| suricata |
ET MALWARE Win32/Enchanim C2 Client Check-in |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE X-Tag Zeus Mitmo user agent |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Windows-Based OpenSSL Tunnel Outbound |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Data Transfer with Cisco config |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2015-7547 Long Response to A lookup |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Bitmessage Activity |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC yppasswd username overflow attempt UDP |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE ZeroAccess Outbound udp traffic detected |
rev 8 |
2019-07-26 |
| suricata |
ET INFO Powershell Command With No Profile Argument Over SMB - Likely Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to PostgreSQL port 5432 |
rev 3 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Output of id command from HTTP server |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Malicious Chrome Extension Click Fraud Activity via Websocket |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS IrotIsRunning little endian attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Tapazom.A 2 |
rev 1 |
2019-07-26 |
| suricata |
ET P2P KuGoo P2P Connection |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt |
rev 5 |
2019-07-26 |
| suricata |
ET VOIP Possible Inbound VOIP Scan/Misuse With User-Agent Zoiper |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 69 |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 3 |
rev 8 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Cisco TclShell TFTP Download |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows driverquery -si Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Gh0st Trojan CnC 3 |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap espd request UDP |
rev 13 |
2019-07-26 |
| suricata |
ET INFO SMB2 NT Create AndX Request For a .sys File - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Banker.Delf Infection variant 4 - Sending Initial Email to Owner |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Trojan.Delf-5496 New Infection Report |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS OpenKey little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE [AV] EarthWorm/Termite IoT Agent Reporting Infection |
rev 1 |
2019-07-26 |
| suricata |
GPL SCAN superscan echo |
rev 5 |
2019-07-26 |
| suricata |
GPL CHAT MSN outbound file transfer request |
rev 7 |
2019-07-26 |
| suricata |
ET EXPLOIT Juniper ScreenOS telnet Backdoor Default Password Attempt |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE SuperCMD CnC Beacon |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP subscribe overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap bootparam request UDP |
rev 14 |
2019-07-26 |
| suricata |
ET MALWARE Lazarus FALLCHILL Fake SSL Checkin 2 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Observed UltraVNC CnC Activity |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows WMIC NETLOGIN get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |