| snort |
ET USER_AGENTS ABBCCoin Activity Observed |
rev 2 |
2020-02-12 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN Possible APT40/Dadstache Stage 2 Payload Beacon |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN APT40/Dadstache Related DNS Lookup |
rev 2 |
2020-02-11 |
| snort |
ET TROJAN Emotet Wifi Bruter Module Checkin |
rev 2 |
2020-02-07 |
| snort |
ET TROJAN Possible APT34 TONEDEAF 2.0 User-Agent Observed |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN Patchwork Backdoor - Requesting Task |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN Patchwork Backdoor - Sending Task Results |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN Patchwork Backdoor Checkin |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN MINEBRIDGE/MINEDOOR CnC Checkin |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN BKDR_BTMINE.MNR BitCoin Miner Retrieving New Malware From Server |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN APT34 TONEDEAF 2.0 Requesting Commands from CnC |
rev 2 |
2020-02-06 |
| snort |
ET TROJAN APT34 TONEDEAF 2.0 Uploading to CnC |
rev 2 |
2020-02-06 |
| suricata |
ET MALWARE MINEBRIDGE/MINEDOOR CnC Checkin |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE Patchwork Backdoor - Sending Task Results |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE Possible APT34 TONEDEAF 2.0 User-Agent Observed |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE Patchwork Backdoor - Requesting Task |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE Patchwork Backdoor Checkin |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE APT34 TONEDEAF 2.0 Requesting Commands from CnC |
rev 1 |
2020-02-06 |
| suricata |
ET MALWARE APT34 TONEDEAF 2.0 Uploading to CnC |
rev 1 |
2020-02-06 |
| snort |
ET TROJAN Parallax CnC Response Activity M6 |
rev 2 |
2020-02-05 |
| snort |
ET TROJAN CryptoPatronum Ransomware CnC Checkin |
rev 2 |
2020-02-04 |
| snort |
ET MALWARE GreatArcadeHits CnC Activity |
rev 2 |
2020-02-04 |
| suricata |
ET ADWARE_PUP GreatArcadeHits CnC Activity |
rev 1 |
2020-02-04 |
| snort |
ET TROJAN DonotGroup CnC Observed in DNS Query |
rev 2 |
2020-02-03 |
| snort |
ET TROJAN StrongPity Host Checkin |
rev 3 |
2020-01-31 |
| snort |
ET TROJAN Possible Winnti TLS Certificate Observed |
rev 2 |
2020-01-31 |
| snort |
ET TROJAN Possible Winnti DNS Lookup |
rev 2 |
2020-01-31 |
| snort |
ET TROJAN Possible Winnti DNS Lookup |
rev 2 |
2020-01-31 |
| snort |
ET TROJAN Possible Winnti TLS Certificate Observed |
rev 2 |
2020-01-31 |
| suricata |
ET MALWARE Possible Winnti TLS Certificate Observed |
rev 2 |
2020-01-31 |
| suricata |
ET MALWARE Possible Winnti TLS SNI Observed |
rev 2 |
2020-01-31 |
| suricata |
ET MALWARE Possible Winnti DNS Lookup |
rev 2 |
2020-01-31 |
| suricata |
ET MALWARE Possible Winnti TLS SNI Observed |
rev 2 |
2020-01-31 |