Serpent Stealer Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	548
de	448
es	4

Country

us	966

Actors

Serpent Stealer	13

Activities

Interest

Timeline

Type

Not Defined	268
Operating System	46
Smartphone Operating System	38
Content Management System	32
Image Processing Software	30

Vendor

Not Defined	284
Apple	54
IBM	50
Google	30
Microsoft	26

Product

ImageMagick	24
Google Android	22
Oracle E-Business Suite	20
Linux Kernel	18
Apple iTunes	18

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	Elefant CMS layout code injection	6.3	5.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00105	0.04	CVE-2017-20064
2	Apple iTunes SQLite input validation	9.3	8.9	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00825	0.00	CVE-2015-3415
3	Ettercap Etterfilter ef_compiler.c compile_tree memory corruption	3.3	2.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	0.00	CVE-2017-6430:
4	Joomla CMS com_news sql injection	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00000	0.00
5	Joomla CMS com_phocadownload sql injection	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00000	0.06
6	Epson TMNet WebConfig oadmin_1 Persistent cross site scripting	5.2	4.7	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00349	0.00	CVE-2017-6443
7	Fujitsu ScanSnap Installer WinSSInstS1100iWW1.exe privileges management	5.3	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.02
8	LogoStore search.php sql injection	6.3	5.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00142	0.04	CVE-2017-20129
9	HPE LoadRunner/Performance Center access control	8.1	7.8	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.16162	0.07	CVE-2017-5789
10	WordPress 4.7.1 injection	7.3	7.1	$5k-$25k	$0-$5k	Functional	Not Defined	0.00000	0.03
11	Teleopti WFM Administration GetOneTenant Credentials information disclosure	5.0	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00070	0.00	CVE-2017-20109
12	Bitrix Site Manager Contact Form cross site scripting	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00053	0.12	CVE-2017-20122
13	Apple iTunes Expat numeric error	7.3	7.0	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03228	0.00	CVE-2015-1283
14	Ucweb UC Browser HTML URL ui layer	5.4	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00070	0.08	CVE-2017-20041
15	InnoSetup Installer uncontrolled search path	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.00074	0.08	CVE-2017-20051
16	Telekom Open Cloud SSO cross site scripting	3.5	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00000	0.00
17	spice Incoming Message input validation	5.9	5.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02266	0.00	CVE-2016-9578
18	TrueConf Server Stored cross site scripting	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00095	0.04	CVE-2017-20113
19	HPE Helion Eucalyptus access control	7.5	7.4	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00307	0.00	CVE-2016-8528
20	Capstone Kernel Driver winkernel_mm.c cs_winkernel_malloc integer overflow	8.0	7.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00223	0.03	CVE-2017-6952

IOC - Indicator of Compromise (23)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	3.210.242.78	ec2-3-210-242-78.compute-1.amazonaws.com	Serpent Stealer	01/28/2024	verified	Medium
2	3.213.37.39	ec2-3-213-37-39.compute-1.amazonaws.com	Serpent Stealer	01/28/2024	verified	Medium
3	3.219.159.186	ec2-3-219-159-186.compute-1.amazonaws.com	Serpent Stealer	03/14/2024	verified	Medium
4	18.204.80.51	ec2-18-204-80-51.compute-1.amazonaws.com	Serpent Stealer	02/27/2024	verified	Medium
5	34.197.122.235	ec2-34-197-122-235.compute-1.amazonaws.com	Serpent Stealer	02/26/2024	verified	Medium
6	XX.XXX.XX.XXX	xxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	03/04/2024	verified	Medium
7	XX.XXX.XX.XX	xxx-xx-xxx-xx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/23/2024	verified	Medium
8	XX.XXX.XXX.XX	xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/20/2024	verified	Medium
9	XX.XXX.XX.XX	xxx-xx-xxx-xx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	04/03/2024	verified	Medium
10	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/26/2024	verified	Medium
11	XX.XX.XXX.XX	xxx-xx-xx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/14/2024	verified	Medium
12	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/26/2024	verified	Medium
13	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/21/2024	verified	Medium
14	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	04/03/2024	verified	Medium
15	XX.XXX.XX.XXX	xxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/05/2024	verified	Medium
16	XX.XXX.XX.XXX	xxx-xx-xxx-xx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/26/2024	verified	Medium
17	XX.XX.XX.XX	xxx-xx-xx-xx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/07/2024	verified	Medium
18	XX.XX.XXX.XXX	xxx-xx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/12/2024	verified	Medium
19	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	03/15/2024	verified	Medium
20	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/09/2024	verified	Medium
21	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/19/2024	verified	Medium
22	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	02/06/2024	verified	Medium
23	XXX.XX.XXX.XXX	xxx-xxx-xx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx Xxxxxxx	04/03/2024	verified	Medium

TTP - Tactics, Techniques, Procedures (20)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High
2	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
3	T1059	CAPEC-137	CWE-88, CWE-94	Argument Injection	predictive	High
4	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
5	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
6	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
7	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
8	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
9	TXXXX	CAPEC-	CWE-XXX, CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	High
10	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
11	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
12	TXXXX	CAPEC-112	CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
13	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
14	TXXXX.XXX	CAPEC-	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
15	TXXXX.XXX	CAPEC-459	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
16	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
17	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
18	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
19	TXXXX.XXX	CAPEC-59	CWE-XXX, CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
20	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High

IOA - Indicator of Attack (327)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	*-sub-menu.php	predictive	High
2	File	/admin/conferences/get-all-status/	predictive	High
3	File	/admin/conferences/list/	predictive	High
4	File	/admin/extended	predictive	High
5	File	/admin/general/change-lang	predictive	High
6	File	/admin/group	predictive	Medium
7	File	/admin/moduleinterface.php	predictive	High
8	File	/catcompany.php	predictive	High
9	File	/cgi.cgi	predictive	Medium
10	File	/controllers/MgrDiagnosticTools.php	predictive	High
11	File	/designer/add/layout	predictive	High
12	File	/filemanager/upload/drop	predictive	High
13	File	/Forms/oadmin_1	predictive	High
14	File	/forms/web_runScript	predictive	High
15	File	/forum/away.php	predictive	High
16	File	/front/roomtype-details.php	predictive	High
17	File	/inc/lists/edit-list.php	predictive	High
18	File	/inc/lists/edit_member.php	predictive	High
19	File	/index.php	predictive	Medium
20	File	/KK_LS9ReportingPortal/GetData	predictive	High
21	File	/lists/admin/	predictive	High
22	File	/LogoStore/search.php	predictive	High
23	File	/mcategory.php	predictive	High
24	File	/opt/tms/bin/cli	predictive	High
25	File	/panel/uploads	predictive	High
26	File	/roomtype-details.php	predictive	High
27	File	/search-result/	predictive	High
28	File	/swms/ms.cgi	predictive	Medium
29	File	/system/www/pem/ck.pem	predictive	High
30	File	/TeleoptiWFM/Administration/GetOneTenant	predictive	High
31	File	/tmp	predictive	Low
32	File	/usr/local/contego/scripts/hostname.sh	predictive	High
33	File	/var/run/cloudera-scm-agent/process	predictive	High
34	File	/vmi/manager/engine/management/commands/apns_worker.py	predictive	High
35	File	/zm/index.php	predictive	High
36	File	4.7.0/4.7.1	predictive	Medium
37	File	aacplusenc.c	predictive	Medium
38	File	aac_parser.c	predictive	Medium
39	File	xxxxxxxxxx.x	predictive	Medium
40	File	xxxxx.xxxxx.xxx	predictive	High
41	File	xxxxx/xxxxxxxxx/	predictive	High
42	File	xxxxx/xxxxx.xxx	predictive	High
43	File	xxxxx/xxxxxx/xxxx_xxxxxxx/xxxxxx/	predictive	High
44	File	xxxxx/xxxxxxxx/xxxxxx/	predictive	High
45	File	xxxxx/xxxxxx.xxx	predictive	High
46	File	xxxxx_xxxxx_xxxx	predictive	High
47	File	xxx_xxxxxx_xxxxxx.xxx	predictive	High
48	File	xxx.x	predictive	Low
49	File	xxx/xxxxxxxx/xxxxxxx.xxx	predictive	High
50	File	xxxxxxxxxxx/xxxxxxx/xxxxxxxxxxx.xxx	predictive	High
51	File	xxxxxxx_xxxxxx.x	predictive	High
52	File	xxxxxxx_xxxxx.xxx	predictive	High
53	File	xxxxxxx/xxxxx/xxxx/	predictive	High
54	File	xxxx/xxxx_xxxxxx.x	predictive	High
55	File	xxx/xxxxx.x	predictive	Medium
56	File	xxx/xxxxxxxx/xxxxxx/xxxx/xxxxx.xx	predictive	High
57	File	xxxxxx_xx.x	predictive	Medium
58	File	xxx_xxxxxx_xxxxxx_xxxx.xxx	predictive	High
59	File	x-xxxxxx/xxxxxxx.x	predictive	High
60	File	xxxxx/xxxxxxxxx/xxxxxx/xxxxxxxxxx/x-xxxxxxx/xxxxxxx/xxx/xxx/xxxxxxx.xxx	predictive	High
61	File	xxxxx.xxx	predictive	Medium
62	File	xxxx_xxxx_xxxxxxx.xxx	predictive	High
63	File	xxxx_xxxxxxxxxxx.xxx	predictive	High
64	File	xxx/xxxxxxxx.x	predictive	High
65	File	xxxxxxxxx.xxx	predictive	High
66	File	xxxxxx/xxxx.x	predictive	High
67	File	xxxxxx/xxx.x	predictive	Medium
68	File	xxxxxx/xxx.x	predictive	Medium
69	File	xxxxxx/xxx.x	predictive	Medium
70	File	xxxxxx/xxx.x	predictive	Medium
71	File	xxxxxx/xxxx.x	predictive	High
72	File	xxxxxx/xxxx.x	predictive	High
73	File	xxxxxx/xxx.x	predictive	Medium
74	File	xxxxxxxxx_xxxxxx.xxx	predictive	High
75	File	xxxxxx_xxx.xxx	predictive	High
76	File	xxxxxx/xxx.x	predictive	Medium
77	File	xxxxxxxx.x	predictive	Medium
78	File	xxxxxxx	predictive	Low
79	File	xxxxxx.xxx	predictive	Medium
80	File	xxx_xxxxxx_xxxxxx.xxx	predictive	High
81	File	xxxxxxx/xxxx/xxxxxx_xxxxxxx.x	predictive	High
82	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxx_xxxxxxx.x	predictive	High
83	File	xxxxxxx/xxx/xxx-xxxxxx.x	predictive	High
84	File	xxxxxxx/xxxxx/xxx/xxx-xxx-xx/xxx_xxx_xxxx.x	predictive	High
85	File	xxxxxxx/xxxxx/xxx/xxx-xxx/xxxxx.x	predictive	High
86	File	xxxxxxx/xxxxx/xxx/xxx-xxx/xxxxxx.x	predictive	High
87	File	xxxxxxx/xxx/xxx/xxx/xx_xxx.x	predictive	High
88	File	xxxxxxx/xxxx/xx.x	predictive	High
89	File	xxxxxxx/xxx/x_xxxx.x	predictive	High
90	File	xxxxx_xxx_xxxxxx.x	predictive	High
91	File	xxxxx_xxxxxx.x	predictive	High
92	File	xxxxxxxxxxxxxxxxxx.x	predictive	High
93	File	xxxxxxxx.x	predictive	Medium
94	File	xx_xxxxxxxx.x	predictive	High
95	File	xxxxxxx.x	predictive	Medium
96	File	xxxx/xxxxxxxxxx/xxxxxx-xxxx.x	predictive	High
97	File	xxxx/xxxxxxxxxx/xxxxxx-xxx.x	predictive	High
98	File	xxxxx.x	predictive	Low
99	File	xxxxxxxx-xxxx.xxxx	predictive	High
100	File	xxxxxxx.x	predictive	Medium
101	File	xxxxx.x	predictive	Low
102	File	xxxxxxxxxx.xxx	predictive	High
103	File	xxxxxxxxxxxxxx.xxx	predictive	High
104	File	xx/xxx.x	predictive	Medium
105	File	xxxxxxxx.xxxxxx	predictive	High
106	File	xxxx.xxx	predictive	Medium
107	File	xxxxxxx-xxxxxx/xxxxxxxx/xxxxx/xxxxxxxx/xxxxxxxx_xxxxxxxxx.xxx	predictive	High
108	File	xxxxxxxx.x	predictive	Medium
109	File	xxxxxxxxxxxxx.x	predictive	High
110	File	xxx-xxxx/xxx/xxxx/xxxx-xxxxx.x	predictive	High
111	File	xxx.xxx	predictive	Low
112	File	xxxxxx.xxx	predictive	Medium
113	File	xxxxxxx.xxx	predictive	Medium
114	File	xx/xxxx/xxxxxx.x	predictive	High
115	File	xx/xxxxxxx/xxxxxx-xxx.x	predictive	High
116	File	xx/xxxxxxxx/xxx_xxxxxxxx.x	predictive	High
117	File	xxxxxxxxx/xxxxxx/xxxxxxx.xxx	predictive	High
118	File	xxx.xxx	predictive	Low
119	File	xxxxxxx-xxxxxx/xxxx/xxxxxx.xxx	predictive	High
120	File	xxx/xx/xxxx/xxxxx.xxxxx	predictive	High
121	File	xxxxx.xxx	predictive	Medium
122	File	xxxxx.xxx	predictive	Medium
123	File	xxxxxxx/xxxxxxxx.xxx	predictive	High
124	File	xxxxx-xxxxxxxx-xxxxxx/xxxx_xxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxx.xxx	predictive	High
125	File	xx-xxxx.x	predictive	Medium
126	File	xxxx/x_xxxxxxxxxxxx.x	predictive	High
127	File	xxx_xxx.x	predictive	Medium
128	File	xxx_xxxxxx.x	predictive	Medium
129	File	xxxxx_xxxxxxx.x	predictive	High
130	File	xxxxx_xxxxxx_xxxx.x	predictive	High
131	File	xxx_xxx.x	predictive	Medium
132	File	xxxx/xxxx_xxxxx.x	predictive	High
133	File	xxxxxx/xxx_xxxx.x	predictive	High
134	File	xxxxxxxxxxxx/xxxxxxx/xxxxxxxxxx.xxx	predictive	High
135	File	xxxxxxxxxx/xxxxxxxxx_xxxxxx.x	predictive	High
136	File	xxxx/xxxx/xxxxxx.x	predictive	High
137	File	xxxxxxxx/xxxxx_xxxxxx.x	predictive	High
138	File	xxxxxxx/xxxxxx.x	predictive	High
139	File	xxxxxxxxx/xxx/xxx_xxx.x	predictive	High
140	File	xxxxxxxxx/xxx/xxx_xxx.x	predictive	High
141	File	xxxx/xxx/x/xxx_xxxxxx.x	predictive	High
142	File	xxxx/xxx/x/xxx_xxx.x	predictive	High
143	File	xxxx/xxxxxxx/x_xxxxxx.x	predictive	High
144	File	xxxx/xxxx/xxxxxxx.x	predictive	High
145	File	xxxxxxx/xxx_xxxx.x	predictive	High
146	File	xxxxxxx/xxxxxxx.x	predictive	High
147	File	xxxxxx/xxxxxxx.x	predictive	High
148	File	xxxxxx/xxxxxx.x	predictive	High
149	File	xxxxxxxxxx/xxxxxx.x	predictive	High
150	File	xxxxxxxxxx/xxxxxx-xxx.x	predictive	High
151	File	xxxxxxx/xxxx/	predictive	High
152	File	xxxxxx_xxxxxx_xxxxx_xxxx_xxxx.xxx	predictive	High
153	File	xxxxxxx.x	predictive	Medium
154	File	xxxxxxx/xxxxxxx.xxx	predictive	High
155	File	xxxxxxxx/xxxxxxxx.x	predictive	High
156	File	xxxxxxx.xxx	predictive	Medium
157	File	xxxxxxxxxxx.xxxx	predictive	High
158	File	xxx/xxxx/xx_xxxxxxxx.x	predictive	High
159	File	xxx/xxxx/xxx_xxx.x	predictive	High
160	File	xxx/xxxxxxx.x	predictive	High
161	File	xxxxxxxx.xxx	predictive	Medium
162	File	xxxx.xx-xxxxxx/xxxxx.xxx	predictive	High
163	File	xxxxxxx-xxxxxx/xxxx/xxxxx/xxxxxx_xxxxxx.xxx	predictive	High
164	File	xxxxxxxxxxx/xxxx_xxxx.x	predictive	High
165	File	xxxxxxxxxxx/xxxx_xxxxxxx_xx_xxx.x	predictive	High
166	File	xxxxxxxxxxx/xxxx_xxxx.x	predictive	High
167	File	xxxxxxxxxxxxxxxx/xxxxxxxxxxx	predictive	High
168	File	xxxxxx.x	predictive	Medium
169	File	xxxxxxxx.xxx	predictive	Medium
170	File	xxxxxxxxxxx.xxx	predictive	High
171	File	xxxxxxxxxxx_xxxxxxxxxxxx.xx	predictive	High
172	File	xxxxx/xxxxx.xxx	predictive	High
173	File	xxxx.xxx	predictive	Medium
174	File	xxxxxxxx.x	predictive	Medium
175	File	xxxx.xxx	predictive	Medium
176	File	xxxxx-xxxxxx.x	predictive	High
177	File	xxxxx-xxxxxxx.x	predictive	High
178	File	xxxxx-xxx.x	predictive	Medium
179	File	xxxxx_xxxxxx.xxx	predictive	High
180	File	xxxxxxx.xxx	predictive	Medium
181	File	xxxxxxx.xxx?xx=xxx_xxxxxxxx	predictive	High
182	File	xxxxxxx.xxx	predictive	Medium
183	File	xxx/xxxxxxxx.x	predictive	High
184	File	xxx/xxxxxxx.x	predictive	High
185	File	xxx/xxxx.x	predictive	Medium
186	File	xxx/xxxx.x	predictive	Medium
187	File	xxxxx-x.xx-xxxxxxxxx.xxx	predictive	High
188	File	xxxx/xxxxx	predictive	Medium
189	File	xxx-xxxxxxx.x	predictive	High
190	File	xx_xxxxxx.x	predictive	Medium
191	File	xxxxxxx.x	predictive	Medium
192	File	xxxxxxxxxxxxx-xxxxxx/xxx/xxxxxxxx/xx_xxxxxx.xxx	predictive	High
193	File	xxx/xxxxxxxxxx.x	predictive	High
194	File	xxxxxxxx-xxxxxx/xxx/xxxxxxxx/xxxx.xxx	predictive	High
195	File	xxx_xxx.x	predictive	Medium
196	File	xxx_xxxxxxx.x	predictive	High
197	File	xxxxx/xxxxxx/xxxxxxx/xxxx.xxx	predictive	High
198	File	xxxxx/xxxxxx.x	predictive	High
199	File	xxxxxxxx/xxxxxx.x	predictive	High
200	File	xxxxxx/xxxxxx_xxxxxxxxxxx.xxx	predictive	High
201	File	xxx.xxx	predictive	Low
202	File	xxx/xxxxxx/xxxxxx/xxx/xxxxxx.xxx	predictive	High
203	File	xxxx/xxx/xxx_xxxx.x	predictive	High
204	File	xxxx.xxx	predictive	Medium
205	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	High
206	File	xxxxxxxxxxx-xxxxxx/xxx/xxxxxxxxxx/xxxxxxxx.xxx	predictive	High
207	File	xxxxxxxxx.xxxxx	predictive	High
208	File	xxxxxxxxx_xx.x	predictive	High
209	File	xxxxxxxxxxxxxxxxx.xxx/xxxxxxxxxxxxxxxxxx.xxx	predictive	High
210	File	xxxxxxx/xxxxxxxxx.x	predictive	High
211	File	xxx/xxxxx/xxxxxx-xxx.xxx`	predictive	High
212	File	xxx/xxxxx/xxxxx.xxx	predictive	High
213	Library	/xxx/xxxx/xxxxx.x/xx-xxxx-xxxxxxx.xxxxx	predictive	High
214	Library	/xxx/xxx/xxxx/	predictive	High
215	Library	xxxx/xxx/xxxxxxx/xxxxx.x	predictive	High
216	Library	xxxxxxx/xxx/xxxxx_xxxxxxx.xxx.xxx	predictive	High
217	Library	xxx/xxxxxx/xxxxxx.xx	predictive	High
218	Library	xxx/xxxxxxxxxxxxx/xxxxxxxxxx.xx	predictive	High
219	Library	xxxxxxxxxxxxxx.xx	predictive	High
220	Library	xxxx-xxx.xxx	predictive	Medium
221	Library	xxxxxxxx.xxx	predictive	Medium
222	Library	xxxxxxxx.xxx	predictive	Medium
223	Library	xx_xxxxxx/xxxxxxxx/xxx/xxxxxx.xxx	predictive	High
224	Argument	$xxxx	predictive	Low
225	Argument	$xxxx->xxxxx->xxxxxxxxxxxxxx)	predictive	High
226	Argument	--xxxxxx	predictive	Medium
227	Argument	-x/-x	predictive	Low
228	Argument	-xxxxxxxxxxxxx	predictive	High
229	Argument	xxxxxx	predictive	Low
230	Argument	xxxxxx_xxxx	predictive	Medium
231	Argument	xxxxxxxxxx	predictive	Medium
232	Argument	xxxxxxxxxxxx	predictive	Medium
233	Argument	xxxxxxxxx/xxxx	predictive	High
234	Argument	x-x/x-x/x-xxxx/x-xx	predictive	High
235	Argument	x/xxxx	predictive	Low
236	Argument	xxxxxxxxxxxxx	predictive	High
237	Argument	xxx	predictive	Low
238	Argument	xxxxxx/xxxx	predictive	Medium
239	Argument	xxx	predictive	Low
240	Argument	xxxxxxxxxxx_xxxxx_xxxx_xxxxxxxx	predictive	High
241	Argument	xxxxxxx	predictive	Low
242	Argument	xxxxxx_xxxxxx	predictive	High
243	Argument	xxxxxxxx	predictive	Medium
244	Argument	xxx_xxxxxxxxx	predictive	High
245	Argument	xxx	predictive	Low
246	Argument	xxxx	predictive	Low
247	Argument	xxxxxxxx	predictive	Medium
248	Argument	xxxxxx_xxxx	predictive	Medium
249	Argument	xxx_xxxxxxxxx_xx_xxxxx_xxxxxxxx	predictive	High
250	Argument	xxxxxxxxxxxxx/xxxxxxx	predictive	High
251	Argument	xxxx	predictive	Low
252	Argument	xxxx/xxxxxx/xxxxxx/xxxx	predictive	High
253	Argument	xxxxxxxx	predictive	Medium
254	Argument	xx	predictive	Low
255	Argument	xxxxxxxxx	predictive	Medium
256	Argument	xxxx	predictive	Low
257	Argument	xxxxxx	predictive	Low
258	Argument	xxxx[]	predictive	Low
259	Argument	xxxx/xxx_xxxx	predictive	High
260	Argument	xxxxxxxxxxxxxxxx	predictive	High
261	Argument	xx_xxxxxxxxxxx	predictive	High
262	Argument	xx_xxxxx	predictive	Medium
263	Argument	xxxx	predictive	Low
264	Argument	xxxxxxx xxxx	predictive	Medium
265	Argument	xxxx	predictive	Low
266	Argument	xxxxxxxx	predictive	Medium
267	Argument	xxxxx	predictive	Low
268	Argument	xxx_xxxxx_xxxx	predictive	High
269	Argument	xxxx	predictive	Low
270	Argument	xx/xxxx	predictive	Low
271	Argument	xx-xxxxx-xxxxxx	predictive	High
272	Argument	xxxx	predictive	Low
273	Argument	xxxxxxxx	predictive	Medium
274	Argument	xxxx	predictive	Low
275	Argument	xxxxxxxxxxxx	predictive	Medium
276	Argument	xxxx_xxxxxx	predictive	Medium
277	Argument	xx	predictive	Low
278	Argument	xxxxx	predictive	Low
279	Argument	xxxxx	predictive	Low
280	Argument	xxxxxxx	predictive	Low
281	Argument	xxxxxxxx_xxx	predictive	Medium
282	Argument	xxxxxx	predictive	Low
283	Argument	xxxxxxxxx	predictive	Medium
284	Argument	xxxxxx	predictive	Low
285	Argument	xxxxxx_xxxx	predictive	Medium
286	Argument	xxxxxxx_xxxxx/xxx_xxxx	predictive	High
287	Argument	xxxxxxxxxx/xxxxxx/xxxxxxxx/xxxxxx_xxxxx/xxxxxx_xxx	predictive	High
288	Argument	xxx	predictive	Low
289	Argument	xxxx	predictive	Low
290	Argument	xxxxxxx/xxxxxxx	predictive	High
291	Argument	xxxx	predictive	Low
292	Argument	xxx	predictive	Low
293	Argument	xxxxx	predictive	Low
294	Argument	xxxxx	predictive	Low
295	Argument	xxxxxxxx/xxxx	predictive	High
296	Argument	xxx	predictive	Low
297	Argument	xxxxx_xxxxx	predictive	Medium
298	Argument	xxx	predictive	Low
299	Argument	xxxx	predictive	Low
300	Argument	xxxxxxxx	predictive	Medium
301	Argument	xxxxxxxx/xxxxxxx	predictive	High
302	Argument	xxxxxxxx/xxxxxxxx	predictive	High
303	Argument	xxx_xxx	predictive	Low
304	Argument	xxxxx	predictive	Low
305	Argument	xxxx	predictive	Low
306	Argument	xxxxxxxxxxxxxxxxxxxxxxx	predictive	High
307	Argument	xxxxxx_xxxxx	predictive	Medium
308	Argument	x_xxx	predictive	Low
309	Argument	x-xxxxxxxxx-xxx	predictive	High
310	Argument	x-xxxxx-xxxxxxx	predictive	High
311	Argument	xxxxx	predictive	Low
312	Argument	_xxxxxxxx	predictive	Medium
313	Input Value	%xxxxx%xxxxx=xx%xxxxxxxxx=xxxxx(x)%xx	predictive	High
314	Input Value	'xx''='	predictive	Low
315	Input Value	..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xx..%xxxxx%xxxxxxxx	predictive	High
316	Input Value	x xxx xxxxx(x) xxx ('xxx'='xxx'))	predictive	High
317	Input Value	x' xxx xxxx=xxxx xxx 'xxxx'='xxxx	predictive	High
318	Input Value	xxxx	predictive	Low
319	Input Value	xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' xxx xxxx=xxxx xxx 'xxxx'='xxxx	predictive	High
320	Input Value	<xxx xxx="xxxx://x"; xx xxxxxxx="$(’x').xxxx(’xxxxxx’)" />	predictive	High
321	Input Value	<xxxxxx>xxxxxx.xxxxx(x)</xxxxxx>	predictive	High
322	Input Value	xxxxxxxxxx%xx%xx%xxxxxxxx%xxxxxxx%xx%xxxxxx%xxxxxx%xx%xx%xx%xxxxxxxx%xxxxxxxxxxxxx	predictive	High
323	Input Value	xxxx\'\";><xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
324	Input Value	xxxx' xxxxx xxx xxxxxx xxxxxx(xxxxxx('xxxxx','xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'),'xxxxx'),xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx,xxxx-- xxxx&xxxxxx=	predictive	High
325	Network Port	xxx/xxxx	predictive	Medium
326	Network Port	xxx/xxxx	predictive	Medium
327	Network Port	xxx/xxxxx	predictive	Medium

References (19)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!