| suricata |
ET JA3 Hash - Possible Malware - Eitest/AnglerEK |
rev 2 |
2019-10-29 |
| suricata |
ET JA3 Hash - [Abuse.ch] Possible Gootkit |
rev 2 |
2019-10-29 |
| suricata |
ET JA3 Hash - [Abuse.ch] Possible Adware |
rev 2 |
2019-10-29 |
| suricata |
ET JA3 Hash - [Abuse.ch] Possible Dridex |
rev 2 |
2019-10-29 |
| suricata |
ET JA3 Hash - Possible Malware - Dridex |
rev 2 |
2019-10-29 |
| suricata |
ET JA3 Hash - [Abuse.ch] Possible Gozi |
rev 2 |
2019-10-29 |
| snort |
ET POLICY TOR Consensus Data Requested |
rev 2 |
2019-10-28 |
| snort |
ET TROJAN Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2019-10-25 |
| snort |
ET TROJAN MSIL/Diezen CnC Checkin M2 |
rev 1 |
2019-10-25 |
| snort |
ET TROJAN MSIL/Diezen CnC Checkin M1 |
rev 2 |
2019-10-25 |
| snort |
ET TROJAN Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2019-10-25 |
| snort |
ET TROJAN Suspected Zebrocy Implant CnC Checkin |
rev 2 |
2019-10-25 |
| suricata |
ET MALWARE MSIL/Diezen CnC Checkin M2 |
rev 1 |
2019-10-25 |
| suricata |
ET MALWARE MSIL/Diezen CnC Checkin M1 |
rev 1 |
2019-10-25 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN BlackTech Plead Encrypted Payload Inbound |
rev 3 |
2019-10-24 |
| snort |
ET TROJAN Observed Win32/Orion Logger SMTP Exfil Subject Line |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| snort |
ET TROJAN Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2019-10-24 |
| sigma |
Overwriting the File with Dev Zero or Null |
stable |
2019-10-23 |
| snort |
ET USER_AGENTS Steam HTTP Client User-Agent |
rev 3 |
2019-10-22 |
| snort |
ET TROJAN Win32/DarkRAT CnC Activity |
rev 4 |
2019-10-21 |
| snort |
ET CURRENT_EVENTS Successful DHL Phish 2019-10-18 |
rev 3 |
2019-10-21 |
| snort |
ET TROJAN Steganographic Encoded WAV File Inbound via HTTP M1 |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET MALWARE SoftwareTracking Site - Install Report |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN Steganographic Encoded WAV File Inbound via HTTP M2 |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2019-10-18 |
| snort |
ET TROJAN PolyglotDuke Domain Observed |
rev 2 |
2019-10-17 |
| snort |
ET TROJAN FatDuke Domain Observed |
rev 2 |
2019-10-17 |
| snort |
ET TROJAN PolyglotDuke Domain Observed |
rev 2 |
2019-10-17 |
| snort |
ET TROJAN PolyglotDuke Domain Observed |
rev 2 |
2019-10-17 |
| snort |
ET TROJAN PolyglotDuke Domain Observed |
rev 2 |
2019-10-17 |