| suricata |
ET ADWARE_PUP OSX/Bundalore Loader Activity |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Chthonic Checkin |
rev 10 |
2024-04-20 |
| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/nt/th |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE MalDoc Retrieving Possible Ostap Payload |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE AZORult Variant.4 Checkin M2 |
rev 4 |
2024-04-20 |
| suricata |
ET HUNTING HTTP Request with Double Cache-Control |
rev 4 |
2024-04-20 |
| suricata |
ET HUNTING Suspicious GET To gate.php with no Referer |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE nspps Backdoor CnC Activity |
rev 2 |
2024-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials |
rev 3 |
2024-04-20 |
| suricata |
ET INFO Doc Template Downloaded from DDNS Site |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE APT/TransparentTribe Style Request |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Win32/ViSystem CnC Checkin |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Malicious Chrome Extension Requesting Websocket |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE LogPOS Sending Data |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE MedusaHTTP Variant CnC Checkin M2 |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Plasmabot CnC Host Checkin |
rev 8 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Valak - Plugin Data Exfil |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE RezoStealer CnC Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - get_servers.php |
rev 5 |
2024-04-20 |
| suricata |
ET INFO Nimiq Miner Initiating Mining Session with Skypool |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Dooptroop Dropper Checkin |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE VikroStealer CnC Exfil |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Sharik/Smoke Loader Java Connectivity Check |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE JS/Ostap Maldoc Check-in |
rev 3 |
2024-04-20 |
| suricata |
ET EXPLOIT_KIT Magnitude EK JSE |
rev 4 |
2024-04-20 |
| suricata |
ET INFO CNET Custom Installer Possible Bundled Bloatware |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE BF Botnet CnC Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE ELF/DarkNexus User-Agent |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/win/wcx |
rev 5 |
2024-04-20 |
| suricata |
ET INFO HTTP POST to WP Theme Directory Without Referer |
rev 8 |
2024-04-20 |
| suricata |
ET ADWARE_PUP Win32/Atshz.A Checkin M2 |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE Zacom/NFlog HTTP POST Connectivity Check |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Win32/FFDroider CnC Activity |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE MSIL/SamMiner CnC Checkin M1 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE IrcBot Fantasy Name Gen |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE CoreDn CnC Checkin M1 |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Linux/Moose HTTP CnC Beacon |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Injector.BXEW Variant HTTP CnC Beacon 3 |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Ursnif Variant CnC Data Exfil |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Knock.php Shiz or Rohimafo CnC Server Contact URL |
rev 7 |
2024-04-20 |