| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.patriciarivera .cl domain |
rev 1 |
2025-09-23 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.coral-shop .ro domain |
rev 1 |
2025-09-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.jobvn .com domain |
rev 1 |
2025-09-22 |
| sigma |
No Suitable Encryption Key Found For Generating Kerberos Ticket |
test |
2025-09-22 |
| sigma |
Certificate Use With No Strong Mapping |
test |
2025-09-22 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Filch Stealer CnC Checkin |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M3 |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M2 |
rev 1 |
2025-09-19 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| snort |
ET TROJAN Prince Ransomware GET Wallpaper M1 |
rev 1 |
2025-09-19 |
| snort |
ET CURRENT_EVENTS Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Filch Stealer CnC Checkin |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Domain in TLS SNI |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M1 |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M3 |
rev 1 |
2025-09-19 |
| suricata |
ET EXPLOIT_KIT Observed DNS Query to ClickFix Domain |
rev 1 |
2025-09-19 |
| suricata |
ET MALWARE Prince Ransomware GET Wallpaper M2 |
rev 1 |
2025-09-19 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.premnewar .com .np domain |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.sojda .org domain |
rev 1 |
2025-09-18 |
| snort |
ET TROJAN FrigidBackdoor Health Check |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.sojda .org domain |
rev 1 |
2025-09-18 |
| snort |
ET TROJAN FrigidBackdoor Log Results |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.carluciocruzfotografia .com .br domain |
rev 1 |
2025-09-18 |
| snort |
ET TROJAN FrigidBackdoor Request ZIP |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.carluciocruzfotografia .com .br domain |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.premnewar .com .np domain |
rev 1 |
2025-09-18 |
| snort |
ET TROJAN FrigidBackdoor Exfil Zip |
rev 1 |
2025-09-18 |
| suricata |
ET MALWARE FrigidBackdoor Health Check |
rev 1 |
2025-09-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.premnewar .com .np domain |
rev 1 |
2025-09-18 |