| suricata |
ET MALWARE CoreDDRAT Screenshot Exfil |
rev 1 |
2020-03-23 |
| suricata |
ET HUNTING Suspicious Domain Request for Possible COVID-19 Domain M1 |
rev 2 |
2020-03-23 |
| snort |
ET TROJAN Win32/SandCat CnC Checkin |
rev 2 |
2020-03-17 |
| snort |
ET TROJAN Win32/Unk.Joia CnC Activity |
rev 2 |
2020-03-17 |
| snort |
ET INFO RealThinClient Outbound Communication |
rev 3 |
2020-03-16 |
| snort |
ET TROJAN HTTPTool User-Agent |
rev 2 |
2020-03-16 |
| snort |
ET POLICY DNS Query to DynDNS *.dyn-ip24 .de Domain |
rev 2 |
2020-03-16 |
| snort |
ET TROJAN VBS/TrojanDownloader.Agent.SEB Reporting Network Info |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN Observed DNS Query to Vicious Panda CnC Domain |
rev 2 |
2020-03-13 |
| snort |
ET POLICY QQ Browser WUP Request - qbpcstatf.stat |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN Observed DNS Query to Vicious Panda CnC Domain |
rev 2 |
2020-03-13 |
| snort |
ET POLICY QQ Browser WUP Request - qbkpireportbakf.stat |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN VBS/TrojanDownloader.Agent.SEB Keep-Alive |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN VBS/TrojanDownloader.Agent.SEB Checkin |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN Observed DNS Query to Vicious Panda CnC Domain |
rev 2 |
2020-03-13 |
| snort |
ET MOBILE_MALWARE Suspected Android Youzicheng Proxy Activity |
rev 2 |
2020-03-13 |
| snort |
ET TROJAN Observed DNS Query to Vicious Panda CnC Domain |
rev 2 |
2020-03-13 |
| suricata |
ET INFO QQ Browser WUP Request - qbkpireportbakf.stat |
rev 1 |
2020-03-13 |
| suricata |
ET INFO QQ Browser WUP Request - qbpcstatf.stat |
rev 1 |
2020-03-13 |
| snort |
ET TROJAN ViperSoftX CnC Activity M2 |
rev 2 |
2020-03-11 |
| snort |
ET TROJAN ViperSoftX CnC Activity M1 |
rev 2 |
2020-03-11 |
| snort |
ET TROJAN MalDoc Retrieving msiexec Commands via DNS TXT |
rev 2 |
2020-03-11 |
| suricata |
ET MALWARE ViperSoftX CnC Activity M2 |
rev 2 |
2020-03-11 |
| snort |
ET POLICY Mattermost API Usage |
rev 2 |
2020-03-09 |
| snort |
ET WEB_SERVER Magento XMLRPC-Exploit Attempt |
rev 2 |
2020-03-09 |
| snort |
ET TROJAN Inbound MonetizeUs/LNKR Struct |
rev 2 |
2020-03-09 |
| snort |
ET TROJAN Win32/LODEINFO CnC Checkin |
rev 2 |
2020-03-09 |
| snort |
ET TROJAN BlackTech ELF/TSCookie CnC Observed in DNS Query |
rev 2 |
2020-03-09 |
| snort |
ET TROJAN Backdoor.Win32.Agent.myttae User-Agent |
rev 2 |
2020-03-06 |
| snort |
ET TROJAN Magniber Ransomware CnC Domain in DNS Lookup |
rev 2 |
2020-03-05 |
| snort |
ET TROJAN Magniber Ransomware Retrieving Instructions |
rev 2 |
2020-03-05 |
| snort |
ET TROJAN Magniber Ransomware CnC Domain in DNS Lookup |
rev 2 |
2020-03-05 |
| snort |
ET INFO EXE Downloaded from Github |
rev 2 |
2020-03-04 |
| snort |
ET TROJAN SharpExec EXE Lateral Movement Tool Downloaded |
rev 2 |
2020-03-04 |
| snort |
ET CURRENT_EVENTS Successful Microsoft Account Phish 2020-03-04 |
rev 2 |
2020-03-04 |
| snort |
ET TROJAN BlackTech ELF/TSCookie CnC Observed in DNS Query |
rev 2 |
2020-03-03 |
| snort |
ET TROJAN BlackTech ELF/TSCookie CnC Observed in DNS Query |
rev 2 |
2020-03-03 |
| snort |
ET TROJAN Observed GoBotKR Domain in TLS SNI |
rev 2 |
2020-03-03 |
| snort |
ET TROJAN Magecart CnC Domain in DNS Lookup |
rev 2 |
2020-03-03 |
| snort |
ET TROJAN Observed GoBotKR Domain in TLS SNI |
rev 2 |
2020-03-03 |