UAC-0173 Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	854
ru	56
de	26
zh	14
ja	10

Country

us	368
ru	82
cn	26
gb	26
tr	16

Actors

Cobalt Strike	25
RedLine Stealer	18
Mirai	14
Vidar	9
Raccoon	8

Activities

Interest

Timeline

Type

Not Defined	394
WordPress Plugin	88
Operating System	50
Content Management System	30
Router Operating System	28

Vendor

Not Defined	306
Microsoft	48
Google	18
Apple	18
SourceCodester	16

Product

Microsoft Windows	30
Google Android	10
Fortinet FortiOS	8
Microsoft Exchange Server	8
FreeBSD	8

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.69
2	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.69	CVE-2007-0354
3	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.44	CVE-2020-12440
4	TOTOLINK N200RE Telnet Service custom.conf password in configuration file	3.4	3.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.03	CVE-2023-2790
5	OpenSSL bn_wexpand input validation	10.0	9.0	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.01237	0.04	CVE-2009-3245
6	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.77	CVE-2010-0966
7	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	6.80	CVE-2006-6168
8	MikroTik RouterOS RADVD out-of-bounds write	7.5	7.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.05	CVE-2023-32154
9	mailcow Sync Job os command injection	7.3	7.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00174	0.03	CVE-2023-26490
10	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	2.32
11	Teltonika RUT9XX autologin.cgi os command injection	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00572	0.02	CVE-2018-17532
12	WALLIX Access Manager information disclosure	5.9	5.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00166	0.02	CVE-2023-23592
13	Advanced Guestbook htaccess path traversal	5.6	5.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.04162	0.08	CVE-2007-0609
14	Hitachi Vantara Pentaho Business Analytics Server unknown vulnerability	8.6	8.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00237	0.02	CVE-2022-43939
15	RoundCube sql injection	6.3	6.0	$0-$5k	$0-$5k	High	Official Fix	0.00594	0.05	CVE-2021-44026
16	PHP password_verify poison null byte	3.7	3.4	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00043	0.08	CVE-2024-3096
17	PHP proc_open command injection	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00043	0.14	CVE-2024-1874
18	PHPGurukul News Portal edit-post.php sql injection	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	0.17	CVE-2024-3767
19	Netgear SRX5308 Web Management Interface cross site scripting	3.2	3.1	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00060	0.11	CVE-2023-2385
20	Mikrotik RouterOS SNMP out-of-bounds	8.0	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00307	0.00	CVE-2022-45315

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	179.43.154.184	hostedby.privatelayer.com	UAC-0173	03/20/2024	verified	High
2	XXX.XXX.XXX.XX	xxx.xxxxxx.xxx	Xxx-xxxx	03/20/2024	verified	High
3	XXX.XXX.XXX.XXX	xxxx.xxx	Xxx-xxxx	03/20/2024	verified	High
4	XXX.XXX.XXX.XXX	xxxxxx.xxxxxxx.xxx	Xxx-xxxx	03/20/2024	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-425	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-294, CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-137	CWE-88, CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx-xxx Xxxx Xxxxxxx Xxxx	predictive	High
10	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
11	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
14	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
15	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
16	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
18	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
19	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
23	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
25	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (362)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	//proc/kcore	predictive	Medium
2	File	/admin.php/Admin/adminadd.html	predictive	High
3	File	/admin/about-us.php	predictive	High
4	File	/admin/action/delete-vaccine.php	predictive	High
5	File	/Admin/add-student.php	predictive	High
6	File	/admin/edit-post.php	predictive	High
7	File	/admin/index2.html	predictive	High
8	File	/admin/settings/save.php	predictive	High
9	File	/admin/userprofile.php	predictive	High
10	File	/api/baskets/{name}	predictive	High
11	File	/app/index/controller/Common.php	predictive	High
12	File	/app/options.py	predictive	High
13	File	/Applications/Google\ Drive.app/Contents/MacOS	predictive	High
14	File	/apply.cgi	predictive	Medium
15	File	/bitrix/admin/ldap_server_edit.php	predictive	High
16	File	/card_scan.php	predictive	High
17	File	/cgi-bin/nas_sharing.cgi	predictive	High
18	File	/cgi-bin/wlogin.cgi	predictive	High
19	File	/classes/Master.php?f=save_category	predictive	High
20	File	/College/admin/teacher.php	predictive	High
21	File	/Controls/Generic/EBMK/Handlers/EStatements/DownloadEStatement.ashx	predictive	High
22	File	/cwc/login	predictive	Medium
23	File	/dcim/rack-roles/	predictive	High
24	File	/debuginfo.htm	predictive	High
25	File	/etc/quagga	predictive	Medium
26	File	/fftools/ffmpeg_enc.c	predictive	High
27	File	/forms/doLogin	predictive	High
28	File	/forum/away.php	predictive	High
29	File	/goform/addUserName	predictive	High
30	File	/goform/aspForm	predictive	High
31	File	/goform/delAd	predictive	High
32	File	/goform/wifiSSIDset	predictive	High
33	File	/gpac/src/bifs/unquantize.c	predictive	High
34	File	/h/calendar	predictive	Medium
35	File	/inc/topBarNav.php	predictive	High
36	File	/index.asp	predictive	Medium
37	File	/index.php	predictive	Medium
38	File	/index.php?app=main&func=passport&action=login	predictive	High
39	File	/install/	predictive	Medium
40	File	/jfinal_cms/system/role/list	predictive	High
41	File	/kelas/data	predictive	Medium
42	File	/listplace/user/ticket/create	predictive	High
43	File	/xxxx_xxxxx.xxx?xxxx=x&xxxxxxxxxxx=xx-xxxxx&xxx=/xxxxxxxxxxxxxx/xxxx.xxx	predictive	High
44	File	/xxxxxxxx/xxxxx.xxx	predictive	High
45	File	/xxxx/xxx/xxxxxx	predictive	High
46	File	/xxxxx/xxxxxx/xxxx	predictive	High
47	File	/xxx-xxx/xxxxx/xxxxxx/xxxxxx_xxxxxx.xxx	predictive	High
48	File	/xxx-x	predictive	Low
49	File	/xxxxxx/xxxxxxxxxxxxxx!xxxxxxx.xxxx	predictive	High
50	File	/xxxxxxxxxx/xxxxxxxx/xxxxx	predictive	High
51	File	/xxxxxxxx-xxxx/xxx_xx/xxxxxx.xxxx	predictive	High
52	File	/xxx/xxxx/xxxx_xxxx.xxx	predictive	High
53	File	/xxxxx/xxxx_xxxx_xxxxxxx.xxx	predictive	High
54	File	/xxxxxxxxx/xxxxxxxxxxxxx.xxxx	predictive	High
55	File	/xxxxxxxxx/xxxxxxxxxx.xxx	predictive	High
56	File	/xxxx/xxxxxxx	predictive	High
57	File	/xxxx/xxxxxxx xxxxxx/xxx/xxx_xxxx_xxxxxx.xxx	predictive	High
58	File	/xxxxxx/xxxx.xxx	predictive	High
59	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
60	File	/xx-xxxxxxx/xxxxxxx/xxxxxxxxxxx/xxxxxxxxx/xxxxxx/xxxxx/	predictive	High
61	File	/xx-xxxx	predictive	Medium
62	File	xxxxxxxxxxxxxxx.xxx.xxx	predictive	High
63	File	xxxxxxxxxxxxxx.xxxx	predictive	High
64	File	xxxx.xxx	predictive	Medium
65	File	xxx_xxxxxxx.xxx	predictive	High
66	File	xxx.xxx	predictive	Low
67	File	xxxxx/xxxxxxxxxxxxx/xxxxxx_xxxxxx.xxx	predictive	High
68	File	xxxxxxx.xxx	predictive	Medium
69	File	xxxxxxxxxxxxxxxxxxx.xxx	predictive	High
70	File	xxxxx\xxxx\xxxxxx_xxxx.xxx	predictive	High
71	File	xxx_xxx.xxx	predictive	Medium
72	File	xxx/xxxx/xxxx.xxx?xxxxxx=xxxxxx_xxxxxx_xxxx	predictive	High
73	File	xxx\xxxxxxx\xxx\xxx.xxx.xxx	predictive	High
74	File	xxxx.xxx	predictive	Medium
75	File	xxxx/xxxx.xxx	predictive	High
76	File	xxxx/xxxx.xxxx	predictive	High
77	File	xxxx/xx_xxx.xxx	predictive	High
78	File	xxxxxxxxx.xxx	predictive	High
79	File	xxxxxxx.xx	predictive	Medium
80	File	x/xxxxxx/xxxxx.xxx	predictive	High
81	File	xxxx_xx_xxxx.xxx	predictive	High
82	File	xxxxxxxxxx.xxx	predictive	High
83	File	xxxxx\xxxxxx\xxxx.xxx	predictive	High
84	File	xxx_xxx_xxx.xx	predictive	High
85	File	x-xxxxxx/xxxxxxx.x	predictive	High
86	File	xxx/xxxxxx_xxxx.xxx	predictive	High
87	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
88	File	xxxxxxx/xxxxxx.xxx?x=xxxx_xxxxx	predictive	High
89	File	xxxxxxxxxx_xxxxx.xxx	predictive	High
90	File	xxxxx.xxx	predictive	Medium
91	File	xxxxxxx_xxxx.xxxx	predictive	High
92	File	xxxxxxxx_xxxxxxxxxxxxxxxxx.xxx	predictive	High
93	File	xxxxxx.xxx	predictive	Medium
94	File	xxxxxxxx/xxxxxxxxxx.xxx	predictive	High
95	File	xxxxxx/xxxxxxx/xxx_xxx.x	predictive	High
96	File	xxxx/xxxxxx/xxxxxxxxx/xxxxxxxxx/xxxxxx/xxxx.xx	predictive	High
97	File	xxxxxx_xxxxx.xxx	predictive	High
98	File	xxxxxx.xxx	predictive	Medium
99	File	xxxxxxxxx_xxxxxx.x	predictive	High
100	File	xxxxxxxxxx_xxxxxx.xxx	predictive	High
101	File	xxxxxxxx-xxx.xxx	predictive	High
102	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxx/xxxx/xxxx.x	predictive	High
103	File	xxx_xxxxxxxx.x	predictive	High
104	File	xxxx_xxx/xx/xxxxxxxx/xxxxxx.xxx	predictive	High
105	File	xxxx_xxxx.x	predictive	Medium
106	File	xxxx.xxx	predictive	Medium
107	File	xxxxx.xxx	predictive	Medium
108	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
109	File	xxxxxxxx-xxxxxx-xxxxxx.xxx	predictive	High
110	File	xxxx.xxx	predictive	Medium
111	File	xxxxx/xxxxxx.xxx	predictive	High
112	File	xx/xxxxx/xxxxx.x	predictive	High
113	File	xxxxxxx.xxx	predictive	Medium
114	File	xxxx.xxx	predictive	Medium
115	File	xxxx_xx.xx	predictive	Medium
116	File	xxxxxxxxxxxx_xxxx.xxx	predictive	High
117	File	xxxxxxxx/xxxx_xxxx	predictive	High
118	File	xxxxxxxxx.xxx	predictive	High
119	File	xxxxxxxxxxxx.xxx	predictive	High
120	File	xxxxxxxxx.xxx	predictive	High
121	File	xxx/xxxxxx.xxx	predictive	High
122	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
123	File	xxxxxxx.xxx	predictive	Medium
124	File	xxxxxxxx/xxxxx-xx-xxxxxxxxx.xxx	predictive	High
125	File	xxxxxxxx/xxxxx.xxx.xxx	predictive	High
126	File	xxxxx.xxxx	predictive	Medium
127	File	xxxxx.xxx	predictive	Medium
128	File	xxxxx.xx	predictive	Medium
129	File	xxxxxxxx.xxx	predictive	Medium
130	File	xxxx_xxxx.xxx	predictive	High
131	File	xxx/xxxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
132	File	xxxxx_xxx.xx	predictive	Medium
133	File	xxxxx.xxx	predictive	Medium
134	File	xxxxx.xxx	predictive	Medium
135	File	xxxxxx-xxxx.xxx	predictive	High
136	File	xxxx.x	predictive	Low
137	File	xxxxxxxxxxxx.xxx	predictive	High
138	File	xxxx_xxxxx.xxx	predictive	High
139	File	xxxxxx_xxxxxx.xxx	predictive	High
140	File	xxxxxx.xxx?x=xxxxxx_xxxx	predictive	High
141	File	xxxxxxxx_xxxxxxx.xxx	predictive	High
142	File	xxxxxxx-xx/xxxxxx/xxx.xx	predictive	High
143	File	xxxxxx/xxxxxxxx.xx	predictive	High
144	File	xxxxxxxxxxxxxxx_xxxxxxxx.xxx	predictive	High
145	File	xxx/xxxx/xxxx_xxxx.x	predictive	High
146	File	xxxxxxxxxxxx.xxxx	predictive	High
147	File	xxxx.xxx	predictive	Medium
148	File	xxxxx.xxxx_xxxx.xxx	predictive	High
149	File	xxxxx/_xxxxx.xx	predictive	High
150	File	xxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
151	File	xxxxxxxxxxxxxx.xxx	predictive	High
152	File	xxxxxxx_xxxx.xxx	predictive	High
153	File	xxxxx.xxx	predictive	Medium
154	File	x_xx_xxx.xxx	predictive	Medium
155	File	xxxxx_xxxxxx_xxx.xxx	predictive	High
156	File	xxxx.xxx	predictive	Medium
157	File	xxxxxxxx.xxx	predictive	Medium
158	File	xxxxx-xxxx/xxxxx-xxxxx-xxxx.xxx	predictive	High
159	File	xxxxxxxx_xxxx.xxx	predictive	High
160	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
161	File	xxxxxxxxxx.xxx	predictive	High
162	File	xxxxxxxx_xxxxxx.xxx	predictive	High
163	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	High
164	File	xxxxxx_xxxxxx.xxx	predictive	High
165	File	xxxx-xxx/xxxxxxxx.xxx?xxxx=xxxxxxxx_xxxx_xxxxx.xxx	predictive	High
166	File	xxxx-xxx/xxxxxxxx.xxx?xxxx=xxx_xxxxxxxx.xxx	predictive	High
167	File	xxxxx.xxx	predictive	Medium
168	File	xxxxxxxxxxxxxx.xxx	predictive	High
169	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
170	File	xxxxxxxxxxx.xxx	predictive	High
171	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
172	File	xxxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx.xxxx	predictive	High
173	File	xxxxxx/	predictive	Low
174	File	xxxx-xxxxxxxx.xxx	predictive	High
175	File	xxxx-xxxxx.xxx	predictive	High
176	File	xxxx-xxxxxxxx.xxx	predictive	High
177	File	xxxxxxxxx.xxx	predictive	High
178	File	xxxxxxx_xxxxx.xxx	predictive	High
179	File	xxxxxxx/xxxxxx.xxxx	predictive	High
180	File	xxxx/xxxxxx_xxxxxxxx.xxx	predictive	High
181	File	xxxx/xxxxxx.xxxx	predictive	High
182	File	xx/xxxxxxxxx/xx	predictive	High
183	File	xxxxxxxxx.x	predictive	Medium
184	File	xxxxxx.xxx	predictive	Medium
185	File	xxxxxxx.xxx	predictive	Medium
186	File	xxxxxxxxx.xxx	predictive	High
187	File	xxxx_xxxxx.xxx	predictive	High
188	File	xxxx.xxx	predictive	Medium
189	File	xxxxxx/xxx.xxx	predictive	High
190	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	High
191	File	xxxxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxx/xxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxx.xxxx	predictive	High
192	File	xxxxxx.xxx	predictive	Medium
193	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
194	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
195	File	xxxx.xx	predictive	Low
196	File	~/xxxxxxxx/xxxxx-xx-xxxxxxxxxx-xxxx.xxx	predictive	High
197	Library	/xxx/xxx.x	predictive	Medium
198	Library	xxxxx.xx/xxxxx.xxx	predictive	High
199	Library	xxxxx_xxxxxxxx.xxx	predictive	High
200	Library	xxxxxxxxxxx.xxx	predictive	High
201	Library	xxxx.xxx	predictive	Medium
202	Library	xxx/xxxxxxxxxxxxx.xxx	predictive	High
203	Library	xxx/xxxxxxxxxx.x	predictive	High
204	Library	xxx/xxxx_xxxxxx/xxxxx.xx	predictive	High
205	Library	xxxx	predictive	Low
206	Library	xxxxxxxxxxx.xxx	predictive	High
207	Library	xxxxxxxxxxx.xxx	predictive	High
208	Library	xxx/xxx/xxxx/	predictive	High
209	Library	xxxxx.xxx	predictive	Medium
210	Argument	$_xxxxxx['xxx_xxxx']	predictive	High
211	Argument	-xxxxxxxxxxxxx	predictive	High
212	Argument	?xxxx_xxxx=xxxxxxx.xxx/xxxx=xxxxxx/xxx=xxx+/xxx/.xxxxxxxx/xxxxxxx=//xxxxxxxxxxxxxx.xxx=x	predictive	High
213	Argument	xx/xx	predictive	Low
214	Argument	xxxxxxx	predictive	Low
215	Argument	xxxxxxxx	predictive	Medium
216	Argument	xxxxxx/xxxxxxxx/xxx_xx	predictive	High
217	Argument	xxx	predictive	Low
218	Argument	xxxxxxxx_xxx_xxx/xxxxxxxx_xxxxxxxx_xxx	predictive	High
219	Argument	xxxxxxxx	predictive	Medium
220	Argument	xxxxxxx	predictive	Low
221	Argument	xxxxxxxx	predictive	Medium
222	Argument	xxxx	predictive	Low
223	Argument	xxxxxxxx	predictive	Medium
224	Argument	xxxxx	predictive	Low
225	Argument	xxx_xxxx_xxxxx	predictive	High
226	Argument	xxxxxxxxxxxx	predictive	Medium
227	Argument	xxx	predictive	Low
228	Argument	xxxxxxxx/xxxxxxxx xxxxx	predictive	High
229	Argument	xxxxxxxxxx	predictive	Medium
230	Argument	xxx_xx	predictive	Low
231	Argument	xx-xxx	predictive	Low
232	Argument	xxxxxxxxx	predictive	Medium
233	Argument	xxxxxxxx	predictive	Medium
234	Argument	xxxx_xx	predictive	Low
235	Argument	xxxxxxx[x][xxxx]	predictive	High
236	Argument	xxxxxxxxx	predictive	Medium
237	Argument	xxxxxx	predictive	Low
238	Argument	xxxxxx_xxxx_xxxx	predictive	High
239	Argument	xxxxxxxxxx_xx	predictive	High
240	Argument	xxxxxx	predictive	Low
241	Argument	xxxxxxx	predictive	Low
242	Argument	xxxxxxx_xxxx_xxxx	predictive	High
243	Argument	xxxxx	predictive	Low
244	Argument	xxxxxx_xxx	predictive	Medium
245	Argument	xxxxxx xxxx	predictive	Medium
246	Argument	xxxxxxx	predictive	Low
247	Argument	xxxxxxxxxxxxx	predictive	High
248	Argument	xxxx_xxxxxx=xxxx	predictive	High
249	Argument	xxx_xxxx	predictive	Medium
250	Argument	xxxxxxx	predictive	Low
251	Argument	xxxxx	predictive	Low
252	Argument	xxxxx/xxxxxxxx	predictive	High
253	Argument	xxxxx_xxxxxx/xxxx	predictive	High
254	Argument	xxxxxxxx xx	predictive	Medium
255	Argument	xxxxxxxxxxx	predictive	Medium
256	Argument	xxxxxxxxxxxxxx	predictive	High
257	Argument	xxxxx xxxx	predictive	Medium
258	Argument	xxxx	predictive	Low
259	Argument	xxxxxx	predictive	Low
260	Argument	xxxxxxxx	predictive	Medium
261	Argument	xxxxxxxx	predictive	Medium
262	Argument	xxxx_xxxxxx	predictive	Medium
263	Argument	xxxxxxxxx/xxxxxxxx	predictive	High
264	Argument	xxxxxxxxx/xxxxxxxx	predictive	High
265	Argument	xxxxxxxx	predictive	Medium
266	Argument	xxxx	predictive	Low
267	Argument	x_xxxxxxx	predictive	Medium
268	Argument	xxxx	predictive	Low
269	Argument	xxxx	predictive	Low
270	Argument	xxxx/xxxxxx/xxx	predictive	High
271	Argument	xxxxxxxx	predictive	Medium
272	Argument	xx	predictive	Low
273	Argument	xx/xxx	predictive	Low
274	Argument	xxxxxxxxx	predictive	Medium
275	Argument	xxxxxxxxxxxxxx.xxxxxxxxxxxxx	predictive	High
276	Argument	xxx	predictive	Low
277	Argument	xxxx	predictive	Low
278	Argument	xxxx/xxx_xxxxxxxxx	predictive	High
279	Argument	xxxxxxxx	predictive	Medium
280	Argument	xxxxxxxxx/xxxxx_xxxx	predictive	High
281	Argument	xxxxxxxx_xxx	predictive	Medium
282	Argument	xxx	predictive	Low
283	Argument	xxxxxxxxxx	predictive	Medium
284	Argument	xxxxxxx	predictive	Low
285	Argument	xxxxxxxx	predictive	Medium
286	Argument	xxxxxxx	predictive	Low
287	Argument	xxxx	predictive	Low
288	Argument	xxxx	predictive	Low
289	Argument	xxx	predictive	Low
290	Argument	xxxxxx/xxxxx/xxxx	predictive	High
291	Argument	xxxxxx	predictive	Low
292	Argument	xxxxxxx	predictive	Low
293	Argument	xxxx	predictive	Low
294	Argument	xxxxxxx	predictive	Low
295	Argument	xxxxx_x	predictive	Low
296	Argument	xxxxxxxx	predictive	Medium
297	Argument	xxxx_xxxxxx	predictive	Medium
298	Argument	xxxx_xxxxxx	predictive	Medium
299	Argument	xxxxxxxxx	predictive	Medium
300	Argument	xxxxxxxxxxx	predictive	Medium
301	Argument	xxxxxxx_xxxxxxx	predictive	High
302	Argument	xxxxxxx_xx/xxxx_xx	predictive	High
303	Argument	xxxxxxxx[xx]	predictive	Medium
304	Argument	xxx	predictive	Low
305	Argument	xxxxxx_xxx	predictive	Medium
306	Argument	xxxxxx_xxxx	predictive	Medium
307	Argument	xxxxxx_xxxx	predictive	Medium
308	Argument	xxxxxxxxxx	predictive	Medium
309	Argument	xxxxx	predictive	Low
310	Argument	xxxxxxx_xxx	predictive	Medium
311	Argument	xxxxxxxx	predictive	Medium
312	Argument	xxxx	predictive	Low
313	Argument	xxxxxx	predictive	Low
314	Argument	xxxxxx/xxxxxx_xxxxxx	predictive	High
315	Argument	xxxxxx	predictive	Low
316	Argument	xxxxxxx_xx	predictive	Medium
317	Argument	xxxxxxxxx	predictive	Medium
318	Argument	xxx	predictive	Low
319	Argument	xxxxxx	predictive	Low
320	Argument	xxxxxxxxxx.xxxxxxxxxxx	predictive	High
321	Argument	xxxxxxx/xxxx/xxxxxxx	predictive	High
322	Argument	xxxxxxxxxx	predictive	Medium
323	Argument	xxxxxxx	predictive	Low
324	Argument	xxx	predictive	Low
325	Argument	xxxxxxxxxxxx	predictive	Medium
326	Argument	xxx	predictive	Low
327	Argument	xxx	predictive	Low
328	Argument	xxxxxxxxx	predictive	Medium
329	Argument	xxxx_xx	predictive	Low
330	Argument	xxxxxxxxxxx	predictive	Medium
331	Argument	xxxxxxxxx	predictive	Medium
332	Argument	xxx	predictive	Low
333	Argument	xxxxxx_xxxxx	predictive	Medium
334	Argument	xxxxxx/xxxxx	predictive	Medium
335	Argument	xxxx	predictive	Low
336	Argument	xxxxxxxxxxx.xxxxxxxx	predictive	High
337	Argument	xxxxxx	predictive	Low
338	Argument	xxxxxxxx	predictive	Medium
339	Argument	xxxxxxxx/xxxx	predictive	High
340	Argument	xxxxxxxx/xxxxxxxx	predictive	High
341	Argument	xxxxx	predictive	Low
342	Argument	xxxx	predictive	Low
343	Argument	xxxxxxx	predictive	Low
344	Argument	xxxxxxx xxxxxx	predictive	High
345	Argument	xxxxx	predictive	Low
346	Argument	xx_xxxxx	predictive	Medium
347	Argument	xxxxxx_xxxxxx	predictive	High
348	Argument	x-xxxxxxxxx-xxx	predictive	High
349	Argument	x-xxxx xx	predictive	Medium
350	Argument	_xxxxxx	predictive	Low
351	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	High
352	Input Value	../../../../../xxx/xxx/xxxxx/xxxx/xxxxxxxx/xxxxx/xxx.xxx	predictive	High
353	Input Value	//xxxxxxx.xxx	predictive	High
354	Input Value	x%xx"()%xx%xx<xxx><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
355	Input Value	</xxxxx><xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
356	Input Value	xxxxxxxxxx	predictive	Medium
357	Input Value	xxx://xxxxxx/xxxx=xxxxxxx.xxxxxx-xxxxxx/xxxxxxxx=xxxxx_xxxxx	predictive	High
358	Input Value	xxxx	predictive	Low
359	Pattern	() {	predictive	Low
360	Network Port	xxxxx	predictive	Low
361	Network Port	xxx/xxxx	predictive	Medium
362	Network Port	xxx xxxxxx xxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!