| suricata |
ET MALWARE AuraC2 Exfil Confirmation |
rev 1 |
2026-04-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.whiskydice .com domain |
rev 1 |
2026-04-07 |
| snort |
ET TROJAN MacSync Stealer CnC Beacon Checkin |
rev 1 |
2026-04-06 |
| snort |
ET ATTACK_RESPONSE MacSync Stealer Payload Inbound M1 |
rev 1 |
2026-04-06 |
| snort |
ET ATTACK_RESPONSE MacSync Stealer Payload Inbound M2 |
rev 1 |
2026-04-06 |
| suricata |
ET ATTACK_RESPONSE MacSync Stealer Payload Inbound M2 |
rev 1 |
2026-04-06 |
| suricata |
ET ATTACK_RESPONSE MacSync Stealer Payload Inbound M1 |
rev 1 |
2026-04-06 |
| suricata |
ET MALWARE MacSync Stealer CnC Beacon Checkin |
rev 1 |
2026-04-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.socialistsushi .com domain |
rev 1 |
2026-04-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.socialistsushi .com domain |
rev 1 |
2026-04-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.socialistsushi .com domain |
rev 1 |
2026-04-05 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.socialistsushi .com domain |
rev 1 |
2026-04-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.homeonthewater .com domain |
rev 1 |
2026-04-04 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.homeonthewater .com domain |
rev 1 |
2026-04-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.homeonthewater .com domain |
rev 1 |
2026-04-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.homeonthewater .com domain |
rev 1 |
2026-04-04 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.kwgranitecountertops .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.banghers .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rusticrivergear .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kwgranitecountertops .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.krazycraig .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.whitesmurf .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.whitesmurf .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.suburbanprecision .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.armeniaincentives .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.fgandur .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.fgandur .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.armeniaincentives .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.suburbanprecision .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.sphericjourney .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.onesouthbeach .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ortonavarro .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rusticrivergear .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ortonavarro .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.sphericjourney .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.krazycraig .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.onesouthbeach .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.banghers .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.krazycraig .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.whitesmurf .com domain |
rev 1 |
2026-04-03 |