| snort |
ET TROJAN VKeylogger CnC Checkin |
rev 1 |
2025-05-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| suricata |
ET MALWARE VKeylogger CnC Checkin |
rev 1 |
2025-05-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.burgermap .org domain |
rev 1 |
2025-05-07 |
| snort |
ET POLICY Possible HTA Application Download |
rev 4 |
2025-05-06 |
| suricata |
ET INFO Possible HTA Application Download |
rev 7 |
2025-05-06 |
| snort |
ET ATTACK_RESPONSE Observed ClickFix Landing Page Inbound |
rev 1 |
2025-05-05 |
| suricata |
ET ATTACK_RESPONSE Observed ClickFix Landing Page Inbound |
rev 1 |
2025-05-05 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.virtualsiam .com domain |
rev 1 |
2025-05-04 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| snort |
ET TROJAN TerraStealerV2 CnC Telegram Bot Response |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| snort |
ET TROJAN TerraStealerV2 New Victim Checkin via Telegram API |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| snort |
ET TROJAN TerraStealerV2 Data Exfil via WeTransfers |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 New Victim Checkin via Telegram API |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 Data Exfil via WeTransfers |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.defdc .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| suricata |
ET MALWARE TerraStealerV2 CnC Telegram Bot Response |
rev 1 |
2025-05-02 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.roedernallee .com domain |
rev 1 |
2025-05-02 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.mappuchan .com domain |
rev 1 |
2025-05-01 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.lifepixeled .com domain |
rev 1 |
2025-05-01 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.spoggi .com domain |
rev 1 |
2025-04-29 |
| snort |
ET TROJAN Gremlin Stealer CnC Successful Exfil Confirmation |
rev 1 |
2025-04-29 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.incorpnow .cn domain |
rev 1 |
2025-04-29 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.spoggi .com domain |
rev 1 |
2025-04-29 |