| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.vlaves .bg domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.gauravn .com .np domain |
rev 1 |
2025-09-17 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.intinet .com .ar domain |
rev 1 |
2025-09-17 |
| suricata |
ET MALWARE TA421/YTTRIUM/APT29 TLS Certificate M1 |
rev 3 |
2025-09-17 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.comit .com .ar domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.adutchmaninwalldorf .de domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.die-pichlers .at domain |
rev 1 |
2025-09-16 |
| snort |
ET TROJAN Shai-Hulud NPM Malware Creating Github Repository |
rev 1 |
2025-09-16 |
| snort |
ET TROJAN VampireBot CnC Config Inbound |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.johngross .biz domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.johngross .biz domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.bukomp .ru domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.bukomp .ru domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.adutchmaninwalldorf .de domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.comit .com .ar domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.die-pichlers .at domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.die-pichlers .at domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.adutchmaninwalldorf .de domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.bukomp .ru domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.die-pichlers .at domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.johngross .biz domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.johngross .biz domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.adutchmaninwalldorf .de domain |
rev 1 |
2025-09-16 |
| suricata |
ET MALWARE Shai-Hulud NPM Malware Creating Github Repository |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.comit .com .ar domain |
rev 1 |
2025-09-16 |
| suricata |
ET MALWARE VampireBot CnC Config Inbound |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.comit .com .ar domain |
rev 1 |
2025-09-16 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.bukomp .ru domain |
rev 1 |
2025-09-16 |
| snort |
ET INFO schtasks delete Command in HTTP Body Response |
rev 1 |
2025-09-15 |
| snort |
ET INFO schtasks change Command in HTTP Body Response |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.bowling .vn domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO Github Request for PNG File With PowerShell |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.gert .li domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.idempiere .com .ar domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO schtasks run Command in HTTP Body Response |
rev 1 |
2025-09-15 |
| snort |
ET INFO Minimal Header Github Request for PNG File |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.estudiotarzia .com .ar domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.estudiotarzia .com .ar domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.idempiere .com .ar domain |
rev 1 |
2025-09-15 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.gert .li domain |
rev 1 |
2025-09-15 |