WHAT IT FEELS LIKE FOR A TURBINE
Common Information
| Type | Value |
|---|---|
| UUID | 4421897a-e82e-4e1d-b700-61d7e1d196ca |
| Fingerprint | c29b184ee562d3c3caf748ea4f2b28770adc3b0562d57e9dde266d6d4ef17df8 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Feb. 21, 2020, 3:35 p.m. |
| Added to db | March 10, 2024, 1:38 a.m. |
| Last updated | Aug. 31, 2024, 3:02 a.m. |
| Headline | WHAT IT FEELS LIKE FOR A TURBINE |
| Title | WHAT IT FEELS LIKE FOR A TURBINE |
| Detected Hints/Tags/Attributes | 176/1/162 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 4 | new.sie |
|
| Details | File | 1 | sppa-t3000.html |
|
| Details | File | 1 | 2158_ge_integrated_plant_control_dcs_8p_brochure.pdf |
|
| Details | File | 2 | fulltext01.pdf |
|
| Details | File | 1 | 4220.pdf |
|
| Details | File | 1 | 78230.pdf |
|
| Details | File | 1 | wirelessinpower_sn_aug08.pdf |
|
| Details | File | 1 | gas-turbines.html |
|
| Details | File | 57 | cert-portal.sie |
|
| Details | File | 1 | ssa-451445.pdf |
|
| Details | File | 4 | cert.html |
|
| Details | File | 12 | www.sie |
|
| Details | File | 1 | 3852_1_t3000-systemoverview_march2008.pdf |
|
| Details | File | 1 | sppa-t3000-basic-training-manual.html |
|
| Details | File | 1 | 2015071015421700001.doc |
|
| Details | File | 1 | so.php |
|
| Details | File | 1 | scspalrpcsx.dll |
|
| Details | File | 1 | scspalrpcсx.dll |
|
| Details | File | 41 | rpcrt4.dll |
|
| Details | File | 2 | cceserver_x64.exe |
|
| Details | File | 1 | systemconfiguration.xml |
|
| Details | File | 1 | sppa-t3000_service.exe |
|
| Details | File | 2 | o.inf |
|
| Details | File | 1 | mod_jk.log |
|
| Details | File | 1 | rotatelogs.exe |
|
| Details | File | 1 | %y-%m-%d.log |
|
| Details | File | 1 | srv.xml |
|
| Details | File | 40 | web.xml |
|
| Details | File | 9 | tomcat-users.xml |
|
| Details | File | 2 | test_file.exe |
|
| Details | File | 1 | server.obj |
|
| Details | File | 1 | loginservice.log |
|
| Details | File | 31 | pom.xml |
|
| Details | File | 1 | ysoserial-all.jar |
|
| Details | File | 312 | calc.exe |
|
| Details | File | 10 | rmi.reg |
|
| Details | File | 4 | login.log |
|
| Details | File | 1 | adminservice.java |
|
| Details | File | 2 | pc.jar |
|
| Details | CVE | 197 | cve-2019-0708 |
|
| Details | CVE | 1 | cve-2016-3067 |
|
| Details | CVE | 1 | cve-2011-4529 |
|
| Details | CVE | 1 | cve-2011-4530 |
|
| Details | CVE | 1 | cve-2011-4531 |
|
| Details | CVE | 1 | cve-2011-4532 |
|
| Details | CVE | 1 | cve-2016-8565 |
|
| Details | CVE | 1 | cve-2016-8564 |
|
| Details | CVE | 1 | cve-2016-8563 |
|
| Details | CVE | 1 | cve-2018-11456 |
|
| Details | CVE | 1 | cve-2016-5874 |
|
| Details | CVE | 1 | cve-2016-7165 |
|
| Details | CVE | 1 | cve-2017-6865 |
|
| Details | CVE | 2 | cve-2018-4832 |
|
| Details | CVE | 3 | cve-2012-3015 |
|
| Details | CVE | 1 | cve-2015-1355 |
|
| Details | CVE | 1 | cve-2015-1356 |
|
| Details | CVE | 1 | cve-2015-1594 |
|
| Details | CVE | 1 | cve-2015-1602 |
|
| Details | CVE | 1 | cve-2016-7959 |
|
| Details | Domain | 1 | addxorrol.blogspot.com |
|
| Details | Domain | 768 | www.youtube.com |
|
| Details | Domain | 1 | www.dynamicscience.com.au |
|
| Details | Domain | 62 | nvlpubs.nist.gov |
|
| Details | Domain | 16 | nist.ir |
|
| Details | Domain | 3 | new.siemens.com |
|
| Details | Domain | 3 | www.ge.com |
|
| Details | Domain | 11 | www.rockwellautomation.com |
|
| Details | Domain | 1 | overview.page |
|
| Details | Domain | 5 | new.abb.com |
|
| Details | Domain | 2 | www.diva-portal.org |
|
| Details | Domain | 2 | www.control.isy.liu.se |
|
| Details | Domain | 1 | www.emerson.com |
|
| Details | Domain | 1 | www.honeywellprocess.com |
|
| Details | Domain | 1 | resourcewatch.org |
|
| Details | Domain | 4127 | github.com |
|
| Details | Domain | 60 | cert-portal.siemens.com |
|
| Details | Domain | 1 | www.siemens.com.tr |
|
| Details | Domain | 1 | instrumentandcontrol.blogspot.com |
|
| Details | Domain | 1 | forum.codenet.ru |
|
| Details | Domain | 41 | www.cisecurity.org |
|
| Details | Domain | 1 | fs.gongkong.com |
|
| Details | Domain | 1 | princesscove.com |
|
| Details | Domain | 6 | www.zelix.com |
|
| Details | Domain | 1 | workers.properties |
|
| Details | Domain | 1 | worker.properties |
|
| Details | Domain | 1 | worker.worker1.host |
|
| Details | Domain | 1 | java.rmi.dgc.lease |
|
| Details | Domain | 1 | com.pg.orion.pc.admin.adminservice.java |
|
| Details | Domain | 7 | com.company |
|
| Details | Domain | 1 | com.pg.orion.pc.security.securityservice.java |
|
| Details | Domain | 1 | www.ptc.com |
|
| Details | Domain | 1 | com.pg.orion.bw |
|
| Details | Domain | 3 | www.critifence.com |
|
| Details | Domain | 3 | runfinger.py |
|
| Details | Domain | 29 | www.cvedetails.com |
|
| Details | Domain | 641 | nvd.nist.gov |
|
| Details | Domain | 114 | tools.cisco.com |
|
| Details | Domain | 6 | 1password.com |
|
| Details | File | 1 | rashomon-of-disclosure.html |
|
| Details | File | 1 | coalfired.htm |
|
| Details | File | 1 | 7628r1.pdf |
|
| Details | File | 1 | localadminscript.exe |
|
| Details | File | 1 | securityservice.java |
|
| Details | File | 1 | base.jar |
|
| Details | File | 1 | users1.xml |
|
| Details | File | 1 | policy0.xml |
|
| Details | File | 1 | acltypesn.xml |
|
| Details | File | 1 | sppa_password_audit.py |
|
| Details | File | 1 | test2.jar |
|
| Details | File | 2 | runfinger.py |
|
| Details | Github username | 1 | wri |
|
| Details | Github username | 2 | java-deobfuscator |
|
| Details | Github username | 1 | klsecservices |
|
| Details | Github username | 10 | frohoff |
|
| Details | Github username | 1 | scadastrangelove |
|
| Details | md5 | 1 | 68fe0ce0487bd025140cf61c0b625a87 |
|
| Details | sha256 | 1 | 69d13e6a548264920411f548695112b40c9dab249b1b75849ed15331fb23d01b |
|
| Details | sha256 | 1 | d5709e747cff3db14c5826fe5025452bace19a49e245ec4d49e508976cbde417 |
|
| Details | IPv4 | 619 | 0.0.0.0 |
|
| Details | IPv4 | 142 | 192.168.0.1 |
|
| Details | MITRE ATT&CK Techniques | 5 | T3000 |
|
| Details | MITRE ATT&CK Techniques | 1 | T2000 |
|
| Details | Url | 1 | http://addxorrol.blogspot.com/2019/08/rashomon-of-disclosure.html |
|
| Details | Url | 1 | https://www.youtube.com/watch?v=eeiu |
|
| Details | Url | 1 | http://www.dynamicscience.com.au/tester/solutions1/electric/powerstation/coalfired.htm |
|
| Details | Url | 1 | https://nvlpubs.nist.gov/nistpubs/ir/2014/nist.ir.7628r1.pdf |
|
| Details | Url | 1 | https://www.researchgate.net/publication/336721597_practical_analysis_of_the_cybersecurity_of_european_smar |
|
| Details | Url | 1 | https://new.siemens.com/global/en/products/automation/distributed-control-system/sppa-t3000.html |
|
| Details | Url | 1 | https://www.ge.com/content/dam/gepower-pgdp/global/en_us/documents/automation/gfa- |
|
| Details | Url | 1 | https://www.rockwellautomation.com/en_na/products/distributed-control- |
|
| Details | Url | 1 | https://new.abb.com/power-generation/systems/power-plant-automation/abb-ability-symphony-plus |
|
| Details | Url | 1 | http://www.diva-portal.org/smash/get/diva2:20235/fulltext01.pdf |
|
| Details | Url | 1 | http://www.control.isy.liu.se/student/exjobb/xfiles/4220.pdf |
|
| Details | Url | 1 | https://www.emerson.com/documents/automation/flyer-wireless-solutions-from-emerson-rosemount-en- |
|
| Details | Url | 1 | https://www.honeywellprocess.com/library/marketing/notes/wirelessinpower_sn_aug08.pdf |
|
| Details | Url | 1 | https://resourcewatch.org/data/explore?layers=%255b%257b%2522dataset%2522%253a%2522a86d906d |
|
| Details | Url | 1 | https://github.com/wri/global-power-plant-database |
|
| Details | Url | 1 | https://new.siemens.com/cn/en/products/energy/power-generation/gas-turbines.html |
|
| Details | Url | 1 | https://cert-portal.siemens.com/productcert/pdf/ssa-451445.pdf |
|
| Details | Url | 1 | https://new.siemens.com/global/en/products/services/cert.html |
|
| Details | Url | 1 | https://www.siemens.com.tr/i/content/3852_1_t3000-systemoverview_march2008.pdf |
|
| Details | Url | 1 | http://instrumentandcontrol.blogspot.com/2014/06/sppa-t3000-basic-training-manual.html |
|
| Details | Url | 1 | http://forum.codenet.ru/q73626/%d0%a1%d0%b1%d0%be%d0%b9 |
|
| Details | Url | 3 | https://www.cisecurity.org/cis-benchmarks |
|
| Details | Url | 1 | http://fs.gongkong.com/uploadfile/technicaldata/201507/2015071015421700001.doc |
|
| Details | Url | 1 | http://www.politaiwan |
|
| Details | Url | 1 | http://www.zelix.com/klassmaster |
|
| Details | Url | 2 | https://github.com/java-deobfuscator/deobfuscator |
|
| Details | Url | 1 | https://github.com/klsecservices/desert |
|
| Details | Url | 7 | https://github.com/frohoff/ysoserial |
|
| Details | Url | 1 | https://github.com/klsecservices/sppa/blob/master/sppa_password_audit.py |
|
| Details | Url | 1 | https://www.ptc.com |
|
| Details | Url | 1 | https://www.ptc.com/en/windchill-blog/ptc-perc-virtual-machine-technology-at-the-of-aegis-the-shield-of-the-fleet |
|
| Details | Url | 1 | https://github.com/klsecservices/s7scan |
|
| Details | Url | 1 | https://github.com/scadastrangelove/scadapass |
|
| Details | Url | 1 | http://www.critifence.com/default-password-database |
|
| Details | Url | 2 | https://www.cvedetails.com |
|
| Details | Url | 120 | https://nvd.nist.gov |
|
| Details | Url | 2 | https://tools.cisco.com/security/center/softwarechecker.x |
|
| Details | Url | 1 | https://1password.com/password-generator |
|
| Details | Url | 1 | https://github.com/klsecservices/sppa/blob/master/sppa_dissector.lua |
|
| Details | Windows Registry Key | 1 | HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Siemens\SCS\PAL\DefaultClientProtocol |