RevengeRAT Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	930
ru	24
zh	18
sv	12
de	6

Country

cn	400
us	326
vn	194
ru	30
ie	14

Actors

Mirai	3
RevengeRAT	2
Nanocore RAT	1
Remcos	1
Indexsinas	1

Activities

Interest

Timeline

Type

Not Defined	276
Operating System	56
Content Management System	52
Router Operating System	34
Web Browser	30

Vendor

Not Defined	230
Microsoft	58
Oracle	26
Apple	24
Apache	22

Product

Microsoft Windows	30
Google Android	14
WordPress	12
Foxit Reader	12
Linux Kernel	12

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	1.89	CVE-2020-15906
2	PHP phpinfo cross site scripting	4.3	3.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.01960	0.03	CVE-2007-1287
3	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.71	CVE-2010-0966
4	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	7.17	CVE-2006-6168
5	Microsoft Windows win32k.sys xxxMenuWindowProc denial of service	5.5	5.0	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.00000	0.03
6	Apple CUPS Interface cross site scripting	4.3	4.1	$5k-$25k	$0-$5k	High	Official Fix	0.00864	0.00	CVE-2014-2856
7	Apache Superset External URL redirect	4.9	4.9	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00436	0.03	CVE-2021-28125
8	AWStats Config awstats.pl Privilege Escalation	5.0	4.6	$25k-$100k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	0.06
9	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	0.68	CVE-2007-0354
10	Pligg cloud.php sql injection	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.71
11	Ivanti Secure Access Client config	8.1	8.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.05	CVE-2023-35080
12	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	2.65
13	Oracle PeopleSoft Enterprise PeopleTools Integration Broker access control	6.5	5.9	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00799	0.05	CVE-2017-3548
14	Pirelli DRG A115 v3 ADSL Router DNS privileges management	7.3	6.6	$0-$5k	$0-$5k	Functional	Workaround	0.00000	0.02
15	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.71	CVE-2020-12440
16	NotificationX Plugin SQL Statement sql injection	5.6	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02414	0.05	CVE-2022-0349

IOC - Indicator of Compromise (18)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	6.43.51.17		RevengeRAT	11/19/2019	verified	High
2	10.0.2.15		RevengeRAT	11/19/2019	verified	High
3	38.132.101.45		RevengeRAT	02/16/2024	verified	High
4	45.147.230.231		RevengeRAT	08/01/2022	verified	High
5	XX.XXX.XXX.X		Xxxxxxxxxx	04/14/2022	verified	High
6	XX.XXX.XX.X	xxxx.xxxxxxxx.xx	Xxxxxxxxxx	04/14/2022	verified	High
7	XXX.XXX.XX.XX		Xxxxxxxxxx	04/14/2022	verified	High
8	XXX.XXX.XX.XXX		Xxxxxxxxxx	04/14/2022	verified	High
9	XXX.X.X.X	xxxxxxxxx	Xxxxxxxxxx	11/19/2019	verified	High
10	XXX.XX.XXX.XXX		Xxxxxxxxxx	11/19/2019	verified	High
11	XXX.XXX.XX.XX		Xxxxxxxxxx	04/14/2022	verified	High
12	XXX.XX.XX.XXX	xxxxxx-xx-xxxxxxxxxx.xxxxx.xxx.xx	Xxxxxxxxxx	06/28/2023	verified	High
13	XXX.XX.XX.XXX		Xxxxxxxxxx	11/19/2019	verified	High
14	XXX.XXX.XXX.XX		Xxxxxxxxxx	04/14/2022	verified	High
15	XXX.XXX.XX.XX		Xxxxxxxxxx	04/14/2022	verified	High
16	XXX.XXX.XX.XXX		Xxxxxxxxxx	04/14/2022	verified	High
17	XXX.XXX.XX.XXX		Xxxxxxxxxx	04/14/2022	verified	High
18	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx.xxxxxxx.xxx	Xxxxxxxxxx	04/14/2022	verified	High

TTP - Tactics, Techniques, Procedures (26)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22, CWE-24, CWE-29	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CAPEC-122	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	High
7	TXXXX	CAPEC-150	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX, CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-102	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxx	predictive	High
18	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
19	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-	CWE-XX	Xxxxxxxxxxxxx	predictive	High
23	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
24	TXXXX.XXX	CAPEC-	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
25	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
26	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (343)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/admin/	predictive	Low
2	File	/admin/admin_user.php	predictive	High
3	File	/admin/category/save	predictive	High
4	File	/admin/list_ipAddressPolicy.php	predictive	High
5	File	/admin/subject.php	predictive	High
6	File	/auth/auth.php?user=1	predictive	High
7	File	/boaform/device_reset.cgi	predictive	High
8	File	/cgi-bin/cstecgi.cgi	predictive	High
9	File	/cgi-bin/cstecgi.cgi?action=login	predictive	High
10	File	/cgi-bin/cstecgi.cgi?action=login&flag=1	predictive	High
11	File	/cgi-bin/nas_sharing.cgi	predictive	High
12	File	/cgi-bin/system_mgr.cgi	predictive	High
13	File	/cgi-bin/wlogin.cgi	predictive	High
14	File	/cgi/cpaddons_report.pl	predictive	High
15	File	/common/dict/list	predictive	High
16	File	/debug/pprof	predictive	Medium
17	File	/DXR.axd	predictive	Medium
18	File	/forum/away.php	predictive	High
19	File	/goform/goform_get_cmd_process	predictive	High
20	File	/HNAP1/	predictive	Low
21	File	/importexport.php	predictive	High
22	File	/install/	predictive	Medium
23	File	/Interface/DevManage/VM.php	predictive	High
24	File	/main/doctype.php	predictive	High
25	File	/main/webservices/additional_webservices.php	predictive	High
26	File	/mc	predictive	Low
27	File	/ndmComponents.js	predictive	High
28	File	/net/bluetooth/rfcomm/core.C	predictive	High
29	File	/oauth/idp/.well-known/openid-configuration	predictive	High
30	File	/opt/zimbra/jetty/webapps/zimbra/public	predictive	High
31	File	/pdf	predictive	Low
32	File	/register.php	predictive	High
33	File	/remote/put_file	predictive	High
34	File	/setting/NTPSyncWithHost	predictive	High
35	File	/spip.php	predictive	Medium
36	File	/squashfs-root/etc_ro/custom.conf	predictive	High
37	File	/src/c-blosc2/plugins/codecs/ndlz/ndlz4x4.c	predictive	High
38	File	/staff/bookdetails.php	predictive	High
39	File	/student/bookdetails.php	predictive	High
40	File	/xxxxxxxx/xxxxxx-xxxxxxx.xxx	predictive	High
41	File	/xxxxxx-xxxxxxxx-xxxx/	predictive	High
42	File	/xxxxxxx/xxxx.xxx	predictive	High
43	File	/xxx/xxx/xxxx-xx/xx	predictive	High
44	File	/xxx/xxx/xxxx/xxxx-xxx-xxxxxxxx	predictive	High
45	File	/xxx/xxxxxxxx.xxx	predictive	High
46	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
47	File	xxxxxxxxxxx.xxx	predictive	High
48	File	xxxxxx/xxxx/xxxxxx.xxxx	predictive	High
49	File	xxxxxxx.xxx	predictive	Medium
50	File	xxx.xxx	predictive	Low
51	File	xxxxx.xxx	predictive	Medium
52	File	xxxxx.xxxx	predictive	Medium
53	File	xxxxx.xxx?x=xxxxxx&x=xxxxxx&x=xxxxxx	predictive	High
54	File	xxxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
55	File	xxxxx/xxxxxxx/xxxxxxx_xxxx_xxxx.xxx	predictive	High
56	File	xxxxx/xxxx/xxxxxx/xxxxxxx/xxxxxx/xxxx_xxxxxxxxxx.xxx	predictive	High
57	File	xxxxxxx.xxx	predictive	Medium
58	File	xxxxx_xxxxxx.xxx	predictive	High
59	File	xxxxxxxx.xxx	predictive	Medium
60	File	xxx/xxxxxxxx/xxxxxxxxxxx.xxx	predictive	High
61	File	xxx/xxxxxxx/xxxxxxxxxxx_xxxxxx.xx	predictive	High
62	File	xxxx/xxx/xxxxxx/xxx-xxxxxx.x	predictive	High
63	File	xxxxxxx.x	predictive	Medium
64	File	xxxxxxxx.xxxx	predictive	High
65	File	xxxxxxxxxxxxxxxx.xxxx	predictive	High
66	File	xxxxxxx.xx	predictive	Medium
67	File	xxxxxxx/xxxxx/xxxx/	predictive	High
68	File	xxxxxxx.xxxx	predictive	Medium
69	File	xxx/xxxxx	predictive	Medium
70	File	xxxxxx.x	predictive	Medium
71	File	xxxxx/xxx-xxxxxx.x	predictive	High
72	File	xxxxxxxxxx/xxx/xxxxxxx.xxxx	predictive	High
73	File	xxxxxxx/xxxxxxx/xxxxxxx.xxxx?xxxx	predictive	High
74	File	xxxx.x	predictive	Low
75	File	xxx-xxxx.xxx	predictive	Medium
76	File	xxx-xxx/xxxxxxx_xxxxxxxx	predictive	High
77	File	xxx-xxx/xxxxx/xxxxx/xxxxx/xxx_xxxx/xxxx_xxxx/	predictive	High
78	File	xxxxxxxx/xxxxxxxxxxx/xxxxxxx/xxxxxxx/xxxxx.xxx	predictive	High
79	File	xxxxx.xxx	predictive	Medium
80	File	xxx.xxx?xxx=xxxxx_xxxx	predictive	High
81	File	xxxxxx/xxx.x	predictive	Medium
82	File	xxxxxx/xxx.x	predictive	Medium
83	File	xxxxx-xxxxxxx.xxx	predictive	High
84	File	xxxxxx.xxx	predictive	Medium
85	File	xxxxxx.xxx	predictive	Medium
86	File	xxxxxx/x.x	predictive	Medium
87	File	xxxx/xxxxxx.xxxx	predictive	High
88	File	xxxxxxxx.xxx	predictive	Medium
89	File	xxxxxxx.xxx	predictive	Medium
90	File	xxxxxxx.xxx	predictive	Medium
91	File	xxxxxxx.xxx	predictive	Medium
92	File	xxxxx.xxx	predictive	Medium
93	File	xxxxxxxxxxxxxxxx-xxx/xxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxxxxxx/xxx/xxxxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
94	File	xxxxxxx/xxx/xxx/xxx_xxxxxx.x	predictive	High
95	File	xxxxxxx/xxxx/xxxxxx/xxx.x	predictive	High
96	File	xxxxxxx/xxxxx/xxxxx/xxxxxx-xxx.x	predictive	High
97	File	xxxxx.xxx	predictive	Medium
98	File	xxxxx_xx.xx	predictive	Medium
99	File	xxxxxxx.x	predictive	Medium
100	File	xx/xxx/xxxxxx/xxxxxxx.x	predictive	High
101	File	xxxx.xxx	predictive	Medium
102	File	xxxxxx/xxxxx/xxxx.xxxxxxxx.xxx	predictive	High
103	File	xxxxxxxxxx.xxx	predictive	High
104	File	xxxxxx.xxxx	predictive	Medium
105	File	xx-xxxxxxx/xxxxxxx	predictive	High
106	File	xxxxxx/xxxxxxxxxxxxx	predictive	High
107	File	xxxx_xxxxxxx.xxx.xxx	predictive	High
108	File	xxxxxxxxx.xxx	predictive	High
109	File	xxxxxx_xxxx_xxxxxx.xxx	predictive	High
110	File	xxxx.xxx	predictive	Medium
111	File	xxxx.x	predictive	Low
112	File	xxxx_xxxx.x	predictive	Medium
113	File	xxxxxx_xxxxxxx.xxxx	predictive	High
114	File	xxx/xxxxxx.xxx	predictive	High
115	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
116	File	xxxxx.xxx	predictive	Medium
117	File	xxxxx.xxxx	predictive	Medium
118	File	xxxxx.xxx	predictive	Medium
119	File	xxxxxxxx.xxx	predictive	Medium
120	File	xxxxxxx.x	predictive	Medium
121	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
122	File	xxxxxxxxxxxxx.xxx	predictive	High
123	File	xxxxx.x	predictive	Low
124	File	xxx/xxxxxx.xxx	predictive	High
125	File	xxxx.x	predictive	Low
126	File	xxxxxxxxxx/xxxxxxxxxxxxx.x	predictive	High
127	File	xxxxxxx/xxxx.x	predictive	High
128	File	xxxxxxx.xx	predictive	Medium
129	File	xxxxx.xxx	predictive	Medium
130	File	xxxxxxxxxx/xx.x	predictive	High
131	File	xxxx.xxx	predictive	Medium
132	File	xxxxxxxx.xxx	predictive	Medium
133	File	xxxx/xxxxxxxxxx.xxx	predictive	High
134	File	xxxxxx.xxx	predictive	Medium
135	File	xxxxx.xxx.xxx	predictive	High
136	File	xxx_xxxxx.xxxx/xxx_xxxxxxxx.xxxx	predictive	High
137	File	xxx/xxxxxxxxx/xxx_xxxxxxxxx.x	predictive	High
138	File	xxxxxx.xxx	predictive	Medium
139	File	xxx_xxxx.xxx	predictive	Medium
140	File	xxx/xx/xxx/xxxxxxxxxx	predictive	High
141	File	xx/xxxxxxx/xxxxxxxx/xxx-xxxxxx.x	predictive	High
142	File	xx/xxxxxxx/xxxxxxxx/xxx.x	predictive	High
143	File	xxxxx.xxx	predictive	Medium
144	File	xxxxxxxx-xxxxxxxx.xxx	predictive	High
145	File	xxxxxxxxxxx.xxxx	predictive	High
146	File	xxxxxxx.xxx	predictive	Medium
147	File	xxxxxxx-xxxxxx.xxx	predictive	High
148	File	xxxxxx/xxxxxxxxxx/xxx/xxxx.xxx	predictive	High
149	File	xxxxxxx/xxx/xxxxxxx/xxxxxx/xxxx-xxxxxxxxxx/<xxxxxx>/xx.xxx	predictive	High
150	File	xxxxxxx.xxx	predictive	Medium
151	File	xxx.xxxxx.xxx	predictive	High
152	File	xxxxx.xxx	predictive	Medium
153	File	xxxxx.xxx	predictive	Medium
154	File	xxxxxxxx.xxx	predictive	Medium
155	File	xxxxxxxxxx.xxx	predictive	High
156	File	xxxxxxxxxxxx.xxx	predictive	High
157	File	xxxxxxx.xx	predictive	Medium
158	File	xxx.xxx	predictive	Low
159	File	xx_xxx.xx	predictive	Medium
160	File	xxxxxx.xx	predictive	Medium
161	File	xxxxxxx/xxxxxxxxxx	predictive	High
162	File	xxxxxx.xxx	predictive	Medium
163	File	xxxxxx-xxxxx.xxx	predictive	High
164	File	xxxxxx_xxxxxxxxx.xxx	predictive	High
165	File	xxxxxxx.xxx	predictive	Medium
166	File	xxxx_xxxxxxx.xxx	predictive	High
167	File	xx_xxxxx_xxxx.xxx	predictive	High
168	File	xxxxxxxx_xxxxxxxxx.xxx	predictive	High
169	File	xxx.xxxx	predictive	Medium
170	File	xxxxxxx.xxx	predictive	Medium
171	File	xxx/xxxx/xxxx/xx/xxxxx/xxxxx/xxxx/xxxxxxxxxxxx.xxxx	predictive	High
172	File	xxx/xxxx/xxxx/xxx/xxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxx.xxxx	predictive	High
173	File	xxxxxxxx.xxx	predictive	Medium
174	File	xxx_xxxxxxx.x	predictive	High
175	File	xxxx-xxxxx.xxx	predictive	High
176	File	xxxx-xxxxx.xxx	predictive	High
177	File	xxxx-xxxxxxxx.xxx	predictive	High
178	File	xxxxx/xxxxx/xxxxxxxxx/xxxxxx.xxx	predictive	High
179	File	xxxxx_xxx_xxxxxxx.xxx	predictive	High
180	File	xxxxx.xxx	predictive	Medium
181	File	xx/x.x.xx.xxxxxx/xxxxxxx/xx/xxxxx.xx.xxxxxxxxx	predictive	High
182	File	xxxxxx/xxxxx.xxx/xxxx/xxxx	predictive	High
183	File	xxxxxxxx/xxxxxxxx	predictive	High
184	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
185	File	xxxx_xxxxx.xxx	predictive	High
186	File	xxxx/xxx/xxxx-xxxxx.xxx	predictive	High
187	File	xxxx/xxxxxxxx/xxxxxxxx.xxxx	predictive	High
188	File	xx/xxxxxxxxx/xx	predictive	High
189	File	xxxxxx.xxx	predictive	Medium
190	File	xxx_xxxxx.xxxx	predictive	High
191	File	xxxxx.xxxxxx.xxxxxxx.xxx	predictive	High
192	File	xxxxxx.xxx	predictive	Medium
193	File	xxxxxxxx.xxx	predictive	Medium
194	File	xxxxxx.xxx	predictive	Medium
195	File	xx.xxxxxx/xxxxxxx/	predictive	High
196	File	xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
197	File	xx-xxxxxx.xxx	predictive	High
198	File	xx-xxxxxxx/xxxxxxx/xxxx-xx-xxxx/	predictive	High
199	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
200	File	xx-xxxxxxxxxxx.xxx	predictive	High
201	File	xx/xx/xxxxx	predictive	Medium
202	File	xxxx.xx	predictive	Low
203	File	\xx_xxxx\xxx\xxxxxxxx\xxxxxxxx_xxxxxxx.xx	predictive	High
204	File	{{xxxxxxxx}}/xxxxx	predictive	High
205	Library	/_xxx_xxx/xxxxx.xxx	predictive	High
206	Library	xx/xxx/xxxx_xxxxxx.xxx	predictive	High
207	Library	x:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxx	predictive	High
208	Library	xxxxxxxx.xxx	predictive	Medium
209	Library	xxxxxxx.xxx	predictive	Medium
210	Library	xxxxxx_xxxxxxxx.xxx	predictive	High
211	Library	xxxxxxx-xxxxxx.xxx	predictive	High
212	Library	xxx/xxxx.x	predictive	Medium
213	Library	xxx/xx/xxxxx/xxxxxxxxxx/xxxx.xx	predictive	High
214	Library	xxx/xxx.x	predictive	Medium
215	Library	xxxxxx.xxx	predictive	Medium
216	Library	xxxxx.xxx	predictive	Medium
217	Library	xxxxxx.xxx.xxx.xxx	predictive	High
218	Library	xxxxxxx.xxx	predictive	Medium
219	Library	xxxxxx.xxx	predictive	Medium
220	Argument	.xxxxxxxx	predictive	Medium
221	Argument	xx/xx	predictive	Low
222	Argument	xxxxxx	predictive	Low
223	Argument	xxxxx	predictive	Low
224	Argument	xxxx	predictive	Low
225	Argument	xxxxxxxxxxxxx	predictive	High
226	Argument	xxxxxxxxxxxxxx	predictive	High
227	Argument	xxxxxxxx	predictive	Medium
228	Argument	xxxx_xxx	predictive	Medium
229	Argument	xxxxx	predictive	Low
230	Argument	xxxxxx	predictive	Low
231	Argument	xxxxxxx	predictive	Low
232	Argument	xxxxxxxxxx	predictive	Medium
233	Argument	xxx	predictive	Low
234	Argument	xxxxxxx	predictive	Low
235	Argument	xxxxxxx xxxx/xxxxxxxxxxx	predictive	High
236	Argument	xxxxxx	predictive	Low
237	Argument	xxxxxxxxxxxxxxxx	predictive	High
238	Argument	xxxx_xx	predictive	Low
239	Argument	xxxxx	predictive	Low
240	Argument	xxxxxxxxx_xxxxxx/xxxxxxxxx_xxxxxx	predictive	High
241	Argument	xxxxxxxxx	predictive	Medium
242	Argument	xxxxxxx	predictive	Low
243	Argument	xxxxxx	predictive	Low
244	Argument	xxxxxxxxxxxx	predictive	Medium
245	Argument	xxxxx	predictive	Low
246	Argument	xxx	predictive	Low
247	Argument	xxxx	predictive	Low
248	Argument	xxxx	predictive	Low
249	Argument	xxxxxxxx	predictive	Medium
250	Argument	xxxxxxxx/xxxxxxx/xxxxx	predictive	High
251	Argument	xxxxxxxxxxxxxxxx	predictive	High
252	Argument	xxxxxxxxx/xxxxxxxx/xxxxxxxx	predictive	High
253	Argument	xx_xxxx	predictive	Low
254	Argument	xxxxxxx	predictive	Low
255	Argument	xxxxx	predictive	Low
256	Argument	xxxxxxxxx/xxxxxx	predictive	High
257	Argument	xx=xxxxxx)	predictive	Medium
258	Argument	xxxx	predictive	Low
259	Argument	xxxxxxx	predictive	Low
260	Argument	xxxx_xxxx	predictive	Medium
261	Argument	xxxx	predictive	Low
262	Argument	xx	predictive	Low
263	Argument	xx	predictive	Low
264	Argument	xx	predictive	Low
265	Argument	xxxxxxxxx	predictive	Medium
266	Argument	xxx	predictive	Low
267	Argument	xxx_xxxxxxxx	predictive	Medium
268	Argument	xxxxxxx	predictive	Low
269	Argument	xxxxxxxxxxxxxx	predictive	High
270	Argument	xxxxxxxxx/xxxxx	predictive	High
271	Argument	xxxxxxx	predictive	Low
272	Argument	xxxx	predictive	Low
273	Argument	xxxx	predictive	Low
274	Argument	xxxxxxxxxx	predictive	Medium
275	Argument	xxxxxxx	predictive	Low
276	Argument	xxxxxxxxx	predictive	Medium
277	Argument	xxx_xxxxxxx_xxx	predictive	High
278	Argument	xxxxxxxxx	predictive	Medium
279	Argument	xxxxx_xxxxxx_xxx/xxxxx_xxxx_xxxxxxxx	predictive	High
280	Argument	xxxxxxxxx	predictive	Medium
281	Argument	xxxxxxxxxx/xxxxxxx/xxxxxxxxxxxxx	predictive	High
282	Argument	xxx_xxx	predictive	Low
283	Argument	xxxxxxxxx	predictive	Medium
284	Argument	xx_xx	predictive	Low
285	Argument	xxxxxx/xxxxx/xxxx	predictive	High
286	Argument	xx	predictive	Low
287	Argument	xxxxxxxx	predictive	Medium
288	Argument	xxxxx_xxxx_xxxx	predictive	High
289	Argument	xxx_xxxxxxxx	predictive	Medium
290	Argument	xxxx_xxxx_xxxx	predictive	High
291	Argument	xxx/xxxx	predictive	Medium
292	Argument	xxxxxxxxxxxxxxx	predictive	High
293	Argument	xxxxxxx_xx[xxxxx]	predictive	High
294	Argument	xxxxxxxxxxxx	predictive	Medium
295	Argument	xxxx_xxx	predictive	Medium
296	Argument	xxxxxx	predictive	Low
297	Argument	xxxxxxxxxx	predictive	Medium
298	Argument	xxxxxxxx_xxxxxx_xxxxx	predictive	High
299	Argument	xxxx_xxxx	predictive	Medium
300	Argument	xxxxxx_xx	predictive	Medium
301	Argument	xxxxxxxxx	predictive	Medium
302	Argument	xxx	predictive	Low
303	Argument	xxxxxxxxxxx	predictive	Medium
304	Argument	xxxxxxxx_xxxxxxx_xxxxxxx/xxxxxxxx_xxxxxx_xxxxxxx	predictive	High
305	Argument	xxxx_xx	predictive	Low
306	Argument	xxxx/xxxxxx/xxxxxxx/xxxxxxxxxx	predictive	High
307	Argument	xxxxxx	predictive	Low
308	Argument	xxxxxxx[]	predictive	Medium
309	Argument	xxx_xxxxx	predictive	Medium
310	Argument	xxxxxx	predictive	Low
311	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	High
312	Argument	xxxxxxxxxxxxxxx	predictive	High
313	Argument	xxxxxxxxxx_xxxx_xxxxxx	predictive	High
314	Argument	xx	predictive	Low
315	Argument	xxxxxx	predictive	Low
316	Argument	xxx	predictive	Low
317	Argument	xxxxxxxx	predictive	Medium
318	Argument	xxxxxxxx	predictive	Medium
319	Argument	xxxxxxxx/xxxxxxxx	predictive	High
320	Argument	xxxxxxxxx	predictive	Medium
321	Argument	xxx_xxxx	predictive	Medium
322	Argument	xxxx	predictive	Low
323	Argument	xx	predictive	Low
324	Argument	xxx	predictive	Low
325	Argument	xxxxxx	predictive	Low
326	Argument	x-xxxxxxxxx-xxx	predictive	High
327	Argument	x-xxxxxxxxx-xxxx	predictive	High
328	Argument	xxx	predictive	Low
329	Argument	xxxx	predictive	Low
330	Input Value	"><xxxxxx xxx="xxxxx://xx.xxx/xxxxxxxxxx"></xxxxxx>	predictive	High
331	Input Value	%xx	predictive	Low
332	Input Value	%xxxxxxxx%xxxxxxx%xxxxxxxx.xxxxxxxxxxxx%xxxxx,%xxxxx,%xxxxx%xx%xx%xx/xxxxxx%xx	predictive	High
333	Input Value	../../../xxx/xxxxxx	predictive	High
334	Input Value	/%xx	predictive	Low
335	Input Value	x%xx"()%xx%xx<xxx><xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	High
336	Input Value	<xxxxxx>xxxxx('xxxxxxxx.xxxxxx='+xxxxxxxx.xxxxxx)</xxxxxx>.xxxxx	predictive	High
337	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
338	Input Value	<xxxxx/xxx=x xxxxxxx=xxxxx(xxxxxxxx.xxxxxx)>	predictive	High
339	Input Value	xxxxxx	predictive	Low
340	Input Value	\x	predictive	Low
341	Pattern	\|xx\|	predictive	Low
342	Network Port	xxx/xxx (xxx)	predictive	High
343	Network Port	xxx xxxxxx xxxx	predictive	High

References (6)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

https://www.fortinet.com/blog/threat-research/malware-analysis-revenge-rat-sample.html

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!