DDG v3014 Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (46)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	28
fr	8
pl	4
ru	4
sv	2

Country

us	24
fr	22

Actors

Dridex	1
DDG v3014	1

Activities

Interest

Timeline

Type

Not Defined	14
Database Software	8
Image Processing Software	2
JavaScript Library	2

Vendor

Not Defined	10
Oracle	8
Intel	2
Post-scriptum	2
Rockliffe	2

Product

Oracle MySQL Server	6
xvid	4
Soplanning	2
ImageMagick	2
Oracle Database 11g	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	xvid Windows Media Player decoder_create memory corruption	10.0	9.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01927	0.00	CVE-2009-0894
2	TFM MMPlayer memory corruption	10.0	10.0	$0-$5k	$0-$5k	High	Unavailable	0.50845	0.00	CVE-2009-2566
3	Rockwell Rslogix 5000 Design And Configuration Software Password Protection credentials management	8.4	7.3	$0-$5k	$0-$5k	Unproven	Official Fix	0.00061	0.00	CVE-2014-0755
4	Rockwell Automation RSLogix Micro Starter Lite RSS Project File memory corruption	8.6	8.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00828	0.00	CVE-2016-5814
5	Cisco CallManager SIP Request Stored information disclosure	5.3	4.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.01160	0.00	CVE-2006-4032
6	Intel Express 500 IP Packet denial of service	5.3	5.3	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.01274	0.00	CVE-2000-0764
7	Oracle MySQL Server DDL denial of service	4.4	4.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00059	0.00	CVE-2022-21444
8	TAC Vista Web Interface isalogin.dll path traversal	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00366	0.00	CVE-2005-3040
9	ImageMagick png.c RelinquishMagickMemory Free use after free	5.4	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00092	0.00	CVE-2017-12671
10	Foscam R2C IP Camera Running System FW/Application FW Firmware Patch race condition	8.1	8.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00200	0.02	CVE-2022-28743
11	transmission Torrent File variant.c use after free	7.5	7.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01063	0.00	CVE-2018-10756
12	Ligeo Download server-side request forgery	3.5	3.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.01673	0.04	CVE-2021-46107
13	Oracle Database 11g Enterprise Manager access control	7.3	7.3	$5k-$25k	$0-$5k	High	Not Defined	0.97368	0.04	CVE-2012-1675
14	Post-scriptum RedLine cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00117	0.00	CVE-2011-3863
15	Oracle MySQL Server DDL denial of service	4.4	4.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00077	0.00	CVE-2020-14867
16	Oracle MySQL Server DDL denial of service	4.9	4.8	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00127	0.00	CVE-2019-2644
17	D-Link DAP-1360U Ping privileges management	7.1	7.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00550	0.00	CVE-2020-26582
18	Oracle MySQL Server DDL access control	4.9	4.8	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00134	0.02	CVE-2019-2495
19	xvid Windows Media Player memory corruption	10.0	9.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.04020	0.00	CVE-2009-0893
20	Oracle MySQL Server DDL access control	4.9	4.8	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00134	0.00	CVE-2019-2494

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	1.125.125.5		DDG v3014	11/16/2018	verified	High
2	XX.XX.XXX.XXX		Xxx Xxxxx	11/16/2018	verified	High
3	XX.X.XX.XXX		Xxx Xxxxx	11/16/2018	verified	High
4	XXX.XX.XXX.XXX	xxxxxxxx.xx-xxx-xx-xxx.xxx	Xxx Xxxxx	11/17/2018	verified	High

TTP - Tactics, Techniques, Procedures (8)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
3	TXXXX.XXX	CAPEC-209	CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	High
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
5	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
6	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
8	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (5)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	aspx	predictive	Low
2	File	coders/png.c	predictive	Medium
3	File	xxxxxxxxxxxxxxx/xxxxxxx.x	predictive	High
4	Library	xxxxxxxx.xxx	predictive	Medium
5	Argument	xxxxxxxx	predictive	Medium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!