| snort |
ET CURRENT_EVENTS Unknown EK Secondary Landing Page May 01 2015 M1 |
rev 1 |
2015-05-02 |
| snort |
ET CURRENT_EVENTS Unknown EK Secondary Landing Page May 01 2015 M2 |
rev 1 |
2015-05-02 |
| snort |
ET TROJAN BePush/Kilim payload retrieval |
rev 3 |
2015-04-30 |
| snort |
ET TROJAN Downeks Checkin |
rev 1 |
2015-04-28 |
| snort |
ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery |
rev 1 |
2015-04-28 |
| snort |
ET SCAN Nmap NSE Heartbleed Request |
rev 1 |
2015-04-28 |
| snort |
ET SCAN Nmap NSE Heartbleed Response |
rev 1 |
2015-04-28 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 3 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 1 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 2 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 2 |
rev 1 |
2015-04-24 |
| snort |
ET WEB_SPECIFIC_APPS Vulnerable Magento Adminhtml Access |
rev 1 |
2015-04-24 |
| snort |
ET CURRENT_EVENTS Sundown EK Secondary Landing Apr 20 2015 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 1 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 8 |
rev 3 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT HTTP CnC Beacon Response |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 2 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 3 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 7 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN Possible Infection Report Mail - Indy Mail lib and Nome do Computador in Body |
rev 6 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 5 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 4 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN Windows nbtstat -n Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 6 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN Windows nbtstat -r Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2015-04-21 |
| snort |
ET TROJAN Windows nbtstat -s Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2015-04-21 |
| snort |
ET TROJAN Windows nbtstat -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2015-04-21 |
| snort |
ET TROJAN Dalexis CnC Beacon |
rev 3 |
2015-04-17 |
| snort |
ET TROJAN PunkeyPOS HTTP CnC Beacon 4 |
rev 1 |
2015-04-17 |
| snort |
ET TROJAN PunkeyPOS HTTP CnC Beacon 1 |
rev 1 |
2015-04-17 |
| snort |
ET TROJAN PunkeyPOS HTTP CnC Beacon Fake UA |
rev 1 |
2015-04-17 |
| snort |
ET TROJAN FighterPOS CnC Beacon 1 |
rev 1 |
2015-04-16 |
| snort |
ET TROJAN Zacom/NFlog HTTP POST Connectivity Check |
rev 1 |
2015-04-16 |
| snort |
ET TROJAN FighterPOS CnC Beacon 2 |
rev 1 |
2015-04-16 |
| snort |
ET TROJAN W32/Farfli.BHQ!tr Dropper CnC Beacon 2 |
rev 1 |
2015-04-15 |
| snort |
ET TROJAN Upatre Binary Download Jan 02 2014 |
rev 2 |
2015-04-15 |
| snort |
ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
rev 6 |
2015-04-15 |
| snort |
ET SCAN ICMP =XXXXXXXX Likely Precursor to Scan |
rev 4 |
2015-04-15 |
| snort |
ET POLICY Exe32Pack Packed Executable Download |
rev 1 |
2015-04-15 |