APT-C-36 Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (1000)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	780
zh	144
de	24
es	16
ru	12

Country

us	514
cn	306
tr	48
gb	36
il	30

Actors

Cobalt Strike	10
AsyncRAT	3
Mirai	2
Meterpreter	2
IcedID	1

Activities

Interest

Timeline

Type

Not Defined	326
Social Network Software	44
Content Management System	38
WordPress Plugin	38
Operating System	20

Vendor

Not Defined	256
Facebook	44
Microsoft	26
SourceCodester	24
Oracle	18

Product

Facebook WhatsApp	34
WordPress	16
Facebook WhatsApp Business	14
PHP	12
Microsoft Windows	10

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	TikiWiki tiki-register.php input validation	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.01075	9.47	CVE-2006-6168
2	V-EVA Press Release Script page.php sql injection	7.3	7.1	$0-$5k	$0-$5k	High	Unavailable	0.00187	0.04	CVE-2010-5047
3	LogicBoard CMS away.php redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	2.67
4	Tiki Admin Password tiki-login.php improper authentication	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00936	1.83	CVE-2020-15906
5	DZCP deV!L`z Clanportal config.php code injection	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.42	CVE-2010-0966
6	DZCP deV!L`z Clanportal browser.php information disclosure	5.3	5.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02733	0.99	CVE-2007-1167
7	MGB OpenSource Guestbook email.php sql injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.01302	1.02	CVE-2007-0354
8	PHP Link Directory Administration Page index.html cross site scripting	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00374	0.18	CVE-2007-0529
9	SourceCodester Complaint Management System Lodge Complaint Section register-complaint.php unrestricted upload	6.3	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00045	1.21	CVE-2024-1875
10	AWStats Config awstats.pl cross site scripting	4.3	4.1	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00587	0.19	CVE-2006-3681
11	Joomla CMS com_easyblog sql injection	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00000	0.36
12	jforum User input validation	5.3	5.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00289	0.04	CVE-2019-7550
13	Esoftpro Online Guestbook Pro ogp_show.php sql injection	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00108	0.08	CVE-2009-4935
14	ThinkPHP Language Pack pearcmd.php file inclusion	8.5	8.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04137	0.04	CVE-2022-47945
15	Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 Configuration Setting ndmComponents.js information disclosure	5.3	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Workaround	0.00045	0.11	CVE-2024-4021
16	Lars Ellingsen Guestserver guestbook.cgi cross site scripting	4.3	4.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00169	0.14	CVE-2005-4222
17	JoomlaTune Com Jcomments admin.jcomments.php cross site scripting	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00489	0.05	CVE-2010-5048
18	Indexu suggest_category.php cross site scripting	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00000	0.32
19	Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed memory corruption	8.3	8.2	$25k-$100k	$0-$5k	High	Official Fix	0.96710	0.04	CVE-2023-4966
20	PHP CityPortal index.php sql injection	8.5	8.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00285	0.04	CVE-2017-15970

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	46.246.12.6	c-46-246-12-6.ip4.frootvpn.com	APT-C-36	03/02/2023	verified	High
2	46.246.86.3	c-46-246-86-3.ip4.frootvpn.com	APT-C-36	03/02/2023	verified	High
3	128.90.106.22	undefined.hostname.localhost	APT-C-36	12/11/2020	verified	High
4	XXX.XX.XXX.XX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
5	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
6	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
7	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
8	XXX.XX.XXX.X	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
9	XXX.XX.XXX.XX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
10	XXX.XX.XXX.XXX	xxxxxxxxx.xxxxxxxx.xxxxxxxxx	Xxx-x-xx	12/11/2020	verified	High
11	XXX.XXX.XXX.XXX		Xxx-x-xx	03/02/2023	verified	High

TTP - Tactics, Techniques, Procedures (25)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-21, CWE-22, CWE-23, CWE-25, CWE-36, CWE-425	Path Traversal	predictive	High
2	T1040	CAPEC-102	CWE-319	Authentication Bypass by Capture-replay	predictive	High
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	High
4	T1059	CAPEC-242	CWE-94, CWE-1321	Argument Injection	predictive	High
5	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	High
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
7	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	High
8	TXXXX	CAPEC-150	CWE-XXX	Xxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxx	predictive	High
9	TXXXX.XXX	CAPEC-191	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	High
10	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	High
11	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	High
12	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
13	TXXXX.XXX	CAPEC-492	CWE-XXXX	Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx	predictive	High
14	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	High
15	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
16	TXXXX	CAPEC-50	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
17	TXXXX.XXX	CAPEC-120	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	High
18	TXXXX.XXX	CAPEC-154	CWE-XXX	Xxxxxxxxxxxx	predictive	High
19	TXXXX	CAPEC-38	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	High
20	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	High
21	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
22	TXXXX	CAPEC-157	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxxxxx Xxxxxx	predictive	High
23	TXXXX.XXX	CAPEC-112	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	High
24	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	High
25	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (419)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	%SYSTEMDRIVE%\node_modules\.bin\wmic.exe	predictive	High
2	File	/#ilang=DE&b=c_smartenergy_swgroups	predictive	High
3	File	/Account/login.php	predictive	High
4	File	/admin/	predictive	Low
5	File	/Admin/changepassword.php	predictive	High
6	File	/admin/general-setting	predictive	High
7	File	/admin/save.php	predictive	High
8	File	/admin/service	predictive	High
9	File	/adminapi/system/crud	predictive	High
10	File	/adminapi/system/file/openfile	predictive	High
11	File	/admin_route/dec_service_credits.php	predictive	High
12	File	/api/download	predictive	High
13	File	/api/v1/alerts	predictive	High
14	File	/api/v1/terminal/sessions/?limit=1	predictive	High
15	File	/api/v4/teams//channels/deleted	predictive	High
16	File	/api/wechat/app_auth	predictive	High
17	File	/b2b-supermarket/shopping-cart	predictive	High
18	File	/cancel.php	predictive	Medium
19	File	/category.php	predictive	High
20	File	/categorypage.php	predictive	High
21	File	/cgi-bin/cstecgi.cgi	predictive	High
22	File	/cgi-bin/vitogate.cgi	predictive	High
23	File	/change-language/de_DE	predictive	High
24	File	/control/register_case.php	predictive	High
25	File	/debug/pprof	predictive	Medium
26	File	/devinfo	predictive	Medium
27	File	/dist/index.js	predictive	High
28	File	/download	predictive	Medium
29	File	/fcgi/scrut_fcgi.fcgi	predictive	High
30	File	/forum/away.php	predictive	High
31	File	/geoserver/gwc/rest.html	predictive	High
32	File	/goform/formSysCmd	predictive	High
33	File	/HNAP1	predictive	Low
34	File	/hosts/firewall/ip	predictive	High
35	File	/index.jsp#settings	predictive	High
36	File	/index.php	predictive	Medium
37	File	/index.php/ccm/system/file/upload	predictive	High
38	File	/log/decodmail.php	predictive	High
39	File	/ndmComponents.js	predictive	High
40	File	/oauth/idp/.well-known/openid-configuration	predictive	High
41	File	/OA_HTML/cabo/jsps/a.jsp	predictive	High
42	File	/php/ping.php	predictive	High
43	File	/proxy	predictive	Low
44	File	/register.php	predictive	High
45	File	/RPS2019Service/status.html	predictive	High
46	File	/s/index.php?action=statistics	predictive	High
47	File	/setting	predictive	Medium
48	File	/Setting/change_password_save	predictive	High
49	File	/xxxxxx-xxxx/xxxxxxx/	predictive	High
50	File	/xxxxxx.xxx	predictive	Medium
51	File	/xxxx.xxx	predictive	Medium
52	File	/xx_xxx.xxx	predictive	Medium
53	File	/xxxxxx/xxx/xx/xxxx/xxxx_xxxxx.x	predictive	High
54	File	/xxxxxxxx.xxx	predictive	High
55	File	/xxxxxx/xxxx/xxxx	predictive	High
56	File	/xxxxxxxxxxxx/xxxx/xxxxxxxxxxx?_xxxxxx=xxxxx&xx=xxxxxxxxxxxxx&xxxx=xx&xxxx=x&xxxx=x_xxxxxxxxxxx+xxxx&xxxx=xxx	predictive	High
57	File	/xxx/xxxxx/xxxxxxx/xxxx/xxxxxxxxxxxxxx	predictive	High
58	File	/xxxxxx/xxxxxxxxxxxxx?xxxxxx=xxxxxx	predictive	High
59	File	/xxxxxxx/	predictive	Medium
60	File	/xxxx/xxxxx/xxxxxxxx?xx=x	predictive	High
61	File	/xxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
62	File	/xxxx-xxxx-xxxxxx.xxx	predictive	High
63	File	/xxxx/xxxxxxx_xxxxxx_xxxxxxxx.xxx	predictive	High
64	File	/xxxxxxxxxxx/xxxxxxxx	predictive	High
65	File	/xxxxxx/	predictive	Medium
66	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	High
67	File	/xxxxxx/xxxx/xx_xxxxxxx_xxxx_xx.xxx	predictive	High
68	File	/xxx-xxx-xxxxx/xxxxxxx/xxxx	predictive	High
69	File	/xxxxxx/xxxxx.xxx/xxxxx/xxxxx/xxx_xxxxxx_xxxxxxxx.xxxx	predictive	High
70	File	?x=xxxxx/xxxxxxx/xxxxxxxxxx	predictive	High
71	File	xxxxxx.xxx	predictive	Medium
72	File	xxxxxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
73	File	xxxxxxx.xxx	predictive	Medium
74	File	xxx-xxx.xxx	predictive	Medium
75	File	xxxxx.xxxxxxxxx.xxx	predictive	High
76	File	xxxxx.xxx	predictive	Medium
77	File	xxxxx.xxx?x=xxxxxx&x=xxxxxx&x=xxxxxx	predictive	High
78	File	xxxxx/xxxxxxxx.xxx	predictive	High
79	File	xxxxx/xxxxx.xxx	predictive	High
80	File	xxxxx/xxxxxxx/xxx-xxxxxx-xxxxxxxxx/xxxxxxx/xxxxx-xxxxxx-xxxxxxxxx-xxxx.xxx	predictive	High
81	File	xxxxx/xxxxxxxx/xxxx_xxxxxxx.xxx	predictive	High
82	File	xxxxx_xxxxx.xxx	predictive	High
83	File	xxxxxxxxx_x.xxx	predictive	High
84	File	xxxxxxxxxxxxx.xxx	predictive	High
85	File	xxxxx.xxx	predictive	Medium
86	File	xxxxx_xxxxxx.xxx	predictive	High
87	File	xxxxxxxxxxxxxxx.xxx	predictive	High
88	File	xxxxxxx.xxx	predictive	Medium
89	File	xxx/xxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxx.xxx	predictive	High
90	File	xxx/xxxx/xxxx.xxx	predictive	High
91	File	xxx-xxx.xxx	predictive	Medium
92	File	xxxxxxxxxx.xxx	predictive	High
93	File	xxxxxxxxx.xxx	predictive	High
94	File	xxxxx-xxxx/xxxxxx.x	predictive	High
95	File	xxxxxxx.xx	predictive	Medium
96	File	xxx_xxxx_xxxxx.x	predictive	High
97	File	xx_xxxx.xxx	predictive	Medium
98	File	xxxx_xxxxxx_xxxxxx.xxx	predictive	High
99	File	xxxxxxxx.xxx	predictive	Medium
100	File	xxx-xxx/xxxxxxx.xx	predictive	High
101	File	xxx-xxx/xxxxxxxx.xxx	predictive	High
102	File	xxxxxxx	predictive	Low
103	File	xxxx.xxx	predictive	Medium
104	File	xxxxxxx/xxxxxx.xxx	predictive	High
105	File	xxxxx.xxx	predictive	Medium
106	File	xxxxx-xxxxxxx.xxx	predictive	High
107	File	xxxxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxx.xxx	predictive	High
108	File	xxxxxxxxxx.xxxxx.xxx	predictive	High
109	File	xxxx.xx	predictive	Low
110	File	xx_xxxxxxxxxxxxxx.xxx	predictive	High
111	File	xxxxxxxx.x	predictive	Medium
112	File	xxxxxxx.xxx	predictive	Medium
113	File	xxxxxxxx_xxx.xxx	predictive	High
114	File	xxxxx.xxx	predictive	Medium
115	File	xxxxxxxx/xxxxxx-xxxx.xxx	predictive	High
116	File	xxxxxxxxxxxxx.xxxx	predictive	High
117	File	xxxx/xxxxxxxxxx/xxxxxx-xxxxxx.x	predictive	High
118	File	xxxx_xxxxx.xxx	predictive	High
119	File	xx/xxxxx/xxxxxxxxxx.x	predictive	High
120	File	xx/xxx/xxxxxx/xx_xxxxxxx.x	predictive	High
121	File	xx/xxx/xxxxxx/xxxxxxx.x	predictive	High
122	File	xxxxxxx/xxxx/xx/xxxxxx/xxxx.xxx	predictive	High
123	File	xxxx.xxx	predictive	Medium
124	File	xxxxxxx.xxx	predictive	Medium
125	File	xxxxxxxxx.xxx	predictive	High
126	File	xxxxxx.xxx	predictive	Medium
127	File	xxxx.x	predictive	Low
128	File	xxxxxx/xxxxx_xxxxxxx.xxx	predictive	High
129	File	xxxxxxxxxxxx.xxx	predictive	High
130	File	xxxxxxxxxxxxxx.xxx	predictive	High
131	File	xxx/xxxxxx.xxx	predictive	High
132	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	High
133	File	xxxxxxxxxxxxx.xxx	predictive	High
134	File	xxxxxxxx/xxxxxxx/xxxxxxx.xxxx.xxx	predictive	High
135	File	xxxxx.xxx	predictive	Medium
136	File	xxxxx.xxxx	predictive	Medium
137	File	xxxxx.xxx	predictive	Medium
138	File	xxxxx.xxx?x=xxxx&x=xxxx&x=xx_xxx_xxxxxx	predictive	High
139	File	xxxxxxx_xxxx.xxx	predictive	High
140	File	xxxx.xxx	predictive	Medium
141	File	xxxxxxxxx/xxxx-xxxxxxxxxx.xxx	predictive	High
142	File	xxxxxxxx/xxx-xxx/xxxxxxxxxx/xxxxxxx.xx	predictive	High
143	File	xx/xxxxxx/xxxxxxxxxxx	predictive	High
144	File	xxxx_xxxx.xxx	predictive	High
145	File	xxxxx/xxx_xxx.x	predictive	High
146	File	xxxxxx.xxx	predictive	Medium
147	File	xxxxxxxxxx/xxxxxxxx.x	predictive	High
148	File	xxxxxxxxx/xxxxxx_xxxx_xxx.x	predictive	High
149	File	xxxx.xxx	predictive	Medium
150	File	xxxxx-xxxxxx-xxxxxx.xxxx	predictive	High
151	File	xxxxx.xxxx	predictive	Medium
152	File	xxxxxx.xxx	predictive	Medium
153	File	xxxx/xxxxxxxxxx.xxx	predictive	High
154	File	xxxxx_xxxxx/xx_xxxxxxx.x	predictive	High
155	File	xxxx/xxxxxxx_xxxx.x	predictive	High
156	File	xxxxxxx.xxx/xxxxx.xxx	predictive	High
157	File	xxxxxxx/xxx.xxx	predictive	High
158	File	xxxxxx_xx.xxx	predictive	High
159	File	xxxx/?x=xxxxxxxx/xxxx_xxxxxxx	predictive	High
160	File	xxxxxxxx.xx	predictive	Medium
161	File	xxxxxxxx.xxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxxxxxx	predictive	High
162	File	xxx/xxxx/xxx.x	predictive	High
163	File	xxxxx_xxxxxxxxxx.xxx	predictive	High
164	File	xxx_xxxxxxxx.x	predictive	High
165	File	xxx_xxxx.xxx	predictive	Medium
166	File	xxxx.xxx	predictive	Medium
167	File	xxxxxxxxxx.xx	predictive	High
168	File	xxxxxx\xxx_xxxxxxx\xxxxxxxxxxxxxxxx\xxxxxxxxxxxxxxxx.xxx	predictive	High
169	File	xxxxxxx.xxx	predictive	Medium
170	File	xxxxxxx_xxxxxx_xxx.xxxx	predictive	High
171	File	xxxxxxx/xxxxxxxxx/xxx.xxx	predictive	High
172	File	xxxxxxx/xxxxxx/xxx.xxx	predictive	High
173	File	xxxxxx_xxx.xxx	predictive	High
174	File	xxxx_xxxx.xxx	predictive	High
175	File	xxxxxxxxxx.xxx	predictive	High
176	File	xxxxxxxxxxxxxxxxxx.xxx	predictive	High
177	File	xxxxxxx.xxx	predictive	Medium
178	File	xxxxxxxx.xxx?xxxxxxxx=xxx&xxxxx=xxxxxxxx&xxx=xxx_xxxxx	predictive	High
179	File	xxxxxxxx.xxx	predictive	Medium
180	File	xxxxxxxxxx.xxx	predictive	High
181	File	xxxxxxxx.xxx	predictive	Medium
182	File	xxxxxxxx/xxxxx/xxxxxxxx?xxxxxxxx	predictive	High
183	File	xxxxxxxx.xxx	predictive	Medium
184	File	xxx.x	predictive	Low
185	File	xxxxxx.xx	predictive	Medium
186	File	xxxxxx_xxxx_xxxx.xxx	predictive	High
187	File	xxxxxx/xxxxxxxxxxx/xxx/xxxxxxxxxx/xxxx.xxx	predictive	High
188	File	xxxxxxxxxxxxxxx.xxx	predictive	High
189	File	xxxxxxx.xxx	predictive	Medium
190	File	xxxxxxx.xxx	predictive	Medium
191	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxx.xxx	predictive	High
192	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxx-xxxxxxxx.xxx	predictive	High
193	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxx.xxx	predictive	High
194	File	xxxxxx/xxxxxxxxx/xxxx/xxxxxxx/xxxxxxxxxxxx.xxx	predictive	High
195	File	xxxxxxx/xxxxxx.xxx	predictive	High
196	File	xxx_xxxxx.x	predictive	Medium
197	File	xxx/xxxxxxxxx/xxxxxxx/xxxx.xxx	predictive	High
198	File	xxx/xxxx/xxxx/xx/xxxxx/xxxxx/xxxx/xxxxxxxxxxxx.xxxx	predictive	High
199	File	xxxxxxx/xxxxx_xxxx.xx	predictive	High
200	File	xxxxxx.x	predictive	Medium
201	File	xxxxxxx-xxxxxxx.xxx	predictive	High
202	File	xxxxxxx_xxxxxxxx.xxx	predictive	High
203	File	xxxxxxxxxx.xxxxx	predictive	High
204	File	xxxxxxx.xxx.xx.xxxxxxxxxxx.xxx	predictive	High
205	File	xxxxxxxx.xxxxx.xxx	predictive	High
206	File	xxxxxx-xxxxxx.xxx	predictive	High
207	File	xxxx-xxxxx.xxx	predictive	High
208	File	xxxx-xxxxx.xxx	predictive	High
209	File	xxxx-xxxxxxxx.xxx	predictive	High
210	File	xxxxxxxxxxxxxxxxx.xxxxx	predictive	High
211	File	xxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxx_xxx.xxxx	predictive	High
212	File	xxxxx.xxx	predictive	Medium
213	File	xxxxx/xxxxx.xxx	predictive	High
214	File	xxxxx/xxxxxxxx-xxxxxxxxx.xxx	predictive	High
215	File	xxxxxxxxxxxxxxx.xxx	predictive	High
216	File	xxxxxxx.xxx	predictive	Medium
217	File	xxxxxxx.xxx	predictive	Medium
218	File	xxxxxxx.xxx	predictive	Medium
219	File	xxxxxxx.xxx	predictive	Medium
220	File	xxxxxx.xxx	predictive	Medium
221	File	xxx.xxx	predictive	Low
222	File	xxx.xxx	predictive	Low
223	File	xxx/xxxxxxx/xxxxxxx/xxxxxxxxxx?xx=x	predictive	High
224	File	xxx/xxxxxxx/xxxxxxx/xxxxxxxx?xx=x	predictive	High
225	File	xxxxxxxx/xxxxx/xxxxxxxxx.xxx	predictive	High
226	File	xxxxxxx_xxxxxxxxx.xxx	predictive	High
227	File	xxxxxxxx.xxx	predictive	Medium
228	File	xx-xxxxx/xxxxxxx.xxx	predictive	High
229	File	xx-xxxx.xxx	predictive	Medium
230	File	xx-xxxxxxxx/xxxx.xxx	predictive	High
231	File	xx-xxxxxxxx/xxxx-xxx/xxxxxxxxx/xxxxx-xx-xxxx-xxxxx-xxxxxxxxxx.xxx	predictive	High
232	File	xx-xxxxx.xxx	predictive	Medium
233	File	xx-xxxxxxxxx.xxx	predictive	High
234	File	xxxxxx.xxx	predictive	Medium
235	File	xxxxxx.xxx?xxxxxx=xxxxxxxxx.xxxx&xxxxxxxxxxx=x	predictive	High
236	File	xxxxxxxxxxx.xxx	predictive	High
237	File	_xxxxxx.xxx	predictive	Medium
238	File	~/xxxxxxxx.xxx	predictive	High
239	Library	xxxxxx/xxxxxxx/xxx/xxx/xxxxx/xxxxxx/xxxxxxxxx.xxx	predictive	High
240	Library	xxxxxxxx.xxx	predictive	Medium
241	Library	xxxxxxx/xxx/xxxxxx.xxx.xxx	predictive	High
242	Library	xxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	High
243	Library	xxx/xxxxxxxxx.xx	predictive	High
244	Library	xxxxx.xxx	predictive	Medium
245	Library	xxxxxxxxx.x.x.xxx.xxx	predictive	High
246	Library	xxxxxxxxxxxxxx.xxxxx	predictive	High
247	Library	xxxxxxx.xxx	predictive	Medium
248	Argument	$_xxxxxx["xxx_xxxx"]	predictive	High
249	Argument	xxxxxxxxxxxxxxxxxx	predictive	High
250	Argument	xxxxxx	predictive	Low
251	Argument	xxxxxxx	predictive	Low
252	Argument	xxxxxxx	predictive	Low
253	Argument	xxxx	predictive	Low
254	Argument	xxxxxxxxx	predictive	Medium
255	Argument	xxxx_xxxxx	predictive	Medium
256	Argument	xx	predictive	Low
257	Argument	xxxxxx	predictive	Low
258	Argument	xxxxxxxx	predictive	Medium
259	Argument	xxxxxxxx	predictive	Medium
260	Argument	xxxx_xxx	predictive	Medium
261	Argument	xxxx	predictive	Low
262	Argument	xxxxx	predictive	Low
263	Argument	xxxxxxxxxx_xxxx	predictive	High
264	Argument	xxxx_xx	predictive	Low
265	Argument	xxx	predictive	Low
266	Argument	xxxxxxxxxx	predictive	Medium
267	Argument	xxxxxxxxxx	predictive	Medium
268	Argument	xxxxxxxx_xx	predictive	Medium
269	Argument	xxxxx/xxxx	predictive	Medium
270	Argument	xxx_xx	predictive	Low
271	Argument	xxxxxxxx	predictive	Medium
272	Argument	xxxxx_xx	predictive	Medium
273	Argument	xxxxxx	predictive	Low
274	Argument	xxxxxx[xxxx]	predictive	Medium
275	Argument	xxxxxxx-xxxxxx	predictive	High
276	Argument	xxxxxxxx	predictive	Medium
277	Argument	xxxxxxxxxx	predictive	Medium
278	Argument	xxxx	predictive	Low
279	Argument	xxxxxxxxx	predictive	Medium
280	Argument	xxxx	predictive	Low
281	Argument	xxxx	predictive	Low
282	Argument	xxxxxxxxxxx	predictive	Medium
283	Argument	xxxxxxx	predictive	Low
284	Argument	xxxxxxxxxx	predictive	Medium
285	Argument	xxxxx	predictive	Low
286	Argument	xxxxx/xxxx/xxxxx/xxxxxxxx	predictive	High
287	Argument	xxxxx/xxxx	predictive	Medium
288	Argument	xxxxx/xxxxxxxx	predictive	High
289	Argument	xxxxx	predictive	Low
290	Argument	xxxxxxxxx	predictive	Medium
291	Argument	xxxxx_xxx	predictive	Medium
292	Argument	xxxxxxxx[xxxxxxx_xx]	predictive	High
293	Argument	xxxxxxx/xxxx	predictive	Medium
294	Argument	xxxx	predictive	Low
295	Argument	xxxxxxx/xxxxxxxx	predictive	High
296	Argument	xxxxxxxx	predictive	Medium
297	Argument	xxxxxxxxxxxxxxxx	predictive	High
298	Argument	xxxxxx_xxx	predictive	Medium
299	Argument	xxxxx xxxx	predictive	Medium
300	Argument	xxxxx xxxx/xxxx xxxx	predictive	High
301	Argument	xxxx/xxxxxxx/xxx/xxxxxxxxx	predictive	High
302	Argument	xxxxxxxx[xxx_xx]	predictive	High
303	Argument	xxxxxxxxx/xxxxxx	predictive	High
304	Argument	xx_xx	predictive	Low
305	Argument	xxxxxx	predictive	Low
306	Argument	xxxxxxxxxxxxxxx._xxxx	predictive	High
307	Argument	xxxx	predictive	Low
308	Argument	xxxx	predictive	Low
309	Argument	xxxx	predictive	Low
310	Argument	xxxxxxxx	predictive	Medium
311	Argument	xxxx	predictive	Low
312	Argument	xxxx_xxxx	predictive	Medium
313	Argument	xx	predictive	Low
314	Argument	xxxxxxxxxx	predictive	Medium
315	Argument	xxxxxx	predictive	Low
316	Argument	xx_xxxxxxxx/xx_xxxx/xx_xxxxxxx/xxxxx	predictive	High
317	Argument	xx_xxxxx	predictive	Medium
318	Argument	xxxxx	predictive	Low
319	Argument	xxx_xxxxxxxx	predictive	Medium
320	Argument	xxxxxxx	predictive	Low
321	Argument	xxxxx	predictive	Low
322	Argument	xxxxxxxxx	predictive	Medium
323	Argument	xxxxxxxxx	predictive	Medium
324	Argument	xx_xxxxx	predictive	Medium
325	Argument	xxxxxxxx[xx]	predictive	Medium
326	Argument	xxxxxxxx	predictive	Medium
327	Argument	x/xx/xxx	predictive	Medium
328	Argument	xxxx	predictive	Low
329	Argument	xxxx_xxxx	predictive	Medium
330	Argument	xxx	predictive	Low
331	Argument	xxx	predictive	Low
332	Argument	xxxxxxx	predictive	Low
333	Argument	xxx	predictive	Low
334	Argument	xxx	predictive	Low
335	Argument	xxxxxxxxx	predictive	Medium
336	Argument	xxx_xxxxx_xxxxxxxx	predictive	High
337	Argument	xxxx	predictive	Low
338	Argument	xxxx/xxxxxx/xxxxxxx	predictive	High
339	Argument	xxx/xxx	predictive	Low
340	Argument	xxxx	predictive	Low
341	Argument	xx_xx	predictive	Low
342	Argument	xxxxxx	predictive	Low
343	Argument	xxxxxx[]	predictive	Medium
344	Argument	xxxxxxxx/xxxxxxxxx	predictive	High
345	Argument	xxxx	predictive	Low
346	Argument	xxxxxxxx	predictive	Medium
347	Argument	xxxx	predictive	Low
348	Argument	xxxx_xxxx	predictive	Medium
349	Argument	xxxxxxx	predictive	Low
350	Argument	xxxxxxx/xxxxxx/xxxxxxx	predictive	High
351	Argument	xxxxx_xxxx_xxxx	predictive	High
352	Argument	xxxxxxxx	predictive	Medium
353	Argument	xxxxxx_xxxx/xxxxxx_xx/xxxxxx_xxxx/xxxxxxxx	predictive	High
354	Argument	xxxx_xxx	predictive	Medium
355	Argument	xxxxxxxxxx	predictive	Medium
356	Argument	xxxxxxxxxxx	predictive	Medium
357	Argument	xxxxx-xxxxxxxxxxxxx	predictive	High
358	Argument	xxxxxxxx	predictive	Medium
359	Argument	xxxxxxxx	predictive	Medium
360	Argument	xxxxxxxxxx	predictive	Medium
361	Argument	xxxxxxxxx	predictive	Medium
362	Argument	xxxxxxxxxx	predictive	Medium
363	Argument	xxxxxx_xxxx	predictive	Medium
364	Argument	xxxxxxxx	predictive	Medium
365	Argument	xxxxxx	predictive	Low
366	Argument	xxx_xxxx	predictive	Medium
367	Argument	xxxxxx/xxxxxx_xxxxxx	predictive	High
368	Argument	xxxxxxxxxx	predictive	Medium
369	Argument	xxxxxxxxx	predictive	Medium
370	Argument	xxxxxx_xxxx_xxxx	predictive	High
371	Argument	xxxx	predictive	Low
372	Argument	xxxx	predictive	Low
373	Argument	xxxxxxxxx	predictive	Medium
374	Argument	xxxxxxxx_xxxx/xxxxxxxx_xxxxxxx	predictive	High
375	Argument	xxxxxx	predictive	Low
376	Argument	xxxxxxx[]	predictive	Medium
377	Argument	xxxxxxxxxxx	predictive	Medium
378	Argument	xxxxxxxx/xxxxxxxx	predictive	High
379	Argument	xxxx_xx_xxx	predictive	Medium
380	Argument	xxxxx	predictive	Low
381	Argument	xxxxx/xxxx_xx/xxxxxx_xxxx/xxxxx/xxxx_xxxx/xxxx_xxxxx/xxxxx_xxxx/xxxxxxxxxxx/xxxxxxx_xxxx/xxxxxxx_xxxx/xxxxxxxx_xxxxxx/xxxxx_xxxx/xxxxxx	predictive	High
382	Argument	xxxxx	predictive	Low
383	Argument	xxxxx	predictive	Low
384	Argument	xxxxxxx	predictive	Low
385	Argument	xxxxxx_xxxxxxxx/xxxxxx_xxxxxxxx/xxxxxxxxxx_xxxxxxxx	predictive	High
386	Argument	xxxxxxxxxxx	predictive	Medium
387	Argument	xxxxx/xxxxxxxx	predictive	High
388	Argument	xxx	predictive	Low
389	Argument	xxx	predictive	Low
390	Argument	xxxxxx/xxxxx	predictive	Medium
391	Argument	xxxxxxxxxxxxx.xxxxxxxxxx	predictive	High
392	Argument	xxxxxxxx	predictive	Medium
393	Argument	xxxxxxxx/xxxxxxxx	predictive	High
394	Argument	xxx	predictive	Low
395	Argument	xxxx->xxxxxxx	predictive	High
396	Argument	x-xxxxx-xxxxxxx	predictive	High
397	Argument	xxxx xxxxxxxx	predictive	High
398	Argument	_xxx_xxxxxxxxxxx_	predictive	High
399	Input Value	"><xxx xxx=x xxxxxxx=xxxxxx(x)>	predictive	High
400	Input Value	%xxxxxx+-x+x+xx.x.xx.xxx%xx%xx	predictive	High
401	Input Value	../	predictive	Low
402	Input Value	/\xxxxxxx.xxx	predictive	High
403	Input Value	xxxx	predictive	Low
404	Input Value	x%xxxx%xxx=x	predictive	Medium
405	Input Value	xx' xxx xxx_xxxx.xxxxxxx('xxxx://xxxxxxxxx_xxxx/xxxxx')='x' xxxxx xx xxxxx_xxxx)) --	predictive	High
406	Input Value	<xxx xxx="x" xxxxxxx="xxxxxxx.xxx(x)">	predictive	High
407	Input Value	<xxx xxx=x xxxxxxx=xxxxx(xxxxxxxx.xxxxxx)>	predictive	High
408	Input Value	<xxxxxxx>xx	predictive	Medium
409	Input Value	<xxxxxx>xxxxx("xxx")</xxxxxx>	predictive	High
410	Input Value	<xxxxxx>xxxxx(x)</xxxxxx>	predictive	High
411	Input Value	<xxx xxxxxxx="xxxxx(x)" xxxxx=xxxxxxx:xxxxx>xxxxx xxxx</xxx>	predictive	High
412	Input Value	xxxxxxx -xxx	predictive	Medium
413	Input Value	xxxxxx\|xxx\|xxxxxxx	predictive	High
414	Input Value	xxxxxx%xx+xx+%xxx%xx+%xx+%xxx%xx+--+-	predictive	High
415	Input Value	xxx.xxxxxxx.xxx?	predictive	High
416	Input Value	\xxx\xxx\xxx\xxx\xxx	predictive	High
417	Network Port	xxx/xxxxx	predictive	Medium
418	Network Port	xxx/xxxx	predictive	Medium
419	Network Port	xxx xxxxxx xxxx	predictive	High

References (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!