RMS Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	752
ru	220
es	10
de	6
fr	4

Country

ru	454
us	170
gb	34
it	12
pm	12

Actors

RMS	33
Cobalt Strike	6
RedLine Stealer	5
Mirai	3
Raccoon	3

Activities

Interest

Timeline

Type

Not Defined	252
Operating System	98
Web Server	30
Content Management System	30
Smartphone Operating System	30

Vendor

Not Defined	306
Microsoft	82
Apple	36
Oracle	34
Apache	28

Product

Microsoft Windows	54
Linux Kernel	20
Apache HTTP Server	18
ImageMagick	14
Google Chrome	14

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	nginx request smuggling	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.41	CVE-2020-12440
2	jforum User input validation	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.04	CVE-2019-7550
3	Hyperledger Fabric Gateway Client Application denial of service	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00140	0.00	CVE-2022-36023
4	PrayerCenter sql injection	8.5	7.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00754	0.00	CVE-2018-7314
5	PyJWT PEM Encoded Public Key asymmetric invalid_strings access control	7.4	6.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00082	0.05	CVE-2017-11424
6	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure	5.3	5.2	$5k-$25k	Calculating	High	Workaround	0.02016	0.02	CVE-2007-1192
7	GitLab Community Edition/Enterprise Edition Password Reset password recovery	8.0	7.9	$0-$5k	$0-$5k	High	Official Fix	0.80716	0.28	CVE-2023-7028
8	pyca cryptography PrivateFormat.PKCS12.encryption_builder.hmac_hash null pointer dereference	6.4	6.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00045	0.00	CVE-2024-26130
9	OpenSSH Authentication Username information disclosure	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.10737	0.19	CVE-2016-6210
10	Microsoft Outlook Privilege Escalation	5.6	4.9	$5k-$25k	$0-$5k	Unproven	Official Fix	0.03050	0.04	CVE-2021-31949
11	Microsoft IIS cross site scripting	5.2	4.7	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00548	0.17	CVE-2017-0055
12	Apple MacOS X Hypervisor input validation	5.9	5.3	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00042	0.04	CVE-2015-1138
13	Dell EMC iDRAC9 path traversal	6.7	6.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00160	0.05	CVE-2020-5366
14	LearnPress Plugin command injection	7.8	7.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.20280	0.00	CVE-2023-6634
15	Microsoft Office Outlook Remote Code Execution	9.0	8.3	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00938	0.04	CVE-2024-21413
16	Google Chrome WebRTC out-of-bounds	6.5	6.4	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00248	0.02	CVE-2023-0698
17	Linux Kernel skb_shared_info integer overflow	4.7	4.2	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00042	0.03	CVE-2023-42752
18	Joomla sql injection	6.3	6.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00142	0.05	CVE-2022-23797
19	Netatalk dsi_writeinit heap-based overflow	9.8	9.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05812	0.03	CVE-2022-43634
20	Hyperledger Fabric Channel Name denial of service	5.5	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00085	0.03	CVE-2022-45196

IOC - Indicator of Compromise (70)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	5.133.65.53		RMS	12/27/2021	verified	High
2	37.58.60.5	hosted-by.zenex5.com	RMS	08/29/2022	verified	High
3	43.255.175.215		RMS	04/16/2021	verified	High
4	45.82.71.172	cathost.io	RMS	07/16/2021	verified	High
5	45.144.30.30	polzovatel.com	RMS	05/14/2022	verified	High
6	50.240.232.117	50-240-232-117-static.hfc.comcastbusiness.net	RMS	10/17/2021	verified	High
7	51.83.171.208	hosted.by.majorcore.com	RMS	05/31/2023	verified	High
8	51.83.171.223	hosted.by.majorcore.com	RMS	10/04/2022	verified	High
9	52.208.217.243	ec2-52-208-217-243.eu-west-1.compute.amazonaws.com	RMS	02/05/2023	verified	Medium
10	54.188.107.146	ec2-54-188-107-146.us-west-2.compute.amazonaws.com	RMS	05/03/2021	verified	Medium
11	65.0.5.240	ec2-65-0-5-240.ap-south-1.compute.amazonaws.com	RMS	07/23/2021	verified	Medium
12	66.23.226.254		RMS	05/18/2023	verified	High
13	66.208.244.253	sbs.heraldtech.net	RMS	08/26/2021	verified	High
14	77.161.25.182	77-161-25-182.fixed.kpn.net	RMS	07/28/2023	verified	High
15	XX.XXX.XXX.XXX		Xxx	07/06/2021	verified	High
16	XX.XXX.XXX.XXX		Xxx	03/14/2022	verified	High
17	XX.XXX.XXX.XXX		Xxx	05/14/2022	verified	High
18	XX.XXX.XXX.XX		Xxx	12/28/2021	verified	High
19	XX.XX.XXX.XXX	xxxxxxxxx.xxxxx.xxx.xx	Xxx	08/18/2022	verified	High
20	XX.XX.XXX.X	xxxx.xxx-xx.xx.xx	Xxx	07/14/2022	verified	High
21	XX.XXX.XXX.XX		Xxx	12/06/2022	verified	High
22	XX.XX.X.XXX		Xxx	09/12/2021	verified	High
23	XX.XXX.XX.XXX	xxxxxxx-xx.xxx.xx.xxx.xxxx.xx	Xxx	05/11/2021	verified	High
24	XX.XXX.XXX.XXX		Xxx	02/08/2022	verified	High
25	XX.XXX.XXX.XXX	xx-xxx-xxx-xxx.xxx.xxxx.xx	Xxx	07/15/2021	verified	High
26	XX.XXX.XXX.XXX	xxx.xxx.xxx-xxxxxxx.xx	Xxx	10/10/2022	verified	High
27	XX.XX.XXX.XXX	xxxxx.xxxxxxxx.xx.xx	Xxx	11/28/2021	verified	High
28	XX.XXX.XXX.XXX	xxxx.xxxxxxx-xxxx.xx	Xxx	05/28/2021	verified	High
29	XX.XX.XXX.XXX	xxxx-xx-xx-xxx-xxx.xxxxx.xx	Xxx	02/20/2023	verified	High
30	XX.XX.XX.XXX	xxxxxxx-xx-xx-xx.xxxxxxxxxxxxxx.xxxxx.xx	Xxx	11/21/2022	verified	High
31	XX.XXX.X.XXX	xx.xxx.x-xxx.xxxx.xx.xx	Xxx	10/17/2023	verified	High
32	XX.XXX.XXX.XX	xxxxxx.xxxxx-xx.xxx.xx.xxxxxxxxxx.xxx	Xxx	05/21/2023	verified	High
33	XX.XXX.XXX.XXX	xxxxxxxxxx.xxx	Xxx	12/29/2023	verified	High
34	XX.XXX.XXX.XXX	xxxxxxxxxx.xx	Xxx	02/11/2023	verified	High
35	XX.XXX.XXX.X	xxx.xxxxxxx.xxx	Xxx	12/30/2022	verified	High
36	XX.XXX.XX.XXX	xxxx-xx.xxx.xx-xxx.xxxxxxxx.xx	Xxx	05/17/2022	verified	High
37	XX.XXX.XXX.XX		Xxx	11/07/2021	verified	High
38	XX.XXX.XXX.XX		Xxx	11/22/2021	verified	High
39	XX.XX.XX.XX	xx-xx-xx-xx-xxxxxx.xxx.xxxxxxxxxxxxxxx.xxx	Xxx	06/23/2021	verified	High
40	XXX.XXX.XXX.XX		Xxx	02/06/2023	verified	High
41	XXX.XXX.XXX.XXX	xxxxxxxxxxxxxxx.xxxxxx-xxxxxxxx.xxxx.xxxxxxxxx.xx	Xxx	07/30/2021	verified	High
42	XXX.XXX.XXX.XXX		Xxx	03/26/2021	verified	High
43	XXX.XXX.XXX.XXX		Xxx	11/20/2021	verified	High
44	XXX.XXX.XXX.XX	xxx.xxxxxxxxxxxxxx.xxx	Xxx	04/26/2021	verified	High
45	XXX.XXX.XXX.XXX		Xxx	05/09/2023	verified	High
46	XXX.XXX.XXX.XX	xxxx.xxxx.xx	Xxx	11/09/2022	verified	High
47	XXX.XXX.XX.XXX	xxx-xx-xxx-xxx.xxxxxxxx.xxx.xx	Xxx	12/20/2021	verified	High
48	XXX.XX.XXX.XX		Xxx	10/25/2022	verified	High
49	XXX.XXX.XXX.XX	xxxx-xxxxxxx.xxxxx-xxx.xx	Xxx	03/06/2024	verified	High
50	XXX.XX.XX.XXX	xxxxx.xxxxxxxxxx.xxx.xx	Xxx	08/11/2021	verified	High
51	XXX.XX.XXX.XXX	xxxx.xxxxxxxx.xx	Xxx	04/20/2022	verified	High
52	XXX.XXX.XXX.XXX		Xxx	01/29/2023	verified	High
53	XXX.XXX.XXX.XX	xxx.xx.xxx.xxx.xxx.xxxxxx.xxxxxxxxxxx.xxx	Xxx	06/26/2022	verified	High
54	XXX.XXX.XX.XXX		Xxx	06/23/2021	verified	High
55	XXX.XXX.XX.XX	xxxxxxxxx.xxxxx.xxx.xx	Xxx	07/20/2021	verified	High
56	XXX.XX.XXX.XX		Xxx	09/19/2022	verified	High
57	XXX.XX.XXX.XX		Xxx	04/10/2021	verified	High
58	XXX.XXX.XX.XXX		Xxx	08/07/2022	verified	High
59	XXX.XXX.XXX.XX		Xxx	04/08/2021	verified	High
60	XXX.XXX.XXX.XX	xxxxxxxx.xxxxxxx.xxx.xx	Xxx	03/09/2022	verified	High
61	XXX.XXX.XX.XXX	xxxx.xxxxxxx.xx	Xxx	09/26/2021	verified	High
62	XXX.XXX.XXX.XXX		Xxx	04/27/2022	verified	High
63	XXX.X.XX.XXX	xxxx-xxx-x-xx-xxx.xxxxxx-xx-xxxxxx.xx	Xxx	03/23/2021	verified	High
64	XXX.XXX.XX.XX	xxx-xxx-xx-xx.xxx.xxxxxxxxxxxx.xx	Xxx	03/28/2021	verified	High
65	XXX.XX.XXX.XXX	xxx.xxx.xx.xxx.xxxxxxx.xx.xx	Xxx	08/02/2021	verified	High
66	XXX.XX.XXX.XXX	xxx.xx.xxx.xxx.xxxx-xxxxxx-xxx.xxx.xxxx.xxx	Xxx	08/03/2021	verified	High
67	XXX.XX.XXX.XXX	xx-xxx.xx.xxx.xxx.xxxxxxx.xxxxxxxx.xxx	Xxx	10/07/2023	verified	High
68	XXX.XXX.XXX.XX	xxxxx-xxxxx.xxxxxxx.xxxx	Xxx	03/13/2021	verified	High
69	XXX.XXX.XXX.XX	xxxxxx.xx.xx	Xxx	11/13/2021	verified	High
70	XXX.XX.XXX.XXX	xxxxxxxx.xxxxxxx.xxxxx	Xxx	09/25/2023	verified	High

TTP - Tactics, Techniques, Procedures (27)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-137	CWE-88, CWE-94	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	T1068	CAPEC-122	CWE-264, CWE-269, CWE-271, CWE-284	Execution with Unnecessary Privileges	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-16	CWE-XXX, CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
9	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
11	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-1	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX	CAPEC-184	CWE-XXX	Xxxxxxxx Xx Xxxx Xxxxxxx Xxxxxxxxx Xxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-50	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX	CAPEC-37	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-466	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxx	predictive	High
19	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
20	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
21	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
22	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
23	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
24	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
25	TXXXX.XXX	CAPEC-112	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
26	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
27	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (322)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/../../conf/template/uhttpd.json	predictive	High
2	File	/admin/options	predictive	High
3	File	/api/addusers	predictive	High
4	File	/api/baskets/{name}	predictive	High
5	File	/api/v11/users/sessions	predictive	High
6	File	/apply.cgi	predictive	Medium
7	File	/category.php	predictive	High
8	File	/cgi-bin/diagnostics	predictive	High
9	File	/cgi-bin/jumpto.php?class=user&page=config_save&isphp=1	predictive	High
10	File	/cgi-bin/pass	predictive	High
11	File	/cmf/process/<process_id>/logs	predictive	High
12	File	/config.cgi?webmin	predictive	High
13	File	/connectors/index.php	predictive	High
14	File	/data/wps.setup.json	predictive	High
15	File	/download	predictive	Medium
16	File	/edit/server	predictive	Medium
17	File	/index.php	predictive	Medium
18	File	/mcategory.php	predictive	High
19	File	/MIME/INBOX-MM-1/	predictive	High
20	File	/movie.php	predictive	Medium
21	File	/multi-vendor-shopping-script/product-list.php	predictive	High
22	File	/news-portal-script/information.php	predictive	High
23	File	/owa/auth/logon.aspx	predictive	High
24	File	/page.php	predictive	Medium
25	File	/php/ping.php	predictive	High
26	File	/public/login.htm	predictive	High
27	File	/public/plugins/	predictive	High
28	File	/real-estate-script/search_property.php	predictive	High
29	File	/recordings/index.php	predictive	High
30	File	/searchJob.php	predictive	High
31	File	/uncpath/	predictive	Medium
32	File	/user/loader.php?api=1	predictive	High
33	File	/var/miniupnpd.conf	predictive	High
34	File	/wp-admin/options-general.php	predictive	High
35	File	/wp-content/plugins/updraftplus/admin.php	predictive	High
36	File	addentry.php	predictive	Medium
37	File	xxxxxxxxxx.x	predictive	Medium
38	File	xxx_xxxx_xxx.xxx	predictive	High
39	File	xxxxx/xxxxxxxxx.xxx	predictive	High
40	File	xxxxx/xxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxxxx.xx	predictive	High
41	File	xxx_xxxxxxx/xxxxxxx/xxxxx/xxxxx_xxxxxxxx.xxx	predictive	High
42	File	xxx/xxxxxxx/xxxx/x	predictive	High
43	File	xxxxx.xxx	predictive	Medium
44	File	xxxxxxx_xxxx_xxxxxxx_xxxxxx_xxx.x	predictive	High
45	File	xxx/xxxx/xxxx/xxxx_xxxxx_xxxx_xxxxx.x	predictive	High
46	File	xxxxx-xxxx/xxxxxx.x	predictive	High
47	File	xxx-xxxxxxx-xxx-xxxx/xxx/xxxx/xxxx/xxx/xxxxxxxxx/xxxx/xxxxxxxxxx.xxxx	predictive	High
48	File	xxxx/xxxxxxxxx.xxx	predictive	High
49	File	xxxxxx_xx.x	predictive	Medium
50	File	xxxxxxxxx.xxx	predictive	High
51	File	xx-xxxxxx/xxxxx/xxxxxxxxxxx/xxxx-xxxxxxxx.xxx	predictive	High
52	File	xxxx.x	predictive	Low
53	File	xxx-xxx/xxxxxxx.xx	predictive	High
54	File	xxx/xxx?xxxx	predictive	Medium
55	File	xxxxxxxxxxx.xxx.xxx	predictive	High
56	File	xxxxxxxxxx/xxxxxxx.xxxx	predictive	High
57	File	xxxxxx/xxx.x	predictive	Medium
58	File	xxxxxx/xxx.x	predictive	Medium
59	File	xxxxxx/xxx.x	predictive	Medium
60	File	xxxxxx/xxx.x	predictive	Medium
61	File	xxxxxx/xxxx.x	predictive	High
62	File	xxxxxx/xxxx.x	predictive	High
63	File	xxxxxxx.xxx	predictive	Medium
64	File	xxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/	predictive	High
65	File	xxxxxxx.x	predictive	Medium
66	File	xxxxxxxxxx.xxx	predictive	High
67	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
68	File	xxxxxxxxxx_xxxxxx.x	predictive	High
69	File	xxxx/xxxxxxxx.xxxx.xxxxxxx.xxx	predictive	High
70	File	xxxxxx.xxx	predictive	Medium
71	File	xxxxxx.xxx	predictive	Medium
72	File	xxxxxxx/xxxxx/xxxx.x	predictive	High
73	File	xxxxxxx/xxxxx/xxxxxxx/xx_xxxxxxxxx.x	predictive	High
74	File	xxxxxxx/xxx/xxxxxxxxx/xxx.x	predictive	High
75	File	xxxxxxx/xxxxxxx/xxxxxxx/xxx/xxx.x	predictive	High
76	File	xxxxxxx.xxxx	predictive	Medium
77	File	xxxxx.xxx	predictive	Medium
78	File	xxx.x	predictive	Low
79	File	xxxx/xxxxxxxxxx/xxxxxx-xxxx.x	predictive	High
80	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxx.x	predictive	High
81	File	xxxxxxx-xxxx.xxx	predictive	High
82	File	xxxxxx/xxxxxx.xxx	predictive	High
83	File	xxxxxxxxx/xxxxxxx/xxxx/xxxxxxxxxxx/xxxxxxxxxxxxxx.xxx	predictive	High
84	File	xxxxxx.xxxxx.xxx_xxxxx	predictive	High
85	File	xxxxxxxxxx.xxxxx.xxx	predictive	High
86	File	xx/xxx/xxx_xxxx_xxxx.x	predictive	High
87	File	xxxxxx.x	predictive	Medium
88	File	xxx/xxxxxx_xxx.x	predictive	High
89	File	xxxxxx/xxxxxxxxx?xx=xxx_xxx.xxx	predictive	High
90	File	xxxxxx/xxxxx	predictive	Medium
91	File	xx.xx	predictive	Low
92	File	xxxx/xxx_xxxx_xxxxx.x	predictive	High
93	File	xx/xxxx/xx.x	predictive	Medium
94	File	xx/xxxxxxx/xxxxxx-xxx.x	predictive	High
95	File	xx/xxxx/xxxxxxxxx.x	predictive	High
96	File	xx/xxx/xxx-xxxx.x	predictive	High
97	File	xx/xxxxxx/xxxxxx.x	predictive	High
98	File	xxxxxxxxx.xxx	predictive	High
99	File	xxx/xxxxxx.xxx	predictive	High
100	File	xxxxxxx/xxxxxxxxx_xxxxxxx.xxx.xxx	predictive	High
101	File	xxxxxxxx/xxxxxxxxxx/xxxxx-xx-xxxxxxxxx-xxxxxxxx.xxx	predictive	High
102	File	xxxxx.xxx	predictive	Medium
103	File	xxxxx.xxx?x=/xxxx/xxxxxxxx	predictive	High
104	File	xxxxxxx.xxx	predictive	Medium
105	File	xxxxxxxxxx.xxx	predictive	High
106	File	xxxxxx/xxxxxx/xxxx.x	predictive	High
107	File	xxxxxx/xxxxxx/xxxx/xxxxxxxxxxxxxxxxxxxxxx.xx	predictive	High
108	File	xxxxxx_xxxxxxxxx.x	predictive	High
109	File	xxx.x/xxxxxx.x	predictive	High
110	File	xxxx/xxxxxx.xxx	predictive	High
111	File	xxx.x	predictive	Low
112	File	xxxxxxxxxx/xxx_xxxx.x	predictive	High
113	File	xxxxxxxxxxx/xxxxxx.x	predictive	High
114	File	xxxxxxxx/xxxxx_xxx.x	predictive	High
115	File	xxxxxxxxx/xxxxxxx/xxxxxx/xxx_xxxx.x	predictive	High
116	File	xxxx/xxx/x/xxx_xxx.x	predictive	High
117	File	xxxxx.xxx	predictive	Medium
118	File	xxxxx.xxxx	predictive	Medium
119	File	xxxxx_xx.xxxx	predictive	High
120	File	xxx_xxx_xxxxxxxxxx_xxxxxxxxxxx.xxx	predictive	High
121	File	xxxxxx/xxxxxx.x	predictive	High
122	File	xxxxxxxxxx/xxxxxxxx.x	predictive	High
123	File	xxxxxxx/	predictive	Medium
124	File	xxxxxxx/xxxxxxx/xxx_xxxxxxx.x	predictive	High
125	File	xxxxxxx/xxxxxxxx/xxxxxxx/xxxxxxx.xxxx_xxxxxx.xxx/xxxx_xxxxxx.xxx	predictive	High
126	File	xxx_xxxxx_xxxx.x	predictive	High
127	File	xxxxx.xxx	predictive	Medium
128	File	xxxxxxx/xxxxxx.x	predictive	High
129	File	xxx/xxxx/xxxx.x	predictive	High
130	File	xxx/xxxxxxxxx/x_xxxxxx.x	predictive	High
131	File	xxxx.xxx	predictive	Medium
132	File	xxxx.xx	predictive	Low
133	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
134	File	xxxxx.x	predictive	Low
135	File	xxxxxxx-xxxxxx/xxxx/xxxxx/xxxxxx_xxxxxx.xxx	predictive	High
136	File	xxxxxxxxxxxx.xxx	predictive	High
137	File	xxxxxxx/xxxxxx/xxxxxxxx/xxxxxxxx.xxx	predictive	High
138	File	xxxxx-xxx_xx.x	predictive	High
139	File	xxxxx-xxxx-xxxx.x	predictive	High
140	File	xxxxx-xxxxx.x	predictive	High
141	File	xxxxx-xx.x	predictive	Medium
142	File	xxxxx-xxx.x	predictive	Medium
143	File	xxxxx-xxxxxxx.x	predictive	High
144	File	xxxxxxxxxx.xxx	predictive	High
145	File	xxxxx.x	predictive	Low
146	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
147	File	xxxxxxx/xxxxxxxxx/xxxxxxxxxx	predictive	High
148	File	xxx.x	predictive	Low
149	File	xxxxxxx/xxxxxx.xx	predictive	High
150	File	xxxx_xxxxxxx_xxxxxxxx.xxx	predictive	High
151	File	xxxxxxxxxxxxxxxx.xx	predictive	High
152	File	xxx-xxxx.x	predictive	Medium
153	File	xxxxxxxxx/xxxxxxxxxx	predictive	High
154	File	xxxxxxxxx/xxxxxxxx/xxx/xxxxxx/xxx.xxx?xxx=xxxxxx_xxxx	predictive	High
155	File	xxxxxxxxx/xxxxx/xxxx/xxx_xxxxxxx/xxxxxxx/xxxxxxx.xxx	predictive	High
156	File	xxxxxx/xxxxxxxxxxx/{xxx}.xxx	predictive	High
157	File	xxxxx/xxxxxx.x	predictive	High
158	File	xxxxx.x	predictive	Low
159	File	xxxxxxx.xxx/xxxxxxx.xxxxxxxxxxxx/xxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxx.xx	predictive	High
160	File	xxxxxx_xxxxxxxx.xxx	predictive	High
161	File	xxx/xxx_xxx.x	predictive	High
162	File	xxxx/xxxx.xxxxx	predictive	High
163	File	xxxxxx.x	predictive	Medium
164	File	xxx/xxxxxxx/xxx_xxxxxxx.x	predictive	High
165	File	xxxxxx.xxx	predictive	Medium
166	File	xxxx.x	predictive	Low
167	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	High
168	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxxxxx/xxxx.xxx	predictive	High
169	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxxxxx/xxxxxxxx.xxx	predictive	High
170	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxx/xxxx.xxx	predictive	High
171	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxx.xxx	predictive	High
172	File	xxxxxx.x	predictive	Medium
173	File	xxxxxxxxx.xx-xxxxxx/xxxxx.xxx	predictive	High
174	File	xxxx-xxxxxxx.xxx	predictive	High
175	File	xx-xxxxx/xxxxxxxxx.xxx	predictive	High
176	File	xx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxx-xxxx-xxxxx.xxx	predictive	High
177	File	xx-xxxxx/xx/xxxx-xxx.xx	predictive	High
178	File	xx-xxxxxxxx/xxxxx-xx-xxxxx.xxx	predictive	High
179	File	xx-xxxxxxxx/xxxxxxxxx.xxx	predictive	High
180	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
181	File	xx-xxxxx.xxx	predictive	Medium
182	File	xx/xx/xxxxx	predictive	Medium
183	File	xxxxx-xxxxxx.xxx	predictive	High
184	File	xxxxxxxxxxxxx.xx	predictive	High
185	File	_xxxx.x	predictive	Low
186	File	_xxxxxxxx/xxxx?xxxx	predictive	High
187	Library	/xxxxxxxxx/xxx.xxx	predictive	High
188	Library	xxxx.xxx	predictive	Medium
189	Library	xxx.xxx	predictive	Low
190	Library	xxx/xxxxxx/xxxxxx.xx	predictive	High
191	Library	xxxxxxxxx	predictive	Medium
192	Library	xxxxxxxx.xxx	predictive	Medium
193	Library	xxxxxx.xxx	predictive	Medium
194	Library	xxxxxx.xxx	predictive	Medium
195	Library	xxxxxxxx.xxx	predictive	Medium
196	Library	xxxxxxxx.xxx	predictive	Medium
197	Library	xxxxxxx.xxx	predictive	Medium
198	Library	xxxxxxxxx.xxx	predictive	High
199	Library	xxxxxx.xxxxx	predictive	Medium
200	Library	xxx/xxx/xxxx/	predictive	High
201	Library	xxxxxx.xxx	predictive	Medium
202	Library	xxxxxxxxxxx.xxx	predictive	High
203	Argument	$_xxxxxxx['xx']['xxxx_xxxx']	predictive	High
204	Argument	-x	predictive	Low
205	Argument	xxxxx/xxxxx	predictive	Medium
206	Argument	xx	predictive	Low
207	Argument	xxxxxxxx	predictive	Medium
208	Argument	xxxxxxxxx	predictive	Medium
209	Argument	xxxxxxxxx/xxxx	predictive	High
210	Argument	xxxxxxx	predictive	Low
211	Argument	xxxxxxx	predictive	Low
212	Argument	xxx	predictive	Low
213	Argument	xxx_xx	predictive	Low
214	Argument	xxx	predictive	Low
215	Argument	xxxxxx	predictive	Low
216	Argument	xxxxxxx	predictive	Low
217	Argument	xxxx_xxxxxx_xxxxxxxx	predictive	High
218	Argument	xxxxxxx_xxx	predictive	Medium
219	Argument	xxxxxxxx_xxxxxx/xxxxxxxx_xxxx/xxxxxxxx_xxxxxxxx/xxxxxxxx_xxxx	predictive	High
220	Argument	xxx_xxx_xx	predictive	Medium
221	Argument	xxxxxxxxxxx	predictive	Medium
222	Argument	xxx	predictive	Low
223	Argument	xxxxx	predictive	Low
224	Argument	xxxxxx	predictive	Low
225	Argument	xxxxxxxx	predictive	Medium
226	Argument	xxxxxx	predictive	Low
227	Argument	xxxxxx	predictive	Low
228	Argument	xxxxxx_xxxx_xxx	predictive	High
229	Argument	xxxxxxxxx	predictive	Medium
230	Argument	xxxx	predictive	Low
231	Argument	xx	predictive	Low
232	Argument	xx	predictive	Low
233	Argument	xxxxx	predictive	Low
234	Argument	xxxxx.xxx?xxxxxx=xxx_xxxxxxx/xxxx=xxxxxxx/xx=x/xxxxxxxx=xxxxx	predictive	High
235	Argument	xxx	predictive	Low
236	Argument	xxxxx[x][xxxxx]	predictive	High
237	Argument	xxxxx[xxxxx][xx]	predictive	High
238	Argument	xxxxxxxx[xx]	predictive	Medium
239	Argument	xxx	predictive	Low
240	Argument	xxxx/xxxxxx_xxxx	predictive	High
241	Argument	xxxx_xxx	predictive	Medium
242	Argument	xxxxx	predictive	Low
243	Argument	xxxx	predictive	Low
244	Argument	x_xx	predictive	Low
245	Argument	xxxx	predictive	Low
246	Argument	xx	predictive	Low
247	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	High
248	Argument	xxxxxxx	predictive	Low
249	Argument	xxxxxxxx	predictive	Medium
250	Argument	xxxxxxxx	predictive	Medium
251	Argument	xxxx	predictive	Low
252	Argument	xxxx_xxxx	predictive	Medium
253	Argument	xx	predictive	Low
254	Argument	xxxxxxxxxx	predictive	Medium
255	Argument	xxxxxxxx_xxx	predictive	Medium
256	Argument	xxxxx	predictive	Low
257	Argument	xxxxxxx	predictive	Low
258	Argument	xxxxxxx_xxxxx_xxxxx_xxxxxxx=xxxxx	predictive	High
259	Argument	xxxxxxx	predictive	Low
260	Argument	xxxxxx	predictive	Low
261	Argument	xxxxxx-xx-xxxxx	predictive	High
262	Argument	xxx_xxxxx	predictive	Medium
263	Argument	xxxxxxxxx	predictive	Medium
264	Argument	xxxxxxxx[xxxx xxxxxxx][xxxxxxxxxxxxxxxxxx]	predictive	High
265	Argument	xxxxxxxxxxxxx	predictive	High
266	Argument	xxxx	predictive	Low
267	Argument	xxxx_xxxxxx	predictive	Medium
268	Argument	xx	predictive	Low
269	Argument	xx_xxxxxx/xx_xxxxxx	predictive	High
270	Argument	xxx	predictive	Low
271	Argument	xxxxxx	predictive	Low
272	Argument	xxxx	predictive	Low
273	Argument	xxx	predictive	Low
274	Argument	xxxxxxx	predictive	Low
275	Argument	xxxxxxxx	predictive	Medium
276	Argument	xx	predictive	Low
277	Argument	xx	predictive	Low
278	Argument	xxxxxxxxxxx	predictive	Medium
279	Argument	xxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxx	predictive	High
280	Argument	xxxxxx	predictive	Low
281	Argument	xxx	predictive	Low
282	Argument	xxx	predictive	Low
283	Argument	xxx/xxxxx	predictive	Medium
284	Argument	xxxx	predictive	Low
285	Argument	xxxx/xxxxxxxxxxx	predictive	High
286	Argument	xxxxxxxx	predictive	Medium
287	Argument	xxxxxxxx-xxxx-xx	predictive	High
288	Argument	xxxx_xxxxx	predictive	Medium
289	Argument	xxxx_xxxxx	predictive	Medium
290	Argument	xxxxxxxx	predictive	Medium
291	Argument	x_xxxx_xxxxxxx	predictive	High
292	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	High
293	Argument	xxx_xxxxx_xxx	predictive	High
294	Argument	x/x	predictive	Low
295	Argument	xxxxx:xxxx	predictive	Medium
296	Argument	_xxxxxxx	predictive	Medium
297	Input Value	%xx	predictive	Low
298	Input Value	%xxxxxxxx%xxxxxxx(x)%xx/xxxxxx%xx	predictive	High
299	Input Value	'>[xxx]	predictive	Low
300	Input Value	-x	predictive	Low
301	Input Value	.%xx.../.%xx.../	predictive	High
302	Input Value	..%xx	predictive	Low
303	Input Value	../	predictive	Low
304	Input Value	/%xx	predictive	Low
305	Input Value	x' xxx xxxx=xxxx xxx 'xxxx'='xxxx	predictive	High
306	Input Value	xxxx	predictive	Low
307	Input Value	xxxxxxxx	predictive	Medium
308	Input Value	<xxx xxx=x xxxxxxx=xxxxxx(x)>	predictive	High
309	Input Value	<xxxxxx>xxxxx('xxxxxxxx.xxxxxx='+xxxxxxxx.xxxxxx)</xxxxxx>.xxxxx	predictive	High
310	Input Value	xxxx	predictive	Low
311	Input Value	xxxxxxx -xxx	predictive	Medium
312	Pattern	\|xx\|	predictive	Low
313	Pattern	\|xx xx xx xx\|	predictive	High
314	Network Port	xxx/xx (xxx)	predictive	Medium
315	Network Port	xxx/xx	predictive	Low
316	Network Port	xxx/xxx (xxx)	predictive	High
317	Network Port	xxx/xxxx	predictive	Medium
318	Network Port	xxx/xxxx (xxx)	predictive	High
319	Network Port	xxx/xxxx	predictive	Medium
320	Network Port	xxx/xxxx	predictive	Medium
321	Network Port	xxx/xxxx	predictive	Medium
322	Network Port	xxx/xxxxx	predictive	Medium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Samples (1)

The following list contains associated samples:

https://bazaar.abuse.ch/sample/de7fab866e4ec43a9421d6f98ee5d37ab55c0d341261eb93b564d39786b882ae/

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!