| suricata |
ET MALWARE KeyBoy CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE FakeM RAT CnC Beacon |
rev 5 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For a .sys File - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Spy.Agent.POX Variant CnC |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Proxy - BurpSuite PortSwigger Proxy Certificate Seen |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 3 |
rev 2 |
2019-07-26 |
| suricata |
GPL ICMP PING Microsoft Windows |
rev 8 |
2019-07-26 |
| suricata |
ET INFO SMB Remote AT Scheduled Job Pipe Creation |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows WMIC SHARE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
GPL FTP SITE CPWD overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT announce_peers request |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE ELF/Samba CnC Checkin |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap snmpXdmi request UDP |
rev 15 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB OpenKey overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Microsoft Office Visio DXF File Processing Remote Code Execution |
rev 3 |
2019-07-26 |
| suricata |
GPL IMAP authenticate overflow attempt |
rev 12 |
2019-07-26 |
| suricata |
ET MALWARE Possible Dragonfly APT Activity - SMB credential harvesting |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE OSX/Mami Possible DNS Query to Evil DNS Server |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrpc create tree attempt |
rev 5 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Possible MS CMD Shell opened on local system |
rev 9 |
2019-07-26 |
| suricata |
ET EXPLOIT Quanta LTE Router UDP Backdoor Activation Attempt |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [GIGAMON_ATR] FIN8 BADHATCH Remote Shell Banner |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Banker.Delf Infection - Sending Initial Email to Owner |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE PandoraRat/Refroso.bsp Directory Listing Sent To Server |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt |
rev 21 |
2019-07-26 |
| suricata |
ET MALWARE CommentCrew UGX Backdoor initial connection |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB OpenKey unicode overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE CommentCrew Possible APT c2 communications html return 1 |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT bin bash base64 encoded Remote Code Execution 3 |
rev 2 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Data Transfer With Cisco Config 2 |
rev 2 |
2019-07-26 |
| suricata |
ET P2P Limewire P2P UDP Traffic |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Hong Kong SWC Attack PcClient CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Volatile Cedar Win32.Explosive CnC Beacon 3 |
rev 1 |
2019-07-26 |
| suricata |
GPL IMAP unsubscribe literal overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS InitiateSystemShutdown attempt |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE Executable contained in DICOM Medical Image Received from PACS DICOM Device |
rev 1 |
2019-07-26 |
| suricata |
GPL CHAT Yahoo Messenger File Transfer Receive Request |
rev 5 |
2019-07-26 |
| suricata |
GPL IMAP append overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 2 |
2019-07-26 |