| suricata |
ET PHISHING Chalbhai Phishing Landing 2020-06-22 |
rev 2 |
2020-06-22 |
| snort |
ET TROJAN Win32/Adware.Agent.NSU CnC Activity |
rev 2 |
2020-06-19 |
| snort |
ET TROJAN STRRAT CnC Checkin |
rev 1 |
2020-06-19 |
| snort |
ET TROJAN HTTPCore CnC Task Response |
rev 2 |
2020-06-19 |
| snort |
ET TROJAN STRRAT Initial HTTP Activity |
rev 2 |
2020-06-19 |
| snort |
ET TROJAN STRRAT Requesting License Check |
rev 3 |
2020-06-19 |
| snort |
ET TROJAN HTTPCore CnC Tasking File |
rev 2 |
2020-06-19 |
| suricata |
ET MALWARE HTTPCore CnC Task Response |
rev 1 |
2020-06-19 |
| suricata |
ET MALWARE Win32/Adware.Agent.NSU CnC Activity |
rev 1 |
2020-06-19 |
| suricata |
ET MALWARE STRRAT CnC Checkin |
rev 1 |
2020-06-19 |
| snort |
ET MALWARE MediaDrug CnC Activity |
rev 2 |
2020-06-18 |
| snort |
ET MALWARE SUPERAntiSpyware Install Checkin |
rev 2 |
2020-06-18 |
| suricata |
ET MALWARE Possible DNS Tunneling Observed |
rev 2 |
2020-06-18 |
| suricata |
ET ADWARE_PUP SUPERAntiSpyware Install Checkin |
rev 1 |
2020-06-18 |
| suricata |
ET ADWARE_PUP MediaDrug CnC Activity |
rev 1 |
2020-06-18 |
| sigma |
Remote File Copy |
stable |
2020-06-18 |
| snort |
ET TROJAN GoldenSpy CnC Activity |
rev 2 |
2020-06-17 |
| suricata |
ET MALWARE GoldenSpy CnC Activity |
rev 1 |
2020-06-17 |
| snort |
ET TROJAN FRat WebSockets Request M2 |
rev 2 |
2020-06-16 |
| snort |
ET TROJAN Observed Koadic Header Structure |
rev 2 |
2020-06-15 |
| snort |
ET TROJAN Request for Malicious .dat File |
rev 2 |
2020-06-15 |
| snort |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-06-12 |
| snort |
ET TROJAN DonotGroup Staging Domain in DNS Query |
rev 2 |
2020-06-12 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-06-12 |
| snort |
ET TROJAN DonotGroup Staging Domain in DNS Query |
rev 2 |
2020-06-12 |
| snort |
ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server |
rev 2 |
2020-06-12 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-06-12 |
| snort |
ET TROJAN DonotGroup Staging Domain in DNS Query |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_SERVER Generic Webshell Password Prompt Accessed on Internal Compromised Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-06-12 |
| suricata |
ET WEB_CLIENT Generic Webshell Password Prompt Accessed on External Compromised Server |
rev 2 |
2020-06-12 |