| snort |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure |
rev 1 |
2013-03-04 |
| snort |
ET MOBILE_MALWARE Android/Smsilence.A Sending SMS Messages CnC Beacon |
rev 2 |
2013-03-01 |
| snort |
ET MOBILE_MALWARE Android/Smsilence.A Successful Install Report |
rev 1 |
2013-03-01 |
| snort |
ET MOBILE_MALWARE Android/FakeTimer.A Reporting to CnC |
rev 2 |
2013-02-27 |
| snort |
ET TROJAN W32/Caphaw CnC Configuration File Request |
rev 1 |
2013-02-27 |
| snort |
ET INFO Serialized Data request |
rev 1 |
2013-02-26 |
| snort |
ET WEB_SERVER WebShell - zecmd - Form |
rev 1 |
2013-02-26 |
| snort |
ET TROJAN Gimemo Ransomware Checkin |
rev 3 |
2013-02-25 |
| snort |
ET TROJAN Win32/Small.XR Checkin 2 WEBC2-CSON APT1 Related |
rev 4 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-CLOVER Checkin APT1 Related |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-UGX Embedded CnC Response APT1 |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-KT3 Intial Connection Beacon APT1 Related |
rev 2 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-DIV UA |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-KT3 Intial Connection Beacon Server Response APT1 Related |
rev 3 |
2013-02-22 |
| snort |
ET TROJAN SEASALT Server Response |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-TABLE Checkin 2 - APT1 Related |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN Likseput.B Checkin |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-ADSPACE Server Response |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-AUSOV Checkin Response - Embedded CnC APT1 Related |
rev 3 |
2013-02-20 |
| snort |
ET TROJAN Win32/Namsoth.A Checkin/NEWSREELS APT1 Related |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN Backdoor.Win32/Likseput.A Checkin Windows Vista/7/8 |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN Win32/COOKIEBAG Cookie APT1 Related |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN SEASALT Client Checkin |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-TABLE Checkin Response - Embedded CnC APT1 Related |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-TABLE Checkin 3 - APT1 Related |
rev 1 |
2013-02-20 |
| snort |
ET CURRENT_EVENTS Adobe PDF Zero Day Trojan.666 Payload libarext32.dll Second Stage Download POST |
rev 2 |
2013-02-19 |
| snort |
ET TROJAN Win32.Zbot.ivgw Downloading EXE |
rev 4 |
2013-02-19 |
| snort |
ET CURRENT_EVENTS Adobe PDF Zero Day Trojan.666 Payload libarhlp32.dll Second Stage Download POST |
rev 2 |
2013-02-19 |
| snort |
ET TROJAN W32/Vundo.Downloader Reporting User Website Session Information |
rev 1 |
2013-02-16 |
| snort |
ET WEB_SERVER PHP tag in UA |
rev 1 |
2013-02-16 |
| snort |
ET TROJAN PDF 0day Communication - agent UA Feb 14 2013 |
rev 2 |
2013-02-15 |
| snort |
ET TROJAN W32/FloatingCloud.Banker CnC Beacon |
rev 2 |
2013-02-09 |
| snort |
ET WEB_CLIENT Microsoft OLE Compound File With Flash |
rev 6 |
2013-02-09 |
| snort |
ET CURRENT_EVENTS Unknown_MM - Payload Download |
rev 1 |
2013-02-08 |
| snort |
ET WEB_SPECIFIC_APPS SiteGo file parameter Local File Inclusion Attempt |
rev 1 |
2013-02-08 |
| snort |
ET TROJAN Umbra/MultiBot Plugin access |
rev 1 |
2013-02-08 |
| snort |
ET WEB_SPECIFIC_APPS SiteGo OpenFolder parameter Local File Inclusion Attempt |
rev 1 |
2013-02-08 |
| snort |
ET ACTIVEX Possible Ecava IntegraXor save method Remote ActiveX Buffer Overflow |
rev 2 |
2013-02-08 |
| snort |
ET CURRENT_EVENTS Unknown_MM EK - Landing Page |
rev 1 |
2013-02-08 |
| snort |
ET INFO JAVA - ClassID |
rev 1 |
2013-02-07 |