Current ThreatQ Version Filter
 

CyberCrime Tracker CDF

The web format of this guide reflects the most current release.  Guides for older iterations are available in PDF format.  

Integration Details

ThreatQuotient provides the following details for this integration:

Introduction

CyberCrime Tracker is an open source intelligence source found at https://cybercrime-tracker.net.

The integration provides the following feed:

  • CyberCrime Tracker - returns text containing a newline delimited list of URLs.

The integration ingests the following system objects:

  • Adversaries
    • Adversary Attributes
  • Indicators
    • Indicator Attributes

Installation

This integration can be installed in the My Integration section of your ThreatQ instance. See the Adding an Integration topic for more details.

Configuration

ThreatQuotient does not issue API keys for third-party vendors. Contact the specific vendor to obtain API keys and other integration-related credentials.

To configure the integration:

  1. Navigate to your integrations management page in ThreatQ.
  2. Select the OSINToption from the Category dropdown (optional).

    If you are installing the integration for the first time, it will be located under the Disabled tab.

  3. Click on the integration entry to open its details page.
  4. Review any additional settings, make any changes if needed, and click on Save.
  5. Click on the toggle switch, located above the Additional Information section, to enable it.

ThreatQ Mapping

CyberCrime Tracker

The CyberCrime Tracker endpoint returns text containing a newline delimited list of URLs.

GET http://cybercrime-tracker.net/all.php

Sample Response:

www.tepevizyon.com.tr/xx/Panel/PvqDq929BSx_A_D_M1n_a.php
95.181.155.150/login.php
vihaiha.com/.ill/news/school/boy/choo/PvqDq929BSx_A_D_M1n_a.php
194.58.103.2/main/login.php
185.215.113.53/bPwsAq2/login.php
manvim.co/fc7/PvqDq929BSx_A_D_M1n_a.php
manvim.co/os/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fc5/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fc6/PvqDq929BSx_A_D_M1n_a.php
manvim.co/bo/PvqDq929BSx_A_D_M1n_a.php
mxrz.xyz/tker3/w2/PvqDq929BSx_A_D_M1n_a.php
sspmoct.xyz/tkrr/T1/w2/PvqDq929BSx_A_D_M1n_a.php
es02.xyz/w2/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd6/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd4/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd5/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd3/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd1/PvqDq929BSx_A_D_M1n_a.php
manvim.co/fd2/PvqDq929BSx_A_D_M1n_a.php
gepardmain.com/admin/
gjusvoqmkddfahvoccsx.com/figrab/
gjusvoqmkddfahvoccsx.com/ebayadmin/
wenolira.top/bofaadmin/
gjusvoqmkddfahvoccsx.com/amzccadvadmin/
asilcosmetics.ru/modules/mod_articles/mod_articles.php
security-apple-manage.com/
test.danrinok.ru/administrator/components.php
allonston.com/modules/mod_fxprev/helper.php
приволжское-мпо-жкх.рф/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
10words.radiofreepirate.org/sites/default/files/_hash.php
www.tsgprivatskver.ru/lndex.php
iryston.com/lndex.php
iwebtechexpert.com/blog/wp-admin/js/9givn.php
adkpower.in/class.php
esselfire.com/templets/default/css/popup.php
caudan-vous-accueille.com/images/gmapfp/hsfgdyfy.php?pass=kod3
bsc.org.np/
178.20.47.174/po02jewafo92/admin/login.php
ahcteam.tech/login.php
212.192.241.97/~botboyz/login.php
51.222.56.151/tsc/login.php
www.chika1995.xyz/enfix/chik/ad/Panel/five/PvqDq929BSx_A_D_M1n_a.php
aaastyloff.xyz/cheque/hen/ad/Panel/five/PvqDq929BSx_A_D_M1n_a.php
212.192.241.220/login.php
212.192.241.91/login.php
www.mibbpersonales.com/tacabamba/index.php
ctp1.xyz/w2/PvqDq929BSx_A_D_M1n_a.php
matix.cf/panel/login.php
greenbazaar.xyz/blac/panel/five/PvqDq929BSx_A_D_M1n_a.php
lushbb.xyz/sngtt/w2/PvqDq929BSx_A_D_M1n_a.php
...

ThreatQuotient provides the following default mapping for this feed:

Feed Data Path ThreatQ Entity ThreatQ Object Type or Attribute Key Published Date Examples Notes
0 Indicator.Value URL N/A www.tepevizyon.com.tr/xx/Panel/PvqDq929BSx_A_D_M1n_a.php N/A

Average Feed Run

Object counts and Feed runtime are supplied as generalities only - objects returned by a provider can differ based on credential configurations and Feed runtime may vary based on system resources and load.

CyberCrime Tracker

Metric Result
Run Time 5m
Indicators 22,500
Indicator Attributes 4,814
Adversaries 0
Adversary Attributes 0

Change Log

  • Version 1.0.1
    • Initial release

PDF Guides

Document ThreatQ Version
CyberCrime Tracker CDF Guide v1.0.1 4.3.0 or Greater