Aspxor Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (6)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	6

Country

us	6

Actors

Kuluoz	1
Aspxor	1

Activities

Interest

Timeline

Type

Groupware Software	2
Operating System	2
Web Server	2

Vendor

Microsoft	2
Apple	2
Apache	2

Product

Microsoft SharePoint Server	2
Apple macOS	2
Apache HTTP Server	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Apple macOS WebKit use after free	6.3	6.0	$5k-$25k	$0-$5k	High	Official Fix	0.00111	0.00	CVE-2023-32373
2	WP Rocket Plugin path traversal	6.4	6.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00154	0.04	CVE-2017-11658
3	Microsoft Exchange Server PowerShell ProxyNotShell Privilege Escalation	7.7	7.3	$5k-$25k	$0-$5k	High	Official Fix	0.10698	0.00	CVE-2022-41082
4	Wireshark UMTS FP Dissector packet-umts_fp.c dissect_hsdsch_channel_info input validation	5.4	5.3	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00247	0.00	CVE-2015-8712
5	Microsoft SharePoint Server Privilege Escalation	8.8	8.1	$25k-$100k	$0-$5k	Unproven	Official Fix	0.01938	0.00	CVE-2022-22005
6	Apache HTTP Server Proxy null pointer dereference	6.7	6.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.30749	0.04	CVE-2021-44224

IOC - Indicator of Compromise (15)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	46.55.222.24		Aspxor	04/12/2022	verified	High
2	74.125.155.201		Aspxor	05/06/2022	verified	High
3	82.116.211.16	is.ouc.ac.cy	Aspxor	04/12/2022	verified	High
4	XX.XXX.XXX.XX		Xxxxxx	04/12/2022	verified	High
5	XXX.XXX.XXX.XX	xx-xx-xxx.xxxxx.xxx	Xxxxxx	05/06/2022	verified	High
6	XXX.XXX.XXX.XXX	xx-xx-xxxx.xxxxx.xxx	Xxxxxx	05/06/2022	verified	High
7	XXX.XXX.XXX.XXX	xx-xx-xxxx.xxxxx.xxx	Xxxxxx	05/06/2022	verified	High
8	XXX.XXX.XXX.XX	xxxxxxxx-xx-xxx.xxxxx.xxx	Xxxxxx	05/06/2022	verified	High
9	XXX.XXX.XXX.XX	xx-xx-xxx.xxxxx.xxx	Xxxxxx	05/06/2022	verified	High
10	XXX.XXX.XXX.XX		Xxxxxx	04/12/2022	verified	High
11	XXX.XX.XXX.X		Xxxxxx	04/12/2022	verified	High
12	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxxx.xxxxxxxxxxxx.xxx	Xxxxxx	04/12/2022	verified	High
13	XXX.XXX.XXX.XX	xxxx-xx.xxxxxxxxxxxx.xxx	Xxxxxx	04/12/2022	verified	High
14	XXX.XXX.XX.XXX	xxxxxxxx.xx	Xxxxxx	04/12/2022	verified	High
15	XXX.XXX.XXX.XX		Xxxxxx	04/12/2022	verified	High

TTP - Tactics, Techniques, Procedures (1)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High

IOA - Indicator of Attack (2)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	epan/dissectors/packet-umts_fp.c	predictive	High
2	Input Value	.%xx.../.%xx.../	predictive	High

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!