| snort |
ET TROJAN Observed Default CobaltStrike SSL Certificate |
rev 2 |
2020-05-06 |
| snort |
ET TROJAN EVILNUM CnC Response |
rev 2 |
2020-05-06 |
| snort |
ET POLICY Observed iesnare/iovation Tracking Activity |
rev 1 |
2020-05-06 |
| snort |
ET TROJAN Ragnarok Ransomware CnC Activity M1 |
rev 2 |
2020-05-06 |
| snort |
ET TROJAN Observed Cobalt Strike Stager Domain in DNS Query |
rev 2 |
2020-05-06 |
| suricata |
ET MALWARE Possible Worm W32.Svich or Other Infection Request for setting.xls |
rev 5 |
2020-05-06 |
| suricata |
ET INFO HTTP Request to a *.cw.cm domain |
rev 5 |
2020-05-06 |
| suricata |
ET EXPLOIT_KIT exploit kit x/load/svchost.exe |
rev 4 |
2020-05-06 |
| suricata |
ET MALWARE Cnzz.cn Related Dropper Checkin |
rev 6 |
2020-05-06 |
| suricata |
ET INFO HTTP Request to a *.gv.vg domain |
rev 6 |
2020-05-06 |
| suricata |
ET INFO HTTP Request to a *.ce.ms domain |
rev 6 |
2020-05-06 |
| suricata |
ET MALWARE Possible Worm W32.Svich or Other Infection Request for setting.doc |
rev 5 |
2020-05-06 |
| suricata |
ET MALWARE Suspicious flash_player.exe Download |
rev 4 |
2020-05-06 |
| suricata |
ET INFO HTTP Request to a *.orge.pl Domain |
rev 5 |
2020-05-06 |
| suricata |
ET INFO Observed iesnare/iovation Tracking Activity |
rev 1 |
2020-05-06 |
| suricata |
ET MALWARE Ponmocup C2 Post-infection Checkin |
rev 10 |
2020-05-06 |
| suricata |
ET MALWARE Rogue AV Downloader concat URI |
rev 7 |
2020-05-06 |
| suricata |
ET MALWARE Potential FakePAV Checkin |
rev 5 |
2020-05-06 |
| suricata |
ET MALWARE Suspicious Download Setup_ exe |
rev 6 |
2020-05-06 |
| suricata |
ET DOS LOIC GET |
rev 4 |
2020-05-06 |
| suricata |
ET MALWARE Suspicious bot.exe Request |
rev 4 |
2020-05-06 |
| suricata |
ET MALWARE Bredolab CnC URL Detected |
rev 5 |
2020-05-06 |
| suricata |
ET MALWARE Ponmocup C2 Sending Data to Controller 2 |
rev 5 |
2020-05-06 |
| suricata |
ET MALWARE Trojan.BackDoor-DRV.gen.c Reporting-1 |
rev 4 |
2020-05-06 |
| suricata |
ET MALWARE Possible JKDDOS download cl.exe |
rev 4 |
2020-05-06 |
| suricata |
ET MALWARE Dumador Reporting User Activity |
rev 9 |
2020-05-06 |
| suricata |
ET MALWARE Slugin.A PatchTimeCheck.dat Request |
rev 5 |
2020-05-06 |
| suricata |
ET MALWARE EVILNUM CnC Response |
rev 1 |
2020-05-06 |
| snort |
ET TROJAN nspps Backdoor CnC Activity |
rev 2 |
2020-05-05 |
| snort |
ET TROJAN Nazar Implant - Sending Basic System Info to CnC |
rev 2 |
2020-05-05 |
| snort |
ET EXPLOIT Image Manager 5.2.4 - RCE Attempt |
rev 2 |
2020-05-05 |
| snort |
ET TROJAN nspps Backdoor - Sending SOCKS Details |
rev 2 |
2020-05-05 |
| snort |
ET TROJAN Nazar Implant - Sending Ping Response to CnC |
rev 1 |
2020-05-05 |
| suricata |
ET EXPLOIT NEC SL2100 - Session Enumeration Attempt |
rev 2 |
2020-05-05 |
| suricata |
ET MALWARE Nazar Implant - Sending Basic System Info to CnC |
rev 1 |
2020-05-05 |
| suricata |
ET EXPLOIT Image Manager 5.2.4 - RCE Attempt |
rev 1 |
2020-05-05 |
| suricata |
ET MALWARE Nazar Implant - Sending Ping Response to CnC |
rev 1 |
2020-05-05 |
| snort |
ET TROJAN IXWARE Stealer Domain in DNS Lookup |
rev 2 |
2020-05-04 |
| snort |
ET SCAN JAWS Webserver Unauthenticated Shell Command Execution |
rev 2 |
2020-05-04 |
| snort |
ET TROJAN IXWARE Stealer CnC Activity |
rev 2 |
2020-05-04 |