| snort |
ET INFO Dotted Quad Host PS Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host DLL Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host RTF Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host VBS Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host GZ Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host XLS Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host RAR Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host PPT Request |
rev 3 |
2020-04-08 |
| snort |
ET TROJAN Sorano Stealer CnC Checkin |
rev 4 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host TGZ Request |
rev 3 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host HTA Request |
rev 3 |
2020-04-08 |
| snort |
ET TROJAN KPOT Stealer Initial CnC Activity M4 |
rev 2 |
2020-04-08 |
| snort |
ET INFO Dotted Quad Host XLSX Request |
rev 3 |
2020-04-08 |
| suricata |
ET MALWARE Sorano Stealer CnC Checkin |
rev 3 |
2020-04-08 |
| snort |
ET POLICY Observed DNS Query to .burpcollector .net Domain |
rev 2 |
2020-04-07 |
| snort |
ET CURRENT_EVENTS Possible Successful CDC Coronavirus Related Phish 2020-04-07 |
rev 2 |
2020-04-07 |
| snort |
ET TROJAN Parallax CnC Response Activity M8 |
rev 2 |
2020-04-06 |
| snort |
ET CURRENT_EVENTS GOV UK Possible COVID-19 Phish 2020-04-06 |
rev 2 |
2020-04-06 |
| snort |
ET CURRENT_EVENTS GOV UK Possible COVID-19 Phish 2020-04-06 |
rev 2 |
2020-04-06 |
| snort |
ET MOBILE_MALWARE Android/TrojanDropper.Agent.EQO Variant CnC Activity |
rev 2 |
2020-04-03 |
| suricata |
ET MOBILE_MALWARE Android/TrojanDropper.Agent.EQO Variant CnC Activity |
rev 1 |
2020-04-03 |
| snort |
ET INFO Suspicious GET Request with Possible COVID-19 URI M1 |
rev 3 |
2020-04-02 |
| snort |
ET INFO Suspicious GET Request with Possible COVID-19 URI M2 |
rev 3 |
2020-04-02 |
| snort |
ET INFO Suspicious POST Request with Possible COVID-19 URI M1 |
rev 3 |
2020-04-02 |
| snort |
ET INFO Suspicious POST Request with Possible COVID-19 URI M2 |
rev 3 |
2020-04-02 |
| snort |
ET TROJAN Linux/Agent.HX CnC Activity M2 |
rev 2 |
2020-04-01 |
| snort |
ET TROJAN Linux/Agent.HX CnC Activity M1 |
rev 1 |
2020-04-01 |
| snort |
ET GAMES Growtopia Hack - WrongGrow CnC Activity |
rev 2 |
2020-04-01 |
| snort |
ET CURRENT_EVENTS Successful Canada Revenue Agency COVID-19 Assistance Eligability Phish 2020-04-01 |
rev 2 |
2020-04-01 |
| suricata |
ET MALWARE Linux/Agent.HX CnC Activity M1 |
rev 1 |
2020-04-01 |
| suricata |
ET MALWARE Linux/Agent.HX CnC Activity M2 |
rev 2 |
2020-04-01 |
| snort |
ET CURRENT_EVENTS Possible Covid19 Themed Email Spam Outbound M3 |
rev 2 |
2020-03-31 |
| snort |
ET TROJAN Win32/Tofsee Malformed Spam Template String |
rev 2 |
2020-03-31 |
| snort |
ET TROJAN Observed DNS Query to Stitch C2 Domain |
rev 2 |
2020-03-31 |
| snort |
ET CURRENT_EVENTS Possible Covid19 Themed Email Spam Outbound M6 |
rev 2 |
2020-03-31 |
| snort |
ET CURRENT_EVENTS Possible Covid19 Themed Email Spam Outbound M5 |
rev 2 |
2020-03-31 |
| snort |
ET CURRENT_EVENTS Possible Covid19 Themed Email Spam Outbound M4 |
rev 2 |
2020-03-31 |
| snort |
ET TROJAN Observed DNS Query to Stitch C2 Domain |
rev 2 |
2020-03-31 |
| snort |
ET TROJAN Win32/Tofsee Unique Email Body Byte Sequence Observed |
rev 2 |
2020-03-31 |
| snort |
ET USER_AGENTS Willowcoin Cryptocurrency UA Observed |
rev 2 |
2020-03-31 |