BackdoorDiplomacy Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	692
zh	180
de	30
es	20
ja	20

Country

us	350
cn	298
de	18
es	16
ru	14

Actors

BackdoorDiplomacy	9
Cobalt Strike	4
Nanocore RAT	1
RedLine Stealer	1
QakBot	1

Activities

Interest

Timeline

Type

Not Defined	382
Router Operating System	44
Content Management System	42
Operating System	40
WordPress Plugin	38

Vendor

Not Defined	302
Microsoft	46
Google	32
Qualcomm	28
Cisco	20

Product

Qualcomm Snapdragon Auto	28
Qualcomm Snapdragon Industrial IOT	28
Microsoft Windows	26
Qualcomm Snapdragon Compute	26
Qualcomm Snapdragon Consumer IOT	26

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	8.55	CVE-2006-6168
2	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.75	CVE-2010-0966
3	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.79
4	ALPACA improper authentication	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00110	0.08	CVE-2021-3618
5	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.90	CVE-2020-12440
6	SolarWinds Network Performance Monitor deserialization	9.8	9.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.69184	0.00	CVE-2021-31474
7	Huawei ACXXXX/SXXXX SSH Packet input validation	7.5	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00246	0.07	CVE-2014-8572
8	MantisBT cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00482	0.05	CVE-2014-9571
9	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	2.22	CVE-2020-15906
10	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.63	CVE-2007-0354
11	jforum User input validation	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.04	CVE-2019-7550
12	Apple Mac OS X Server Wiki Server cross site scripting	4.3	4.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00263	0.04	CVE-2009-2814
13	AMI Megarac API password recovery	7.4	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00187	0.04	CVE-2022-26872
14	Serendipity exit.php privileges management	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00000	0.36
15	vBulletin redirector.php	6.6	6.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00106	0.05	CVE-2018-6200
16	Phpsugar PHP Melody page_manager.php cross site scripting	5.2	4.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00087	0.00	CVE-2017-15648
17	TP-Link TL-WR902AC dm_fillObjByStr stack-based overflow	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00172	0.01	CVE-2022-25074
18	Netgear WN604/WN802Tv2/WNAP210/WNAP320/WNDAP350/WNDAP360 boardDataWW.php command injection	9.8	9.8	$5k-$25k	$0-$5k	High	Not Defined	0.97373	0.08	CVE-2016-1555
19	TRENDnet TV-IP110WN/TV-IP121WN network.cgi memory corruption	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00260	0.02	CVE-2018-19240
20	Hex-Rays SA IDA .NET Processor Module Remote Code Execution	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.00

Campaigns (1)

These are the campaigns that can be associated with the actor:

Middle East

IOC - Indicator of Compromise (26)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Campaigns	Identified	Type	Confidence
1	23.83.224.178	23.83.224.178.16clouds.com	BackdoorDiplomacy		06/11/2021	verified	High
2	23.106.140.207	23.106.140.207.16clouds.com	BackdoorDiplomacy		06/11/2021	verified	High
3	23.228.203.130	unassigned.psychz.net	BackdoorDiplomacy		06/11/2021	verified	High
4	23.247.47.252		BackdoorDiplomacy		06/11/2021	verified	High
5	43.225.126.179		BackdoorDiplomacy		06/11/2021	verified	High
6	43.251.105.139		BackdoorDiplomacy		06/11/2021	verified	High
7	XX.XXX.XXX.XXX		Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
8	XX.XXX.XXX.XXX		Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
9	XX.XX.XXX.XX	xx.xx.xxx.xx.xxxxx.xxx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	Medium
10	XX.XX.XXX.XX	xx.xx.xxx.xx.xxxxx.xxx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	Medium
11	XX.XX.XXX.XXX	xx.xx.xxx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
12	XX.XXX.XXX.XXX	xx.xxx.xxx.xxx.xxxxx.xxx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	Medium
13	XX.XXX.XXX.XX	xx.xxx.xxx.xx.xxxxx.xxx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	Medium
14	XXX.XXX.XX.XXX		Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
15	XXX.XXX.XXX.XX	xxx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
16	XXX.XX.XX.XXX	xxx.xx.xx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
17	XXX.XX.XXX.XX		Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
18	XXX.XX.XXX.XX		Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
19	XXX.XXX.XXX.XXX		Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
20	XXX.XXX.XXX.XXX		Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
21	XXX.XX.XXX.XX		Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
22	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
23	XXX.XXX.X.XX	xxx.xxx.x.xx.xxxxx.xxx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	Medium
24	XXX.XXX.XX.XX	xxx.xxx.xx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High
25	XXX.XXX.X.XX	xxxxxxxxxxxxxx.xxxxxxx.xx	Xxxxxxxxxxxxxxxxx		06/11/2021	verified	High
26	XXX.XX.XX.XX	xxx.xx.xx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxxxxxxxxx	Xxxxxx Xxxx	12/17/2022	verified	High

TTP - Tactics, Techniques, Procedures (26)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-24, CWE-425	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CAPEC-104	CWE-250, CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
7	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
10	TXXXX	CAPEC-	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
12	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
13	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
19	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
23	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
24	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
25	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
26	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (390)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/+CSCOE+/logon.html	predictive	High
2	File	/act/ActDao.xml	predictive	High
3	File	/administrator/components/table_manager/	predictive	High
4	File	/ajax.php?action=read_msg	predictive	High
5	File	/ajax/networking/get_netcfg.php	predictive	High
6	File	/api/clusters/local/topics/{topic}/messages	predictive	High
7	File	/api/gen/clients/{language}	predictive	High
8	File	/API/info	predictive	Medium
9	File	/app/options.py	predictive	High
10	File	/bin/httpd	predictive	Medium
11	File	/cgi-bin/wapopen	predictive	High
12	File	/ci_spms/admin/category	predictive	High
13	File	/ci_spms/admin/search/searching/	predictive	High
14	File	/classes/Master.php?f=delete_appointment	predictive	High
15	File	/classes/Master.php?f=delete_train	predictive	High
16	File	/concat?/%2557EB-INF/web.xml	predictive	High
17	File	/Content/Template/root/reverse-shell.aspx	predictive	High
18	File	/ctcprotocol/Protocol	predictive	High
19	File	/dashboard/menu-list.php	predictive	High
20	File	/data/remove	predictive	Medium
21	File	/debug/pprof	predictive	Medium
22	File	/ebics-server/ebics.aspx	predictive	High
23	File	/ffos/classes/Master.php?f=save_category	predictive	High
24	File	/filemanager/upload/drop	predictive	High
25	File	/forum/away.php	predictive	High
26	File	/goform/net\_Web\_get_value	predictive	High
27	File	/goforms/rlminfo	predictive	High
28	File	/GponForm/usb_restore_Form?script/	predictive	High
29	File	/group1/uploa	predictive	High
30	File	/hedwig.cgi	predictive	Medium
31	File	/HNAP1	predictive	Low
32	File	/HNAP1/SetClientInfo	predictive	High
33	File	/index.php/newsletter/subscriber/new/	predictive	High
34	File	/Items/*/RemoteImages/Download	predictive	High
35	File	/manage/IPSetup.php	predictive	High
36	File	/menu.html	predictive	Medium
37	File	/mkshop/Men/profile.php	predictive	High
38	File	/modules/profile/index.php	predictive	High
39	File	/nagiosxi/admin/banner_message-ajaxhelper.php	predictive	High
40	File	/navigate/navigate_download.php	predictive	High
41	File	/novel/bookSetting/list	predictive	High
42	File	/ocwbs/admin/?page=user/manage_user	predictive	High
43	File	/ofrs/admin/?page=user/manage_user	predictive	High
44	File	/out.php	predictive	Medium
45	File	/password.html	predictive	High
46	File	/xxxxxxx/xxxxxxxxxxx.xxx	predictive	High
47	File	/xxx_xxxxxx/xxxxxxxxxxxxxxxxx.xxx	predictive	High
48	File	/xxxxxx	predictive	Low
49	File	/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxx/	predictive	High
50	File	/xxx/xxxxxx/xxxxxxxx	predictive	High
51	File	/xxxxxxxx-xxxx/xxxxxxxx_xxxx.xxx	predictive	High
52	File	/xxxx/xxxxxxx/xxxxx.xxx	predictive	High
53	File	/xxxxxxxxx//../	predictive	High
54	File	/xxxx/xxx/x/xxxxxx	predictive	High
55	File	/xxxxxxx/xxxx_xxxxxx	predictive	High
56	File	/xxxxxx/xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
57	File	/xxxx.xxx	predictive	Medium
58	File	/xxxxxxxx-xxxx/xxx/xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
59	File	/xxx/xxxx/xxxxxxxxxxxxxx	predictive	High
60	File	/xxx	predictive	Low
61	File	/xxxxxxx/	predictive	Medium
62	File	/xxxxxxxx_xxxxx/?x=xxxx_xxxxxxx	predictive	High
63	File	/xxxx/?xxxx=xx_xxxxxxxx	predictive	High
64	File	/xxxx/xxxxx/?xxxx=xxxx	predictive	High
65	File	/xx-xxxx	predictive	Medium
66	File	x.xxx.xxx\xxxx\xxxxxxxx.xxx	predictive	High
67	File	xxx.xxx	predictive	Low
68	File	xxxxxxx.xxx	predictive	Medium
69	File	xxxxx/?xxxx=xxxxxxx	predictive	High
70	File	xxxxx/xxx.xxx	predictive	High
71	File	xxxxx/xxxx_xxxxx_xxxx.xxx	predictive	High
72	File	xxxxx/xx_xxxxxxxx.xxx	predictive	High
73	File	xxxxx/xxxx-xxxxx.xxx	predictive	High
74	File	xxxxx/xxxxx.xxx	predictive	High
75	File	xxxxx/xxxxxxxxxx/xxxxxxxx.xxx	predictive	High
76	File	xxxxx/xxxxxxxx/xxxx_xxxxxxx.xxx	predictive	High
77	File	xxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
78	File	xxxxx/xxxxxxxx.xxxx	predictive	High
79	File	xxxxxxxxxxxxx/xxxxxxxxxx/xxx_xxxxx/xxxxxxx/xxxxx.xxx	predictive	High
80	File	xxxx_xxxxxxx.xxx	predictive	High
81	File	xxx/xxx/xxxxx	predictive	High
82	File	xxx/xxxxxxxxxxx/xxxx/xxxxxxxx_xxxxxxxxxx.xx	predictive	High
83	File	xxxxxx/xxxxxxxxx.xx	predictive	High
84	File	xxxxxxxxxxxxxx.xxx	predictive	High
85	File	xxxx.xxx_xxxxx_xxxx_xxxx-xxxx.xxx	predictive	High
86	File	xxxx/xxxxx	predictive	Medium
87	File	xxxxxxx.xx	predictive	Medium
88	File	xxxxxx.xxxx	predictive	Medium
89	File	xxxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx/xxxxxxxxxxx.xxx	predictive	High
90	File	xxx_xxxxxxxxx.xxx	predictive	High
91	File	xxxxxxxxx.xxx	predictive	High
92	File	xx_xxxx.xxx	predictive	Medium
93	File	xxxxxxxxxx_xxxxx.xxx	predictive	High
94	File	xxx.xxxx	predictive	Medium
95	File	xxxxx.xxx	predictive	Medium
96	File	xx.xxxxxx.xxxx.xxxx.xxxxxxx.xxxx	predictive	High
97	File	xxxxxx/xxx.x	predictive	Medium
98	File	xxxx_xxxxxxxx/xx.xxx	predictive	High
99	File	xxxx_xxxx.xxx	predictive	High
100	File	xxxxxxxxxxx.x	predictive	High
101	File	xxxxxxx.xxxxxxxx.xxx	predictive	High
102	File	xxxx.xx	predictive	Low
103	File	x_xxxxxx	predictive	Medium
104	File	xxxxxxxxxxxxxxx.xxxx	predictive	High
105	File	xx.xxx	predictive	Low
106	File	xxxxxxx.xxxxx.xxx	predictive	High
107	File	xxxxxxxxxxxx.xxx	predictive	High
108	File	xxxx_xxxx.xxx	predictive	High
109	File	xxxxxxxx_xxxxx_xxxxxxxxx.xxx	predictive	High
110	File	xxxx-xxxxxxx.xxx	predictive	High
111	File	xxxxxxxx.xxx	predictive	Medium
112	File	xxxxx.xxx	predictive	Medium
113	File	xxxxxxx.xxx	predictive	Medium
114	File	xxxx-xxxxx.x	predictive	Medium
115	File	xxxx.x	predictive	Low
116	File	xxxx.xxx	predictive	Medium
117	File	xxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
118	File	xxxxxx_xxxxxxx.xxx	predictive	High
119	File	xxxxxxxx.xxxx	predictive	High
120	File	xx_xxxx.xxx	predictive	Medium
121	File	xxxxxxxxx.xxx.xxx	predictive	High
122	File	xxxxxxxxxx.xxx	predictive	High
123	File	xxxxx.xxx	predictive	Medium
124	File	xxxxxxxxxxxxxxxxx.xxxx	predictive	High
125	File	xxxx.xxx	predictive	Medium
126	File	xxxxxxxx/xxxx_xxxx	predictive	High
127	File	xxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
128	File	xxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
129	File	xxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
130	File	xxxx.xxx	predictive	Medium
131	File	xxxx-xxxx.xx	predictive	Medium
132	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
133	File	xxxx.xx	predictive	Low
134	File	xxxxxxxxxxxxxx.xxx	predictive	High
135	File	xxx/xxxxxx.xxx	predictive	High
136	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
137	File	xxxxxxx/xxxxxxxxxx.xxx	predictive	High
138	File	xxxxx.xxxx	predictive	Medium
139	File	xxxxx.xx	predictive	Medium
140	File	xxxxx.xxx	predictive	Medium
141	File	xxxxx_xxxxxx_xxxxxxxxxx.xxx	predictive	High
142	File	xxxxxxx.x	predictive	Medium
143	File	xxxxxxxx/xx/xxxx_xxxxxx.xx	predictive	High
144	File	xxxxx.xxx	predictive	Medium
145	File	xxx.x	predictive	Low
146	File	xxxx.xxx	predictive	Medium
147	File	xxxx_xxxx.xxx	predictive	High
148	File	xxx_xxxxxx_xxxxxx.xx	predictive	High
149	File	xxxx.x	predictive	Low
150	File	xxxxxxxxx/xxxxxxx/xxxxx.xxx	predictive	High
151	File	xxxxxx/xxxxxx/xxxxxx-xx.x	predictive	High
152	File	xxxxxxxxxxxx/xxxxxx_xxxxx.xx	predictive	High
153	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxx	predictive	High
154	File	xxxx/xxxxxxxx/xxxxxx_xxxxxxxx.x	predictive	High
155	File	xxxxxxxxxxxx_xxx.xx	predictive	High
156	File	xxxxx.xxx	predictive	Medium
157	File	xxxxx.xxx	predictive	Medium
158	File	xxxxx/	predictive	Low
159	File	xxxxx_xxx	predictive	Medium
160	File	xxxxx/xxxxxxxx/xxxxxxxx.xx	predictive	High
161	File	xxxxxxx.xxx	predictive	Medium
162	File	xxx_xxxxxx.x	predictive	Medium
163	File	xxx_xxxxx.x	predictive	Medium
164	File	xxxxxx/xxxxxx.xxx	predictive	High
165	File	xxxxxxxx.xx	predictive	Medium
166	File	xxxxxxxxxxxxxxx.xxxx	predictive	High
167	File	xx-xxxxxxx.xxx	predictive	High
168	File	xxx_xx/xxx_xx_xxxxxx.x	predictive	High
169	File	xxxxxxx.xxx	predictive	Medium
170	File	xxxx.xxx	predictive	Medium
171	File	xxxx_xxxx.xxx	predictive	High
172	File	xxxxxxxxx.xxx	predictive	High
173	File	xxxxxx.xxx	predictive	Medium
174	File	xxxxx.xxxx_xxxx.xxx	predictive	High
175	File	xxxx_xxxxxxx.xxx	predictive	High
176	File	xxx_xxxxxx.xx	predictive	High
177	File	xxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
178	File	xxxxxxxxx.xxx.xxx	predictive	High
179	File	xxx/xxxxxx_xxxx.xxx	predictive	High
180	File	xxxxx/xxxxxxxx/xxx/xxx_xxxxx.xxx	predictive	High
181	File	xxxxxxxx.xxx	predictive	Medium
182	File	xxxxxxxxx.xxx	predictive	High
183	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	High
184	File	xxxx.xxx	predictive	Medium
185	File	xxxxxxx.xxx	predictive	Medium
186	File	xxxxxxxx.xxx	predictive	Medium
187	File	xxxxxxxxxxxxxx.xxx	predictive	High
188	File	xxxxx-xxxxxxxx-xxxxxxxxx.xxx	predictive	High
189	File	xxxx.xxx	predictive	Medium
190	File	xxxxx.xxx	predictive	Medium
191	File	xxxxxxxxxx.xxx	predictive	High
192	File	xxxxxxxx.xxx	predictive	Medium
193	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
194	File	xxxxxx.x	predictive	Medium
195	File	xxxxxxx.x	predictive	Medium
196	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	High
197	File	xxxxxx/xxxxxxxx.xxx	predictive	High
198	File	xxxxxx_xxx_xxxxxx.xxx	predictive	High
199	File	xxxx.xxx	predictive	Medium
200	File	xxxx.xxx	predictive	Medium
201	File	xxxx/xxxxx.xxx	predictive	High
202	File	xxxx/xxxx.xxx	predictive	High
203	File	xxxx_xxxx.xxx	predictive	High
204	File	xxxxxxx.xxx	predictive	Medium
205	File	xxx/xxxxxxx/xxx_xxxx.x	predictive	High
206	File	xx_xxxx/xxxx_xxxx.x	predictive	High
207	File	xx_xxxx/xxxxxxxxxxxxxxxx.x	predictive	High
208	File	xxx_xxxxx.x	predictive	Medium
209	File	xxxxxxx.xxx	predictive	Medium
210	File	xxxxxxx-xxxxxxx.xxx	predictive	High
211	File	xxxxxxxx.xxx	predictive	Medium
212	File	xxxxxx\xxxxxxxx\xx_xxxxx_xxxxxxx.xxx	predictive	High
213	File	xxxxxxx.xxx	predictive	Medium
214	File	xxxx/xxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
215	File	xxxx-xxxxx.xxx	predictive	High
216	File	xxxx-xxxxxxxx.xxx	predictive	High
217	File	xxxxx/xxxx_xxxxx.x	predictive	High
218	File	xxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	High
219	File	xxxxxxxxx	predictive	Medium
220	File	xxxxxxx_xxxxx.xxx	predictive	High
221	File	xxxx.xxxx	predictive	Medium
222	File	xxxxxxxxx.xxx	predictive	High
223	File	xxxxx.xxx	predictive	Medium
224	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
225	File	xxxx\xxxxxxxxxx\xxxxxxx_xxxxxxxxx.xxx	predictive	High
226	File	xxxxx.x	predictive	Low
227	File	xxxx-xxxxx-xxxxxxx.xxx	predictive	High
228	File	xxxxx.xxx	predictive	Medium
229	File	xx/xxxxx/xxxxxxxx/xxxxxxxxxx-xxxx?xxxxxxxxx_xxxxxxxxx_xxxxxx[][xxxxxxxx]	predictive	High
230	File	xxx/xxxxxx/xxxxxxxxxxxxx.xxx	predictive	High
231	File	xxxxxxx-xxxx.xxx	predictive	High
232	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
233	File	xxxxxx.xxx	predictive	Medium
234	File	xxxxxx.xxxx	predictive	Medium
235	File	\xxxxx\xxxxxxxxxx\xxxxxxxx.xxx	predictive	High
236	File	~/xxxxx/xxxxx-xxxxxxx-xxxxx-xxxxx.xxx	predictive	High
237	File	~/xxxxxx/xxxx/xxxxxxxx-xxxx.xxx	predictive	High
238	File	~/xxxxxxxx-xxxxxxxx.xxx	predictive	High
239	File	~/xxxxxxxx/xxxxx/xxxxx-xx-xxxxxx-xxxxx-xxxx-xxxx.xxx	predictive	High
240	File	~/xxxxxx-xxxxx-xxxxxxx.xxx	predictive	High
241	Library	xxxxxx.xxx	predictive	Medium
242	Library	xxxx/xxx/xxxxxx.xxx	predictive	High
243	Library	xxxxx.xxx	predictive	Medium
244	Library	xxx/xxxxxxx.xx	predictive	High
245	Library	xxxxxxx/xxxxxxxx.xxx	predictive	High
246	Library	xxx/xxx/xxx/xxxxxx/xxxxx/xxxxxxxxx.xxxxx.xxx	predictive	High
247	Argument	$_xxxxxx['xxx_xxxx']	predictive	High
248	Argument	?xxxxxx	predictive	Low
249	Argument	xx_xxxxx_xxx_xxxx	predictive	High
250	Argument	xxxxx	predictive	Low
251	Argument	xxxxx_xxxxxxxx	predictive	High
252	Argument	xxx	predictive	Low
253	Argument	xxxx(xxxx_xxxx)	predictive	High
254	Argument	xxxxx	predictive	Low
255	Argument	xxx_xxxxx_xxxx	predictive	High
256	Argument	xxxxxxxx	predictive	Medium
257	Argument	xxxxxxx_xx	predictive	Medium
258	Argument	xxxxxxxxxx_xxxx	predictive	High
259	Argument	xxx	predictive	Low
260	Argument	xxxxxxxxxx	predictive	Medium
261	Argument	xxxx_xx	predictive	Low
262	Argument	xxxxxx	predictive	Low
263	Argument	xxxxxxx	predictive	Low
264	Argument	xxxxxxx-xxxxxx	predictive	High
265	Argument	xxxxxxx-xxxxxxxx-xxxxxx	predictive	High
266	Argument	xxxxx_xx	predictive	Medium
267	Argument	xxxx_xxxxx	predictive	Medium
268	Argument	xxxxx$xxxxxxxxxxxxxx$xxxxxxxxxxx	predictive	High
269	Argument	xxxx	predictive	Low
270	Argument	xxxx_xxxx	predictive	Medium
271	Argument	xxxxxxxxxxx	predictive	Medium
272	Argument	xxxx	predictive	Low
273	Argument	xxxx_xxxxxx=xxxx	predictive	High
274	Argument	xxxxx	predictive	Low
275	Argument	xxxxxx	predictive	Low
276	Argument	xxxx	predictive	Low
277	Argument	xxxxxxxxxx	predictive	Medium
278	Argument	xxxxxxxx	predictive	Medium
279	Argument	xxxxxxxx	predictive	Medium
280	Argument	xxxxxxxxxxxxxxx	predictive	High
281	Argument	xxxxx	predictive	Low
282	Argument	xxxxx xxxx/xxxx xxxx	predictive	High
283	Argument	xxxx	predictive	Low
284	Argument	xxxxxxxx_xxxxxxx	predictive	High
285	Argument	xxxx	predictive	Low
286	Argument	xxxxxxxxxxxxxx	predictive	High
287	Argument	xx	predictive	Low
288	Argument	xx	predictive	Low
289	Argument	xx/xxxxx	predictive	Medium
290	Argument	xx_xxxxxxxx	predictive	Medium
291	Argument	xxxxx	predictive	Low
292	Argument	xxxxxxxx	predictive	Medium
293	Argument	xxxxxx	predictive	Low
294	Argument	xxxx	predictive	Low
295	Argument	xxxx/xxx_xxxxxxxxx	predictive	High
296	Argument	xxxxxxxx_xxx	predictive	Medium
297	Argument	xxxx	predictive	Low
298	Argument	xxxxxxxxxx	predictive	Medium
299	Argument	xxxxxxxx	predictive	Medium
300	Argument	xxx	predictive	Low
301	Argument	xxxxxxx	predictive	Low
302	Argument	xxx	predictive	Low
303	Argument	xxxx	predictive	Low
304	Argument	xxxx/xxxxxxxxxxx	predictive	High
305	Argument	xxxxxxx/xxxxxxx	predictive	High
306	Argument	xxxxxxxx	predictive	Medium
307	Argument	xx_xx	predictive	Low
308	Argument	xxxxxx xxxxxx	predictive	High
309	Argument	xxxxxxxxxxx	predictive	Medium
310	Argument	xxxxx_xx	predictive	Medium
311	Argument	xxxxxxxxxx	predictive	Medium
312	Argument	xxxx	predictive	Low
313	Argument	xxxxxx	predictive	Low
314	Argument	xxxxxx	predictive	Low
315	Argument	xxxxxxxx/xxxxxx	predictive	High
316	Argument	xxxx_xxxx	predictive	Medium
317	Argument	xxxx_xxxxx	predictive	Medium
318	Argument	xxx	predictive	Low
319	Argument	xxxxxx	predictive	Low
320	Argument	xxxxxxxx	predictive	Medium
321	Argument	xxxx	predictive	Low
322	Argument	xxxxxxxx	predictive	Medium
323	Argument	xxxxxxxxx	predictive	Medium
324	Argument	xxxxxxx	predictive	Low
325	Argument	xxx_xxxxxx_xxxx	predictive	High
326	Argument	xxxxxxxx	predictive	Medium
327	Argument	xx_xxxx_xxxxxx/xx_xxxxx_xxxxx	predictive	High
328	Argument	xxxxxxx xxxxx	predictive	High
329	Argument	xxxxx	predictive	Low
330	Argument	xxxxxx	predictive	Low
331	Argument	xxxxx-xxxxxxxxxxxxx	predictive	High
332	Argument	xxxxx_xxxxxx	predictive	Medium
333	Argument	xxxxxxxx_xx	predictive	Medium
334	Argument	xxxxxxx	predictive	Low
335	Argument	xxxxxxxxxx	predictive	Medium
336	Argument	xxxxxxxxxxxxxx	predictive	High
337	Argument	xxxxxxxxxx	predictive	Medium
338	Argument	xxxxxx	predictive	Low
339	Argument	xxxxxxxxxxxxxxx	predictive	High
340	Argument	xxxxxx/xxxxxx/xxx	predictive	High
341	Argument	xxxxxx	predictive	Low
342	Argument	xxxx	predictive	Low
343	Argument	xxxxxx_xxxxxx	predictive	High
344	Argument	xxxxxxxxxx	predictive	Medium
345	Argument	xxxxxxx	predictive	Low
346	Argument	xxxxxxxx[xxxx xxxxxxx][xxxxxxxxxxxxxxxxxx]	predictive	High
347	Argument	xxxxxxxxxxx	predictive	Medium
348	Argument	xxxx_xxxxx	predictive	Medium
349	Argument	xxxx_xxx	predictive	Medium
350	Argument	xxxx	predictive	Low
351	Argument	xxxxxxx	predictive	Low
352	Argument	xxxxxxxx	predictive	Medium
353	Argument	xxxxxx	predictive	Low
354	Argument	xxxxxxxxx	predictive	Medium
355	Argument	xxx	predictive	Low
356	Argument	xxx	predictive	Low
357	Argument	xxx	predictive	Low
358	Argument	xxxxx	predictive	Low
359	Argument	xxxxxx/xxxxxxxx/xxxx/xxx	predictive	High
360	Argument	xxxx_xx[]	predictive	Medium
361	Argument	xxx	predictive	Low
362	Argument	xxx	predictive	Low
363	Argument	xxxx	predictive	Low
364	Argument	xxxx-xxxxx	predictive	Medium
365	Argument	xxxxxx	predictive	Low
366	Argument	xxxxxxxx	predictive	Medium
367	Argument	xxxxxxxxxxxx	predictive	Medium
368	Argument	xxx	predictive	Low
369	Argument	xxxxxxx_xxxx	predictive	Medium
370	Argument	xxxxxxxx	predictive	Medium
371	Argument	x-xxxxxxxxx-xxx	predictive	High
372	Argument	x-xxxxxxxxx-xxxxxx	predictive	High
373	Argument	_xxxx[_xxx_xxxx_xxxx	predictive	High
374	Argument	__xxxxxxxxxxxxx	predictive	High
375	Argument	__xxxxxxxxx	predictive	Medium
376	Input Value	"><xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	High
377	Input Value	'"><xxxxxx>xxxxx(/xxx/)</xxxxxx>	predictive	High
378	Input Value	../	predictive	Low
379	Input Value	../..	predictive	Low
380	Input Value	../../../../xxxxxx/xxxxxx/xxxxxx/xxxxxx.xxxxxx-x.xxx	predictive	High
381	Input Value	../../../../xxxxx_xxxxx.xxx	predictive	High
382	Input Value	xxx' xxx xxxxx(x) xxx 'xxxx'='xxxx	predictive	High
383	Input Value	<xxxxxx>xxxxx(/xxx/)</xxxxxx>	predictive	High
384	Input Value	xxxxx%'//xxx//(xxxxxx//xxxx//xxxx//(xxxxxx(xxxxx(x)))xxxx)//xxx/**/'xxxx%'='xxxx	predictive	High
385	Input Value	x=x	predictive	Low
386	Pattern	\|xx xx xx\|	predictive	Medium
387	Network Port	xxxxx	predictive	Low
388	Network Port	xxx/xxxx	predictive	Medium
389	Network Port	xxx/xxxxx	predictive	Medium
390	Network Port	xxx/xxx (xxx)	predictive	High

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!