| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kwgranitecountertops .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.onesouthbeach .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.whitesmurf .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.krazycraig .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rusticrivergear .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.suburbanprecision .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.krazycraig .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.banghers .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.whitesmurf .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.suburbanprecision .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rusticrivergear .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.armeniaincentives .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.armeniaincentives .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ortonavarro .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sphericjourney .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.fgandur .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.onesouthbeach .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sphericjourney .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.kwgranitecountertops .com domain |
rev 1 |
2026-04-03 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.banghers .com domain |
rev 1 |
2026-04-03 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rutilus .net domain |
rev 1 |
2026-04-02 |
| snort |
ET TROJAN Crpx0 Ransomware User-Agent Observed |
rev 1 |
2026-04-02 |
| snort |
ET TROJAN Crpx0 Ransomware Victim Profile Exfil |
rev 1 |
2026-04-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rutilus .net domain |
rev 1 |
2026-04-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.installgentoo .com domain |
rev 1 |
2026-04-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.installgentoo .com domain |
rev 1 |
2026-04-02 |
| snort |
ET TROJAN Observed DNS Query to Crpx0 Ransomware Domain |
rev 1 |
2026-04-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.installgentoo .com domain |
rev 1 |
2026-04-02 |
| suricata |
ET MALWARE Observed DNS Query to Crpx0 Ransomware Domain |
rev 1 |
2026-04-02 |
| suricata |
ET MALWARE Crpx0 Ransomware Victim Profile Exfil |
rev 1 |
2026-04-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.installgentoo .com domain |
rev 1 |
2026-04-02 |
| suricata |
ET MALWARE Crpx0 Ransomware User-Agent Observed |
rev 1 |
2026-04-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rutilus .net domain |
rev 1 |
2026-04-02 |
| suricata |
ET MALWARE Observed Crpx0 Ransomware Domain in TLS SNI |
rev 1 |
2026-04-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rutilus .net domain |
rev 1 |
2026-04-02 |
| snort |
ET TROJAN plain-crypto-js RAT Stage 1 C2 Outbound Request |
rev 1 |
2026-04-01 |
| snort |
ET TROJAN Crpx0 Ransomware Payload Request M4 |
rev 1 |
2026-04-01 |
| snort |
ET TROJAN Crpx0 Ransomware Payload Inbound M2 |
rev 1 |
2026-04-01 |
| snort |
ET TROJAN UNK_MonkeyWrench Payload Request |
rev 1 |
2026-04-01 |
| snort |
ET TROJAN Crpx0 Ransomware Payload Request M1 |
rev 1 |
2026-04-01 |