx_xxxx.xxxpredictiveHigh
18Filexxxxxx/xxxxxxxxx.xxpredictiveHigh
19Filexxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
20Filexxxxxxx.xxpredictiveMedium
21Filexx_xxxxx_xxxxx.xxxpredictiveHigh
22Filexx_xxxx.xxxpredictiveMedium
23Filexxxxxxx\xxxxxxxxxx\xxxxx\xxxxxx.xxxpredictiveHigh
24Filexxxxx.xxxpredictiveMedium
25Filexxxxxx.xxx.xxxpredictiveHigh
26Filexxxxxxxxxx.xpredictiveMedium
27Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
28Filexxxxx.xxxpredictiveMedium
29Filexxxxxxxxxxx_xxxxxxx_xx_xxxx_xxxx.xxx.xxxpredictiveHigh
30Filexxxxxxxx-xxxxxx-xxxxxx.xxxpredictiveHigh
31Filexxxxx/xxxxx_xxxx.xxxpredictiveHigh
32Filexxxxxx.xxxxpredictiveMedium
33Filexxxxxx.xxxpredictiveMedium
34Filexx/xxxx/xxxxxxxxxxx.xpredictiveHigh
35Filexxxxxxxx.xxxx.xxxpredictiveHigh
36Filexxxxxx_xxx.xxxpredictiveHigh
37Filexxxxxxxxx.xxxpredictiveHigh
38Filexxxx/xxxx.xpredictiveMedium
39Filexxx/xxxxxx.xxxpredictiveHigh
40Filexxxxx.xxxxpredictiveMedium
41Filexxxxx.xxpredictiveMedium
42Filexxxxx.xxxpredictiveMedium
43Filexxxxxx.xpredictiveMedium
44Filexxxxx.xxxxpredictiveMedium
45Filexxxxx_xx.xxxxpredictiveHigh
46Filexxxxxx_xxxx.xxxpredictiveHigh
47Filexx/xxxx.xpredictiveMedium
48Filexxx/xxxxxpredictiveMedium
49Filexxx_xxxx_xxx_xxxxxxxxxx.xpredictiveHigh
50Filexxxx-xxx.xxxpredictiveMedium
51Filexxxxxxxxxxxx.xxxxpredictiveHigh
52Filexxxxxxxx.xxxpredictiveMedium
53Filexxxxxxxx-xxx-xxxxxx.xpredictiveHigh
54Filexxx.xxxpredictiveLow
55Filexxxxxx/xxxxxxxxxx!xxxxxxx.xxxxpredictiveHigh
56Filexxxxxx/xxxxxxxx.xxxpredictiveHigh
57Filexxxxxxx.xxxpredictiveMedium
58Filexxx_xxxxxxxx.xxxpredictiveHigh
59Filexxxxx/xxxx/xxxxxxxx.xxxpredictiveHigh
60Filexxxxxxx_xxxxxxxx.xxxpredictiveHigh
61Filexxxxxx/xxxxxxx/xxxxxx/xxxxxxxx.xxxpredictiveHigh
62Filexxxxxxxxxxxxxxxxx.xxxxpredictiveHigh
63Filexxxxxxxxx/xxxxx/xxxx/xxx_xxxxxxx/xxxxxxx/xxxxxxx.xxxpredictiveHigh
64Filexxxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx.xxxxpredictiveHigh
65Filexxxx-xxxxxxxx.xxxpredictiveHigh
66Filexxxx-xxxx_xxxx_xxxxxxx.xxxpredictiveHigh
67Filexxxx-xxxxxxxx.xxxpredictiveHigh
68Filexxxxxxxxx.xxxxpredictiveHigh
69Filexxxxx/xxxxxxxx-xxxxxxxxx.xxxpredictiveHigh
70Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveHigh
71Filexx-xxxxx.xxxpredictiveMedium
72Filexx/xx/xxxxxpredictiveMedium
73File\xxxx\xxxxxxxxxx\xxxx.xxxpredictiveHigh
74Library/xxx/xxxx/xxxxx.x/xx-xxxx-xxxxxxx.xxxxxpredictiveHigh
75Libraryxxx/xx/xxxxxxx.xxpredictiveHigh
76Libraryxxx/xxxxxxx/xx.xpredictiveHigh
77Libraryxxx.xxxxxx.xxxxxx.xxxxxx.xxxx.xxxxxxxxx.xxxxxxpredictiveHigh
78Argumentxx/xxpredictiveLow
79Argumentxx_xxpredictiveLow
80ArgumentxxxxxxxxpredictiveMedium
81ArgumentxxxxxpredictiveLow
82Argumentxxxxxxxxxx_xxxxpredictiveHigh
83ArgumentxxxxxxxxxxpredictiveMedium
84ArgumentxxxxxpredictiveLow
85ArgumentxxxxxpredictiveLow
86Argumentxxx_xxpredictiveLow
87ArgumentxxxxxxxpredictiveLow
88ArgumentxxxxxxxpredictiveLow
89ArgumentxxxxpredictiveLow
90ArgumentxxxxpredictiveLow
91ArgumentxxxxxxxxxxxpredictiveMedium
92ArgumentxxxpredictiveLow
93Argumentxxxxxxxxxxx_xxxpredictiveHigh
94Argumentxxxxx_xxxpredictiveMedium
95ArgumentxxxxxxxxpredictiveMedium
96Argumentxxxxxxxxx/xxxxxxpredictiveHigh
97ArgumentxxxxpredictiveLow
98ArgumentxxxxxpredictiveLow
99ArgumentxxxxpredictiveLow
100ArgumentxxxxpredictiveLow
101Argumentxxxx_xxxxxxxpredictiveMedium
102ArgumentxxpredictiveLow
103Argumentxx/xxx/xxxxxpredictiveMedium
104Argumentxxxxx.xxx?xxxxxx=xxx_xxxxxxx/xxxx=xxxxxxx/xx=x/xxxxxxxx=xxxxxpredictiveHigh
105ArgumentxxxxxxxxpredictiveMedium
106Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictiveHigh
107ArgumentxxxxpredictiveLow
108ArgumentxxxxpredictiveLow
109ArgumentxxxxxpredictiveLow
110ArgumentxxxxxxxxpredictiveMedium
111Argumentxxxx_xxxxxxpredictiveMedium
112Argumentxxxxx_xxxx_xxxxpredictiveHigh
113ArgumentxxxpredictiveLow
114ArgumentxxxxxxxxxxxpredictiveMedium
115Argumentxxxxxx_xxxxpredictiveMedium
116ArgumentxxxxxxxxpredictiveMedium
117ArgumentxxxxxxxxxpredictiveMedium
118Argumentxxxxxxxx_xxxxxx_xxxxxpredictiveHigh
119ArgumentxxxxxxxxxpredictiveMedium
120ArgumentxxxxxxxxxpredictiveMedium
121ArgumentxxxpredictiveLow
122ArgumentxxxxpredictiveLow
123ArgumentxxxxxpredictiveLow
124ArgumentxxxpredictiveLow
125Argumentx-xxxxpredictiveLow
126Input ValuexxxxxxxxxxxxpredictiveMedium

References (17)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!