| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Getblocktemplate Protocol Server Connection |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] DorkBot.Downloader CnC Response |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Tapazom.A |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 87 |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Incoming Chromoting Session Response |
rev 4 |
2019-07-26 |
| suricata |
GPL ICMP PING Ping-O-MeterWindows |
rev 8 |
2019-07-26 |
| suricata |
GPL RPC sadmind query with root credentials attempt UDP |
rev 5 |
2019-07-26 |
| suricata |
GPL ICMP PING *NIX |
rev 8 |
2019-07-26 |
| suricata |
ET EXPLOIT NB8-04 - Possible Unauthed RCE via whitelist bypass |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of arguments.callee %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound 3 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/VB.SDB CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE NCSC XAgent itwm beacon v1 |
rev 1 |
2019-07-26 |
| suricata |
ET SCADA CitectSCADA ODBC Overflow Attempt |
rev 8 |
2019-07-26 |
| suricata |
GPL RPC STATD UDP monitor mon_name format string exploit attempt |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE W32.Virut.A joining an IRC Channel |
rev 7 |
2019-07-26 |
| suricata |
ET SCAN DCERPC rpcmgmt ifids Unauthenticated BIND |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Cisco IKEv1 Information Disclosure Vulnerability CVE-2016-6415 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Linux/KDefend Checkin |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Executioner Ransomware Reporting Infection via SMTP |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE X-Tag Zeus Mitmo user agent |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Lazarus FALLCHILL Fake SSL Checkin 1 |
rev 2 |
2019-07-26 |
| suricata |
GPL TFTP GET nc.exe |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Py/MechaFlounder CnC Activity - Reporting Directory Change Command Success |
rev 1 |
2019-07-26 |
| suricata |
ET SCADA DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow Vulnerability |
rev 2 |
2019-07-26 |
| suricata |
GPL VOIP SIP INVITE message flooding |
rev 4 |
2019-07-26 |
| suricata |
GPL SHELLCODE sparc NOOP |
rev 6 |
2019-07-26 |
| suricata |
ET INFO Powershell Command With NonInteractive Argument Over SMB - Likely Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT HID VertX and Edge door controllers command_blink_on Remote Command Execution |
rev 2 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 4 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE Win32/ElectricFish Authentication Packet Observed |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE LURK Trojan Communication Protocol detected |
rev 3 |
2019-07-26 |
| suricata |
GPL ICMP PING speedera |
rev 6 |
2019-07-26 |
| suricata |
ET GAMES Guild Wars connection |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB ADMIN$ unicode share access |
rev 9 |
2019-07-26 |
| suricata |
ET SCAN ICMP @hello request Likely Precursor to Scan |
rev 3 |
2019-07-26 |