| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.premnewar .com .np domain |
rev 1 |
2025-09-18 |
| suricata |
ET MALWARE FrigidBackdoor Exfil Zip |
rev 1 |
2025-09-18 |
| suricata |
ET MALWARE FrigidBackdoor Health Check |
rev 1 |
2025-09-18 |
| suricata |
ET MALWARE FrigidBackdoor Log Results |
rev 1 |
2025-09-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.sojda .org domain |
rev 1 |
2025-09-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.carluciocruzfotografia .com .br domain |
rev 1 |
2025-09-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.carluciocruzfotografia .com .br domain |
rev 1 |
2025-09-18 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.sojda .org domain |
rev 1 |
2025-09-18 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.insuter .com .ar domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.intinet .com .ar domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.euro-line .hu domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.litos .co .uk domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.gauravn .com .np domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.hippocentre .ru domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.vlaves .bg domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.intinet .com .ar domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.rkumar .com .np domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.euro-line .hu domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.insuter .com .ar domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.vlaves .bg domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.gauravn .com .np domain |
rev 1 |
2025-09-17 |
| snort |
ET TROJAN FrigidBackdoor Poll for Commands |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.rkumar .com .np domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.hippocentre .ru domain |
rev 1 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.litos .co .uk domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.litos .co .uk domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.intinet .com .ar domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.hippocentre .ru domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.euro-line .hu domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.vlaves .bg domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.rkumar .com .np domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.gauravn .com .np domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.hippocentre .ru domain |
rev 1 |
2025-09-17 |
| suricata |
ET MALWARE TA421/YTTRIUM/APT29 TLS Certificate M2 |
rev 3 |
2025-09-17 |
| suricata |
ET MALWARE TA421/YTTRIUM/APT29 TLS Certificate M1 |
rev 3 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.rkumar .com .np domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.insuter .com .ar domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vlaves .bg domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.euro-line .hu domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.gauravn .com .np domain |
rev 1 |
2025-09-17 |