| snort |
ET TROJAN Nemty Ransomware Payment Page ID File Upload |
rev 2 |
2020-01-17 |
| suricata |
ET MALWARE Nemty Ransomware Payment Page ID File Upload |
rev 1 |
2020-01-17 |
| snort |
ET TROJAN Group 21 CnC Domain Observed in DNS Query |
rev 2 |
2020-01-16 |
| snort |
ET TROJAN CrownAdPro CnC Activity M4 |
rev 2 |
2020-01-16 |
| snort |
ET TROJAN CrownAdPro CnC Activity M3 |
rev 2 |
2020-01-16 |
| snort |
ET TROJAN CrownAdPro CnC Activity M5 |
rev 2 |
2020-01-16 |
| snort |
ET TROJAN Group 21 Payload CnC Checkin |
rev 1 |
2020-01-16 |
| snort |
ET TROJAN CrownAdPro CnC Activity M2 |
rev 2 |
2020-01-16 |
| snort |
ET TROJAN SMS-Bomber Activity |
rev 2 |
2020-01-15 |
| suricata |
ET MALWARE Observed Certificate Base64 Encoded Executable Inbound |
rev 1 |
2020-01-15 |
| snort |
ET TROJAN PowerTrick download bot known key |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN PowerTrick download ver2 bot |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN PowerTrick Known Key 2 |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN Observed Possible PowerSploit/PowerView .ps1 Inbound |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN PowerTrick download ver1 bot |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN PowerTrick Known Key 1 |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN Observed Certificate Containing Possible Base64 Encoded Powershell Inbound |
rev 2 |
2020-01-14 |
| snort |
ET TROJAN PowerSploit/PowerView SMTP Data Exfil |
rev 2 |
2020-01-14 |
| suricata |
ET MALWARE PowerTrick download bot known key |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE PowerTrick Known Key 2 |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE PowerTrick Known Key 1 |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE Observed Certificate Containing Possible Base64 Encoded Powershell Inbound |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE PowerTrick download ver1 bot |
rev 2 |
2020-01-14 |
| suricata |
ET MALWARE Observed Certificate Containing Double Base64 Encoded Executable Inbound |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE Observed Possible PowerSploit/PowerView .ps1 Inbound |
rev 1 |
2020-01-14 |
| suricata |
ET MALWARE PowerTrick download ver2 bot |
rev 1 |
2020-01-14 |
| snort |
ET TROJAN OilRig APT PowDesk Powershell Check |
rev 3 |
2020-01-13 |
| snort |
ET TROJAN PowerTrick Task Checkin M2 |
rev 2 |
2020-01-13 |
| snort |
ET TROJAN PowerTrick Task Request |
rev 2 |
2020-01-13 |
| snort |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2020-01-13 |
| snort |
ET TROJAN Satan/5ss5c Ransomware CnC Activity |
rev 2 |
2020-01-13 |
| snort |
ET TROJAN PowerTrick Task Checkin M1 |
rev 2 |
2020-01-13 |
| snort |
ET TROJAN PowerTrick Task Answer |
rev 2 |
2020-01-13 |
| suricata |
ET MALWARE PowerTrick Task Checkin M1 |
rev 1 |
2020-01-13 |
| suricata |
ET MALWARE PowerTrick Task Answer |
rev 1 |
2020-01-13 |
| suricata |
ET MALWARE PowerTrick Task Request |
rev 1 |
2020-01-13 |
| suricata |
ET MALWARE Satan/5ss5c Ransomware CnC Activity |
rev 2 |
2020-01-13 |
| suricata |
ET MALWARE PowerTrick Task Checkin M2 |
rev 1 |
2020-01-13 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |
| snort |
ET TROJAN Observed DNS Query to Ursnif SAIGON Variant CnC Domain |
rev 2 |
2020-01-10 |