| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE DPRK HIDDEN COBRA Botnet C2 Host Beacon |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Shark Pass Stealer Email Report |
rev 4 |
2020-08-19 |
| suricata |
ET WEB_CLIENT Tech Support Scam Landing 2020-08-19 |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter core_channel_* Command Response |
rev 5 |
2020-08-19 |
| suricata |
ET RPC DCERPC SVCCTL - Remote Service Control Manager Access |
rev 3 |
2020-08-19 |
| suricata |
ET SCADA DATAC RealWin SCADA Server Buffer Overflow |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE PHPs Labyrinth Backdoor Stage2 CnC Activity M2 |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter core_channel_* Command Request |
rev 5 |
2020-08-19 |
| suricata |
ET MALWARE PowerSploit/PowerView SMTP Data Exfil |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE [PTsecurity] Botnet Nitol.B Checkin |
rev 4 |
2020-08-19 |
| suricata |
ET EXPLOIT UCM6202 1.0.18.13 - Remote Command Injection Attempt |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Win32/Onliner Template 1 Active - Malicious Outbound Email Spam |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Banito/Agent.pb Pass Stealer Email Report Outbound |
rev 4 |
2020-08-19 |
| suricata |
ET EXPLOIT SUSPICIOUS DTLS 1.0 Fragmented Client Hello Possible CVE-2014-0195 |
rev 3 |
2020-08-19 |
| suricata |
ET HUNTING Suspicious Quotation Mark Usage in FTP Username |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Possible Pipka JS Skimmer CnC Request |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Matiex Keylogger Exfil Via Telegram |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Win32/FlawedAmmyy RAT CnC Checkin |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE DDoS.Win32/Nitol.B Checkin |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE Win32/PSW.QQPass.OZV Variant Checkin |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Linux/MayhemBruter Checkin |
rev 3 |
2020-08-19 |
| suricata |
ET WEB_CLIENT Generic Mailer Check Accessed on External Server |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter stdapi_* Command Response |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE LDPinch SMTP Password Report |
rev 7 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter stdapi_* Command Request |
rev 4 |
2020-08-19 |
| suricata |
ET COINMINER PrimeCoinMiner.Protominer |
rev 2 |
2020-08-19 |
| snort |
ET TROJAN Trickbot/Anchor ICMP Request |
rev 1 |
2020-08-18 |
| snort |
ET TROJAN Echelon/DarkStealer Variant CnC Exfil M2 |
rev 2 |
2020-08-18 |
| suricata |
ET USER_AGENTS Long Fake wget 3.0 User-Agent Detected |
rev 6 |
2020-08-18 |
| suricata |
ET MALWARE Rerdom/Asprox CnC Beacon |
rev 4 |
2020-08-18 |
| suricata |
ET MALWARE Trickbot/Anchor ICMP Request |
rev 1 |
2020-08-18 |
| suricata |
ET SCAN OpenVAS User-Agent Inbound |
rev 6 |
2020-08-18 |
| suricata |
ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity |
rev 10 |
2020-08-18 |
| suricata |
ET MALWARE TDSServ or Tidserv variant Checkin |
rev 6 |
2020-08-18 |