| snort |
ET TROJAN CASHY200 CnC Domain in DNS Lookup |
rev 2 |
2019-10-10 |
| snort |
ET MOBILE_MALWARE Android/Geost CnC Checkin |
rev 2 |
2019-10-08 |
| snort |
ET TROJAN DonotGroup CnC Domain Observed in DNS Query |
rev 2 |
2019-10-08 |
| suricata |
GPL SNMP public access udp |
rev 13 |
2019-10-08 |
| suricata |
ET MALWARE Linux/Xnote Keep-Alive |
rev 2 |
2019-10-08 |
| suricata |
ET SCAN SipCLI VOIP Scan |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Hikit Server Authentication Response |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE PowerShell/Agent.A DNS File Transfer CnC Beacon |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Mini/Cosmic Duke variant FTP upload |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Listening Implant 7 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.A Checkin x64 |
rev 2 |
2019-10-08 |
| suricata |
ET INFO WinUpack Modified PE Header Outbound |
rev 7 |
2019-10-08 |
| suricata |
ET MALWARE Trojan.SpamBanker Report via SMTP |
rev 2 |
2019-10-08 |
| suricata |
ET INFO NBNS Name Query Response Possible WPAD Spoof BadTunnel |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 10 |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Listening Implant 6 |
rev 2 |
2019-10-08 |
| suricata |
ET SCAN MySQL Malicious Scanning 1 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE W32/Jabberbot.A Trednet XMPP CnC Beacon |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Checkin 1 |
rev 3 |
2019-10-08 |
| suricata |
ET SCAN NMAP OS Detection Probe |
rev 4 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Proxy Tool 1 |
rev 2 |
2019-10-08 |
| suricata |
ET MOBILE_MALWARE Android/Geost CnC Checkin |
rev 1 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DNS |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE Windows netsh advfirewall show allprofiles Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE Suspicious X-mailer Synapse |
rev 3 |
2019-10-08 |
| suricata |
ET SHELLCODE Linux/x86-64 - Reverse Shell Shellcode |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 8 |
rev 2 |
2019-10-08 |
| suricata |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK |
rev 5 |
2019-10-08 |
| suricata |
ET MALWARE TinyLoader.B2 Checkin x64 |
rev 2 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 9 |
rev 2 |
2019-10-08 |
| suricata |
ET WEB_SPECIFIC_APPS JoomSocial AvatarUpload RCE |
rev 9 |
2019-10-08 |
| suricata |
ET EXPLOIT SolusVM 1.13.03 Access to solusvmc-node setuid bin |
rev 4 |
2019-10-08 |
| suricata |
ET MALWARE Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-10-08 |
| suricata |
GPL SNMP SNMP trap Format String detected |
rev 5 |
2019-10-08 |
| suricata |
ET MALWARE US-CERT TA14-353A Lightweight Backdoor 6 |
rev 2 |
2019-10-08 |
| suricata |
GPL SNMP SNMP NT UserList |
rev 8 |
2019-10-08 |
| suricata |
ET SCAN MySQL Malicious Scanning 2 |
rev 2 |
2019-10-08 |
| suricata |
ET SCAN Nessus Netbios Scanning |
rev 3 |
2019-10-08 |
| suricata |
ET SNMP Samsung Printer SNMP Hardcode RW Community String |
rev 3 |
2019-10-08 |
| suricata |
ET MALWARE Win32/Sharik Checkin |
rev 2 |
2019-10-08 |