| snort |
ET TROJAN Win32.Pony Variant FOX Checkin |
rev 2 |
2016-09-26 |
| snort |
ET CURRENT_EVENTS Possible Square Enix Phishing Domain 2016-08-15 |
rev 2 |
2016-09-22 |
| snort |
ET EXPLOIT CVE-2015-2419 As observed in Magnitude EK |
rev 1 |
2016-09-21 |
| snort |
ET CURRENT_EVENTS Successful US Bank Phish 2016-09-20 |
rev 2 |
2016-09-20 |
| snort |
ET CURRENT_EVENTS Successful Wells Fargo Phish M1 2016-09-16 |
rev 3 |
2016-09-16 |
| snort |
ET CURRENT_EVENTS Successful DHL Phish 2016-09-16 |
rev 1 |
2016-09-16 |
| snort |
ET CURRENT_EVENTS Successful View Samples Phish 2016-09-09 |
rev 1 |
2016-09-16 |
| snort |
ET TROJAN Windows sc query Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-16 |
| snort |
ET CURRENT_EVENTS Successful Wells Fargo Phish M2 2016-09-16 |
rev 1 |
2016-09-16 |
| snort |
ET TROJAN Windows netsh advfirewall show allprofiles Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows quser Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC SYSACCOUNT get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows driverquery -si Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC SHARE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC STARTUP get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows qwinsta Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC PROCESS get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows gpresult Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2016-09-15 |
| snort |
ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows driverquery -v Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN LuminosityLink - Inbound Data Channel CnC Delimiter |
rev 1 |
2016-09-15 |
| snort |
ET WEB_CLIENT Microsoft Tech Support Scam M1 2016-09-15 |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN LuminosityLink - Outbound Data Channel CnC Delimiter |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC OS get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error Invalid Argument |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC NETLOGIN get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC NIC get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET CURRENT_EVENTS Successful SeniorPeopleMeet Phish M2 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET CURRENT_EVENTS Successful Dropbox Phish 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET TROJAN Quant Loader Download Request |
rev 2 |
2016-09-14 |
| snort |
ET TROJAN Quant Loader Download Response |
rev 2 |
2016-09-14 |
| snort |
ET CURRENT_EVENTS Successful SeniorPeopleMeet Phish M1 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET EXPLOIT Possible MySQL cnf overwrite CVE-2016-6662 Attempt |
rev 1 |
2016-09-13 |
| snort |
ET EXPLOIT Possible MySQL CVE-2016-6662 Attempt |
rev 1 |
2016-09-13 |
| snort |
ET CURRENT_EVENTS Successful Paypal Phish 2016-09-09 |
rev 1 |
2016-09-09 |
| snort |
ET TROJAN Plasmabot CnC Host Checkin |
rev 3 |
2016-09-09 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2016-09-08 |
rev 1 |
2016-09-08 |