Matryosh Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	958
zh	10
fr	10
es	8
de	6

Country

us	756
ca	24
es	12
fr	8
pt	4

Actors

Mirai	9
Bashlite	2
Cobalt Strike	1
Havoc	1
TeamTNT	1

Activities

Interest

Timeline

Type

Not Defined	288
Smartphone Operating System	96
Operating System	74
Web Browser	46
Programming Tool Software	34

Vendor

Not Defined	290
Google	100
Apple	94
Microsoft	44
IBM	22

Product

Google Android	76
Apple macOS	34
Apple tvOS	24
Linux Kernel	22
Google Chrome	22

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Clean Login Plugin cross-site request forgery	5.4	5.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00135	0.00	CVE-2017-8875
2	Spider Event Calendar Plugin calendar_functions.php sql injection	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00290	0.05	CVE-2017-7719
3	S-Cms callback1.php sql injection	8.5	8.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00212	0.00	CVE-2018-20477
4	Apple Safari WebKit JavaScript Bindings JSCallbackData input validation	5.4	5.2	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.03127	0.00	CVE-2017-2442
5	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.99	CVE-2020-12440
6	Elasticsearch Query Plugin Configuration File credentials storage	5.0	5.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00065	0.00	CVE-2022-34807
7	Joomla CMS File Upload media.php input validation	6.3	6.0	$5k-$25k	$0-$5k	High	Official Fix	0.79864	0.08	CVE-2013-5576
8	Naviwebs Navigate CMS login.php sql injection	8.5	8.3	$0-$5k	$0-$5k	High	Official Fix	0.15676	0.03	CVE-2018-17552
9	Winston Configuration cross-domain policy	8.2	8.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00299	0.00	CVE-2020-16263
10	Apple macOS Application memory corruption	7.9	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00045	0.00	CVE-2020-9927
11	Pydio Web Application Stored cross site scripting	4.4	4.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00058	0.05	CVE-2019-10047
12	Netgear CBR40/RBK752/RBR750/RBS750/RBK852/RBR850/RBS850 information disclosure	6.1	5.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00070	0.00	CVE-2020-26903
13	WAVLINK WN530H4 ExportAllSettings.sh information disclosure	5.4	5.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.06164	0.00	CVE-2020-12127
14	Telmat AccessLog Administration Panel code injection	9.8	9.8	$25k-$100k	$25k-$100k	Not Defined	Not Defined	0.01626	0.00	CVE-2020-16148
15	Pydio os command injection	8.5	8.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00177	0.00	CVE-2015-3431
16	PopojiCMS admin_library.php path traversal	7.0	7.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00177	0.00	CVE-2018-18936
17	Google Chrome Utility Process race condition	9.8	9.4	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00801	0.07	CVE-2011-3961
18	Maran PHP Shop prod.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.00137	0.00	CVE-2008-4879
19	Google Android MediaTek Command Queue Driver access control	7.4	7.1	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00057	0.00	CVE-2017-0618
20	Google Android Touchscreen Driver access control	7.4	7.1	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.00065	0.00	CVE-2017-0622

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	46.105.34.51	network.g33k.host	Matryosh	02/11/2022	verified	High
2	51.83.186.134	vps-c9f4e53f.vps.ovh.net	Matryosh	02/11/2022	verified	High
3	51.195.91.193	vps-bda5972a.vps.ovh.net	Matryosh	02/11/2022	verified	High
4	XXX.XX.XX.XXX	xxx.xx-xxx-xx-xx.xx	Xxxxxxxx	02/11/2022	verified	High
5	XXX.XX.XXX.XX	xxx-xxxxxxxx.xxx.xxx.xx	Xxxxxxxx	02/11/2022	verified	High
6	XXX.XX.XXX.XXX	xxx-xxxxxxxx.xxx.xxx.xx	Xxxxxxxx	02/11/2022	verified	High
7	XXX.XXX.XXX.XX	xxx-xxxxxxxx.xxx.xxx.xxx	Xxxxxxxx	02/11/2022	verified	High
8	XXX.XXX.XXX.XXX	xxxxxxxx.xx-xxx-xxx-xxx.xx	Xxxxxxxx	02/11/2022	verified	High
9	XXX.XX.XX.XXX	xxxxxxxx.xx-xxx-xx-xx.xxx	Xxxxxxxx	02/11/2022	verified	High
10	XXX.XXX.XX.XX	xxx-xxxxxxxx.xxx.xxx.xx	Xxxxxxxx	02/11/2022	verified	High
11	XXX.XX.XXX.XX		Xxxxxxxx	02/11/2022	verified	High

TTP - Tactics, Techniques, Procedures (27)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CAPEC-122	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
7	TXXXX	CAPEC-95	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
14	TXXXX	CAPEC-102	CWE-XXX	Xxx Xx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
19	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
23	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
25	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
26	TXXXX.XXX	CAPEC-	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
27	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (353)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/.kedpm/history	predictive	High
2	File	/auth/user/all.api	predictive	High
3	File	/cgi-bin/	predictive	Medium
4	File	/cgi-bin/ExportAllSettings.sh	predictive	High
5	File	/cgi-bin/touchlist_sync.cgi	predictive	High
6	File	/collection/all	predictive	High
7	File	/domain/add	predictive	Medium
8	File	/download	predictive	Medium
9	File	/etc/ajenti/config.yml	predictive	High
10	File	/exponent_constants.php	predictive	High
11	File	/goform/	predictive	Medium
12	File	/goform/SetNetControlList	predictive	High
13	File	/lists/admin/	predictive	High
14	File	/status.js	predictive	Medium
15	File	/sysmanage/edit_manageadmin.php	predictive	High
16	File	/usr/bin/lua	predictive	Medium
17	File	/var/lib/dpkg/info/	predictive	High
18	File	/vloggers_merch/classes/Master.php?f=delete_category	predictive	High
19	File	/websitebaker/admin/preferences/save.php	predictive	High
20	File	aai.c	predictive	Low
21	File	account/login.php	predictive	High
22	File	adclick.php	predictive	Medium
23	File	admin-ajax.php	predictive	High
24	File	admin.comms.php	predictive	High
25	File	admin.php	predictive	Medium
26	File	admin/auto.def	predictive	High
27	File	admin/blog/add/	predictive	High
28	File	admin/home#/person/	predictive	High
29	File	admin/mcart_xls_import.php	predictive	High
30	File	admin/plugin/file_manager/browse/	predictive	High
31	File	admin/services/packages/remove	predictive	High
32	File	administrator/components/com_media/helpers/media.php	predictive	High
33	File	adm_config_report.php	predictive	High
34	File	adm_program/modules/members/members_function.php	predictive	High
35	File	album_portal.php	predictive	High
36	File	amf.c	predictive	Low
37	File	api.c	predictive	Low
38	File	api/includes/systems.php	predictive	High
39	File	archive_read_support_format_cab.c	predictive	High
40	File	assembler/MacroAssemblerARM64.h	predictive	High
41	File	auction_offer.php	predictive	High
42	File	xxxxxxxxx/xxxxx_xxx.xxx	predictive	High
43	File	xxx.x	predictive	Low
44	File	xxxx/xxxxxxxxx.xxx	predictive	High
45	File	xxxx/xxxxxxx.x	predictive	High
46	File	xxxx/xxxxxxxxx.xxx	predictive	High
47	File	xxxx/xxxxxxxxxxxxxxxxxxxxxxxxx.xxx:xxx	predictive	High
48	File	xxx/xxxxx.x	predictive	Medium
49	File	xxxxx.x	predictive	Low
50	File	xxx.x	predictive	Low
51	File	xxxx_xxx.xxx	predictive	Medium
52	File	xxxxxxxx_xxxxxxxxx.xxx	predictive	High
53	File	xxxxxxxx.xxx	predictive	Medium
54	File	xxxxxx/xxx.x	predictive	Medium
55	File	xxxxxx/xxx.x	predictive	Medium
56	File	xxxxxx/xxx.x	predictive	Medium
57	File	xxxxxx/xxx.x	predictive	Medium
58	File	xxxxxxxx.xxx	predictive	Medium
59	File	xxxxxx.x	predictive	Medium
60	File	xxxxxx.xxx.xxx	predictive	High
61	File	xxxx-xxxx/xxxxxxx	predictive	High
62	File	xxxx/xxxxxxx/xxxxxx_xxxxx_xx.xx	predictive	High
63	File	xxxxxxx/xxxx@/xxxxx.xxxx	predictive	High
64	File	xxxxxxx/xxxx@/xxxxx/xxxxxxxxxx/xxxxxxxx.xxxx	predictive	High
65	File	xxxxxx/xxx.x	predictive	Medium
66	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
67	File	xxx.x	predictive	Low
68	File	xxxxxx/xxxxx-xxxxxxx.xx	predictive	High
69	File	xxxxxx.xxx	predictive	Medium
70	File	xxxxxx.xxx	predictive	Medium
71	File	xxxxxx.xxx	predictive	Medium
72	File	xxx/xxxxxxx.xxx	predictive	High
73	File	xxxxxxxxxxxxxxxx-xxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxxxxxx/xxx/xxxxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
74	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	High
75	File	xxxxxxx/xxxxx/xxxxx/xxxx-xxxxx.x	predictive	High
76	File	xxxxxxx/xxxxx/xxxxx/xxxxxxxx-xxxxxxx.x	predictive	High
77	File	xxxxxxx/xxx/xxxxxx.x	predictive	High
78	File	xxxxxxx/xxx/xxx/xxxx.x	predictive	High
79	File	xxxxxxx/xxx/xxx/xxxxxxx.x	predictive	High
80	File	xxxxxxx/xxx/xxxx/xxxxx.x	predictive	High
81	File	xxxxx_xxxxxxx.x	predictive	High
82	File	xxxxxxx.xxx	predictive	Medium
83	File	xxxxxxxx.x	predictive	Medium
84	File	xxxxxxx/xxxxxxxxxxxxxxxx.xxx	predictive	High
85	File	xxxx/xxxxxxxxxx/xxxxxxxxxx.xxx	predictive	High
86	File	xxxx/xxxxxxxxxx/xxxxxx-xxx-xxx.x	predictive	High
87	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxxxx.x	predictive	High
88	File	xxxx/xxxxxxxxxx/xxxxxx-xxxx.x	predictive	High
89	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxxxxxx.x	predictive	High
90	File	xxxx/xxxxxxxxxx/xxxxxx-xxx.x	predictive	High
91	File	xxxxxx\xxxxx.xxxxxxx_xxxxxxx.xxx	predictive	High
92	File	xxxxx.xx	predictive	Medium
93	File	xxxxxxxx.xxx	predictive	Medium
94	File	xxxxxx/xxxx_xxxxxxx.xxx	predictive	High
95	File	xxxxxxxxx.xxx	predictive	High
96	File	xxxxxxxxx.xx	predictive	Medium
97	File	xxxx.x	predictive	Low
98	File	xxxxxxxxxxxxxx.xxx	predictive	High
99	File	xxxxxxxxxxxxxx.xxx	predictive	High
100	File	xxxxx.xxx	predictive	Medium
101	File	xxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	High
102	File	xxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	High
103	File	xx/xxxxxx/xxxxxx.x	predictive	High
104	File	xxxx_xx.xx	predictive	Medium
105	File	xxxxxxx-xxxxxx/xxxxxxxx/xxxxx/xxxxxxxx/xxxxxxxx_xxxxxxxxx.xxx	predictive	High
106	File	xxxx/.xxxxxxxxxxxxxxx	predictive	High
107	File	xxxx/xxxx/xxxxxxx/xxxxxxxx.xxxx	predictive	High
108	File	xxxx/xxxx/xxxxxxx/xxxxx.xxxx	predictive	High
109	File	xxxx/xxxx/xxxxxxx/xxx/xxxxxxxxxxxxxx.xxxx.xxx	predictive	High
110	File	xxxxxxxxxx.x	predictive	Medium
111	File	xxx/xxx.xxx	predictive	Medium
112	File	xxxxxx-xxx.x	predictive	Medium
113	File	xxxxxx-xxx.x	predictive	Medium
114	File	xxxxxx-xxxx.x	predictive	High
115	File	xxxxxx-xxxx.x	predictive	High
116	File	xxxxxxxx/xxxx.xxx	predictive	High
117	File	xxxxx.xxx	predictive	Medium
118	File	xxxxx.xxx/xxxxxx/xxxxxxxxxxx/xxxx/xxx.x.x.x/xxxx/xx/xxxxxx/	predictive	High
119	File	xxxxxx.xxx	predictive	Medium
120	File	xxxxxxxx/xxxxx_xxxxxx.xxx	predictive	High
121	File	xx_xxxxxxxx.x	predictive	High
122	File	xxxxxxxxxxx.xxx	predictive	High
123	File	xxxxx/xxxxxxxxxxxx/xxxxx	predictive	High
124	File	xxxx_xxxx.xxx	predictive	High
125	File	xxx_xxx.x	predictive	Medium
126	File	xxxxx_xxxxxxx.x	predictive	High
127	File	xxx_xxx.x	predictive	Medium
128	File	xxx_xxx.x	predictive	Medium
129	File	xxx_xxxxx.x	predictive	Medium
130	File	xxxxxxxxxxxx.xx	predictive	High
131	File	xxxxxxxx/xxxx_xxxxxxx/xxxx_xxxx_xxxxx.xxx	predictive	High
132	File	xxxxxx.x	predictive	Medium
133	File	xxxxxxxxxx/xxxx.x	predictive	High
134	File	xxxxxxxxxx/xxxxxx.x	predictive	High
135	File	xxxx/xxxx/xxxxxx.x	predictive	High
136	File	xxxxxxxxx/xxxx/xxx_xxxxxx.x	predictive	High
137	File	xxxx/xxx/x/xxx_xxxx.x	predictive	High
138	File	xxxx/xxxx/x_xxxxx.x	predictive	High
139	File	xxxxxxxxx/xxxxxx.xxxxx.xxx	predictive	High
140	File	xxxxxxx/xxx_xxxx.x	predictive	High
141	File	xxxxx.xxx	predictive	Medium
142	File	xxxxx_xx.xxxx	predictive	High
143	File	xxx_xxxxx.xxx	predictive	High
144	File	xxx_xxxxx_xxx.xxx	predictive	High
145	File	xxxxx_x.xx	predictive	Medium
146	File	xxxxxxxxxx/xxxxxx.x	predictive	High
147	File	xxxxxxxxxx/xxxxx-xxxxxxxx.x	predictive	High
148	File	xxxx.xxx	predictive	Medium
149	File	xxxxxxxxx.xxx	predictive	High
150	File	xxx.x	predictive	Low
151	File	xxxxxx/xxxxxxxxxx_xxx/xxx_xxxxxxxxx.xxx	predictive	High
152	File	xxxxxxx/xxxxxxxxxxxxx_xxxxxx.xx	predictive	High
153	File	xxxxxxx/xxxxxxxx/xxxxxx/xxxxxxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	High
154	File	xxxx_xxxxxxxxxxx_xxxx.xxx	predictive	High
155	File	xxx/xxxx/xx_xxxxxxxx.x	predictive	High
156	File	xxx/xxxxxxx.x	predictive	High
157	File	xxxxxxx.x	predictive	Medium
158	File	xxxxxxxxxxxxxx.xxx	predictive	High
159	File	xxx/xxxxxxx/xxxxxxxxxxxx	predictive	High
160	File	xxxxxx.xxx.xxx	predictive	High
161	File	xxxxxxxxxxx/xxxx_xxxx.x	predictive	High
162	File	xxxxxxxxxxx/xxxx_xxxx.x	predictive	High
163	File	xxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
164	File	xxxxxxxxxxxxxxxx.xxxx	predictive	High
165	File	xxxxx_xxxxx.x	predictive	High
166	File	xxxx_xxx.x	predictive	Medium
167	File	xxxx_xxxxxx.x	predictive	High
168	File	xxx-xxxxx.x	predictive	Medium
169	File	xxxxxxxxxxxxxx.xxx	predictive	High
170	File	xxxxxxxxxxx.xxx:xxx	predictive	High
171	File	xxxxxxxxx.xxx	predictive	High
172	File	xxxxxxx/xxxxxx.xxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	High
173	File	xxxxxxx/xxxx/xxxxx/xxx_xxxxx.x	predictive	High
174	File	xxx.x	predictive	Low
175	File	xx-xxxxx/xxxxx.xxx?xxx=xxxxxxx&xxx=xxxxxx	predictive	High
176	File	xxxx.xxx	predictive	Medium
177	File	xxxxxxx_xxxxxxx.xxx	predictive	High
178	File	xxxxxxx.xxx	predictive	Medium
179	File	xxx/xxxx.x	predictive	Medium
180	File	xxxxxxx/xxxxx/xxxx/##/xxxxx/	predictive	High
181	File	xxx_xxx.x	predictive	Medium
182	File	xxxxx.xxx	predictive	Medium
183	File	xxxxxxxx.xxx	predictive	Medium
184	File	xxxxxx.x	predictive	Medium
185	File	xxxx/xxx/xxx.xxx	predictive	High
186	File	xxx.xxx	predictive	Low
187	File	xxxxxx.xxx	predictive	Medium
188	File	xxxx/xxxxxxx/xxxxxxxxxxxxx_xxx.xxx	predictive	High
189	File	xxxxxxx/xxxxxxxxxxxx	predictive	High
190	File	xxxxxxx.xxx	predictive	Medium
191	File	xxxxxxxx_xxxxxx_xxxx_xxxx.xxx	predictive	High
192	File	xxxxx/xxxxxxxxxxx/xxxxxxxx.xxx	predictive	High
193	File	xxxxx/xxxxxxxxxx/xxx_xxxxxx.xxx	predictive	High
194	File	xxxxx/xxxxxxxxx/xxxxxxxx.xxx	predictive	High
195	File	xxxxxx/xxx.x	predictive	Medium
196	File	xxxx/xxxx.xxx	predictive	High
197	File	xxxxxxxxxxxxxx.xxx	predictive	High
198	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
199	File	xxxxxxxx.xxx	predictive	Medium
200	File	xxx_xxx/xxx_xxxx	predictive	High
201	File	xxxxxxxxxxxx.xx	predictive	High
202	File	xxxxxxx.xxx	predictive	Medium
203	File	xxx/xxxx.x	predictive	Medium
204	File	xxxxxxxxxxxxxx.xxx	predictive	High
205	File	xxxxx_xxxxx.xxx	predictive	High
206	File	xxxxxx.x	predictive	Medium
207	File	xxxxxxx.xxx	predictive	Medium
208	File	xxx.x	predictive	Low
209	File	xxx_xxxxxxxx.x	predictive	High
210	File	xxxxx.xx	predictive	Medium
211	File	xxxxx.xx	predictive	Medium
212	File	xxxxx/xxxxxx.x	predictive	High
213	File	xxxxxxxxxx.xxx	predictive	High
214	File	xxxxxxxxxx/xxxxx_xxx.x	predictive	High
215	File	xxxxxxxx/xxxxxxx.x	predictive	High
216	File	xxx.x	predictive	Low
217	File	xxxxxxxxxxxx_xxxxxxxxxx.xx	predictive	High
218	File	xxx.xxx	predictive	Low
219	File	xxx/xxxxxx/xxx/xxxxxxxxxxxx.xxx	predictive	High
220	File	xxx/xxx/xxxx/xxxx/xxxx/xxxx/x/xxxx/x/xx.xxxx?xxx=xxxxx	predictive	High
221	File	xxxxx/xxxxx.xx	predictive	High
222	File	xxxxxxxxxx-xxxxxx/xxxxxxxxx/xxxxxxxxxxxxx.xxx	predictive	High
223	File	xxxxxxxxx.xxxxx	predictive	High
224	File	xxxx.x	predictive	Low
225	File	xx-xxxxx.xxx	predictive	Medium
226	File	xxx_xxxx.xxx	predictive	Medium
227	File	_xxxxxxxxx.xxx	predictive	High
228	Library	/xxx/xxxx/xxxxx.x/xx-xxxx-xxxxxxx.xxxxx	predictive	High
229	Library	/xxx/xxx/xxxx/	predictive	High
230	Library	xxxxx_xxxxxxx.xxx	predictive	High
231	Library	xxxxxx[xxxxxx_xxxx	predictive	High
232	Library	xxxx/xxx/xxxxxxx/xxxxx.x	predictive	High
233	Library	xxxxxxx/xxxxx/xxxxx/xxxxxxx.x	predictive	High
234	Library	xxxxxx.xxx	predictive	Medium
235	Library	xxxxx.xxx	predictive	Medium
236	Library	xxx/xxx/xxxxxxx/xxxxxxx/xxxxx.xxxxxxx.xxx	predictive	High
237	Library	xxx/xxxxxxxx.x	predictive	High
238	Library	xxx/xxx_xxxx_xxxxxx.x	predictive	High
239	Library	xxx/xxx.x	predictive	Medium
240	Library	xxxxxxx_xxx	predictive	Medium
241	Library	xxxxxxx/xxxxxxx.x	predictive	High
242	Library	xxxxxxxx.xxx	predictive	Medium
243	Library	xx/xxx.xxx.xxx	predictive	High
244	Library	xxxxxx.xxx	predictive	Medium
245	Library	xxxxxx	predictive	Low
246	Library	xxxxxx.xxx	predictive	Medium
247	Argument	xxxxxxx	predictive	Low
248	Argument	xxxxxxxxx	predictive	Medium
249	Argument	xxxxxxxxxxx	predictive	Medium
250	Argument	xxxxxx	predictive	Low
251	Argument	xxxxxx	predictive	Low
252	Argument	xxx_xx	predictive	Low
253	Argument	xx	predictive	Low
254	Argument	xxxx_xxxxxx	predictive	Medium
255	Argument	xxxx_xxx	predictive	Medium
256	Argument	xx	predictive	Low
257	Argument	xxxxx_xx	predictive	Medium
258	Argument	xxx_xxx	predictive	Low
259	Argument	xxx	predictive	Low
260	Argument	xxxxxxxxx	predictive	Medium
261	Argument	xxx_xx	predictive	Low
262	Argument	xxxxxxxxxxxxx	predictive	High
263	Argument	xxxx_xx	predictive	Low
264	Argument	xxxxxx[xxxxxx_xxxx]	predictive	High
265	Argument	xxxxxx	predictive	Low
266	Argument	xxxx_xxxx	predictive	Medium
267	Argument	xxxxx	predictive	Low
268	Argument	xxxx	predictive	Low
269	Argument	xxxxxxx_xxxx	predictive	Medium
270	Argument	xxxxxx	predictive	Low
271	Argument	xxxxxxxxxxxx	predictive	Medium
272	Argument	xxxxxxxxxxxxxxxx	predictive	High
273	Argument	xxxxx_xxxx_xxxx	predictive	High
274	Argument	xxxxxx['xxxx']	predictive	High
275	Argument	xxxx	predictive	Low
276	Argument	xxxxxxxx	predictive	Medium
277	Argument	xxxxxx	predictive	Low
278	Argument	xxxxxxxxxxx	predictive	Medium
279	Argument	xxxxx_xx	predictive	Medium
280	Argument	xxxx	predictive	Low
281	Argument	xxxxxxxxxxxxxx($xxx)	predictive	High
282	Argument	xxxx/xxxx	predictive	Medium
283	Argument	xxxx	predictive	Low
284	Argument	xxxx	predictive	Low
285	Argument	xx	predictive	Low
286	Argument	xxxxxxxxxxxxxxxx	predictive	High
287	Argument	xxxxxxx	predictive	Low
288	Argument	xxxxxxxx	predictive	Medium
289	Argument	xxxxxxxxx	predictive	Medium
290	Argument	xx	predictive	Low
291	Argument	xxxx	predictive	Low
292	Argument	xxxx xxxxxx	predictive	Medium
293	Argument	xxxxxxxx	predictive	Medium
294	Argument	xxxx	predictive	Low
295	Argument	xxxxx_xxxx	predictive	Medium
296	Argument	xxx_xxxxxxx_xxx	predictive	High
297	Argument	xx_xxxxxxx	predictive	Medium
298	Argument	xxxxxx	predictive	Low
299	Argument	xxxxxxxx	predictive	Medium
300	Argument	xxxx	predictive	Low
301	Argument	x_xxx/xxxx	predictive	Medium
302	Argument	xx-xxxxx-xxxxxx	predictive	High
303	Argument	xxxxx_xx	predictive	Medium
304	Argument	xxx	predictive	Low
305	Argument	xxxxxxxxxxxxxxx/xxxxxxxxxxxxxx	predictive	High
306	Argument	xxxx	predictive	Low
307	Argument	xxxxxxxx	predictive	Medium
308	Argument	xxxxx_xxxx_xxxx	predictive	High
309	Argument	xxxxxxxxx	predictive	Medium
310	Argument	xxxx	predictive	Low
311	Argument	xx_xxxx	predictive	Low
312	Argument	xxxxxx	predictive	Low
313	Argument	xxxxxxx	predictive	Low
314	Argument	xxxxxx	predictive	Low
315	Argument	x_xx	predictive	Low
316	Argument	xxxxxxx	predictive	Low
317	Argument	xxxxxxx_xxx	predictive	Medium
318	Argument	xxxxxx	predictive	Low
319	Argument	xxxxxx	predictive	Low
320	Argument	xxxxxxxx_xxxxxx[]	predictive	High
321	Argument	xxxxxxx xxxxxxxxxxx	predictive	High
322	Argument	xxxxxxx_xx	predictive	Medium
323	Argument	xxxx_xx	predictive	Low
324	Argument	xxx	predictive	Low
325	Argument	xxxxxxxx	predictive	Medium
326	Argument	xxxxxx-xxx	predictive	Medium
327	Argument	xxxxxxxxxxxxx	predictive	High
328	Argument	xxx	predictive	Low
329	Argument	xxxx	predictive	Low
330	Argument	xxxxx	predictive	Low
331	Argument	xxx_xxxxxxxxx_xxxxxxx_xxxx	predictive	High
332	Argument	xxxxx	predictive	Low
333	Argument	xxxxxxxx/xxxx	predictive	High
334	Argument	xxxx	predictive	Low
335	Argument	xxxx_xx[]	predictive	Medium
336	Argument	xxx	predictive	Low
337	Argument	xxxx	predictive	Low
338	Argument	xxxxxxxxx	predictive	Medium
339	Argument	xxxx_xx	predictive	Low
340	Argument	xxxxxxxxxxxxx	predictive	High
341	Argument	xxx_xxxxxx_xxxxxxx_xx_xxx	predictive	High
342	Input Value	$_xxxxxxxxxxx	predictive	High
343	Input Value	x-x-xx	predictive	Low
344	Input Value	xxxxxx	predictive	Low
345	Input Value	xxxxxx	predictive	Low
346	Input Value	\xxx\xxx\xxx\xxx\xxx\xxx\xxx\xxx\xxx\xxx\xxx	predictive	High
347	Pattern	\|xx\|xx\|xx\|	predictive	Medium
348	Pattern	\|xx xx\|	predictive	Low
349	Network Port	xxx/xx (xxxxxx)	predictive	High
350	Network Port	xxx/xxx (xxxxxx)	predictive	High
351	Network Port	xxx/xxxx (xxxx) / xxx/xxxx (xxxxx)	predictive	High
352	Network Port	xxx	predictive	Low
353	Network Port	xxx/xxx (xxx)	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!