| suricata |
ET MALWARE BlackTech/PLEAD TSCookie CnC Checkin M1 |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE Trojan.JS.Agent.dwz Checkin |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Win32/TrojanDownloader.Delf.BVP Win32/BioData CnC Beacon |
rev 5 |
2024-04-20 |
| suricata |
ET INFO CNET TechTracker Software Manager request |
rev 5 |
2024-04-20 |
| suricata |
ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Patchwork APT CnC Beacon 2 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 2 |
rev 4 |
2024-04-20 |
| suricata |
ET HUNTING Request for EXE via WinHTTP M3 |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE WooSIP Downloader CnC WriteMetadataOnServer |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE APT/TransparentTribe CnC Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Trojan Generic - POST To gate.php with no referer |
rev 12 |
2024-04-20 |
| suricata |
ET MALWARE Blaze/Supreme Bot Activity M2 |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Backdoor.YesMaster CnC Checkin |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Teslacrypt Ransomware HTTP CnC Beacon M2 |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Dooptroop Dropper Checkin |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE W32/Citadel.Arx Varient CnC Beacon 2 |
rev 4 |
2024-04-20 |
| suricata |
ET EXPLOIT_KIT Possible Spartan/Nuclear EK Payload |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE ZeuS Post to C&C footer.php |
rev 4 |
2024-04-20 |
| suricata |
ET SCAN Kingcope KillApache.pl Apache mod_deflate DoS attempt |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE PawnStorm Sednit DL Aug 28 2015 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Possible Kimsuky APT Connectivity Check via Document |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE W32/TrojanSpy.MSIL Fetch Time CnC Beacon |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE APT.Fwits CnC Beacon M2 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Likely FakeAV/Fakeinit/FraudLoad Checkin |
rev 9 |
2024-04-20 |
| suricata |
ET MALWARE Cyborg Ransomware - Downloading Desktop Background |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Observed Koadic Header Structure |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Rovnix.J Checkin 2 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE IrcBot Fantasy Name Gen |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Snatch Ransomware - Encryption Started |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Malicious Chrome Extension Requesting Websocket |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Dyre CnC Checkin |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE CoreDn CnC Checkin M1 |
rev 3 |
2024-04-20 |
| suricata |
ET HUNTING HTTP Request with Double Cache-Control |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Valak <v9 Checkin |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Ursnif Connectivity Check |
rev 5 |
2024-04-20 |
| suricata |
ET PHISHING Possible Base64 Obfuscated Phishing Landing 2015-11-30 |
rev 8 |
2024-04-20 |
| suricata |
ET MALWARE Knock.php Shiz or Rohimafo CnC Server Contact URL |
rev 7 |
2024-04-20 |
| suricata |
ET MALWARE Vawtrak/NeverQuest Posting Data |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE W32/Virus-Encoder Ransomware Checkin |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Nemty Ransomware CnC Checkin |
rev 2 |
2024-04-20 |