| suricata |
ET WEB_SPECIFIC_APPS CubeCart loc parameter Local File Inclusion Attempt |
rev 4 |
2024-04-07 |
| suricata |
ET MALWARE Zeus GameOver Checkin |
rev 5 |
2024-04-07 |
| suricata |
ET WEB_CLIENT Microsoft OLE Compound File With Flash |
rev 10 |
2024-04-07 |
| suricata |
ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR filename detected |
rev 5 |
2024-04-07 |
| suricata |
ET MALWARE Likely MAGICHOUND.FETCH Receiving PowerSploit PowerShell over HTTP |
rev 4 |
2024-04-06 |
| suricata |
ET PHISHING [eSentire] Adobe Phishing Landing 2018-07-04 |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2 |
rev 6 |
2024-04-06 |
| suricata |
ET MALWARE Possible Sharik/Smoke Loader Microsoft Connectivity check M2 |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE ARM Binary Downloaded via WGET Containing GoAhead and Multiple Camera RCE 0Day Vulnerabilities |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE W32.FakeEzQ.kr Checkin |
rev 6 |
2024-04-06 |
| suricata |
ET MALWARE Win32/Nivdort Checkin |
rev 10 |
2024-04-06 |
| suricata |
ET MALWARE Possible Sharik/Smoke Loader Microsoft Connectivity check M3 |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE LokiBot Keylogger Data Exfiltration Detected M2 |
rev 6 |
2024-04-06 |
| suricata |
ET ATTACK_RESPONSE 401TRG Perl DDoS IRCBot File Download |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE Jaff Ransomware Checkin |
rev 7 |
2024-04-06 |
| suricata |
ET MALWARE IrcBot Downloading .old |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Win32/Swrort.A Checkin 3 |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Possible Dridex Download URI Struct with no referer |
rev 10 |
2024-04-06 |
| suricata |
ET MALWARE W2KM_BARTALEX Downloading Payload M2 |
rev 6 |
2024-04-06 |
| suricata |
ET MALWARE Zberp receiving config via image file - SET |
rev 12 |
2024-04-06 |
| suricata |
ET HUNTING ARM Binary Downloaded via WGET Containing Suspicious Netcat Command - Possible IoT Malware |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE MegalodonHTTP CoinMiner Activity |
rev 3 |
2024-04-06 |
| suricata |
ET EXPLOIT_KIT Possible Malicious Redirect Leading to EK Oct 29 |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Powershell commands sent B64 2 |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Backdoor.Elise CnC Beacon 2 M2 |
rev 7 |
2024-04-06 |
| suricata |
ET MALWARE CerberTear Ransomware CnC Checkin |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Possible Pony DLL Download |
rev 7 |
2024-04-06 |
| suricata |
ET EXPLOIT_KIT Evil Redirector Leading to EK September 04 2015 |
rev 6 |
2024-04-06 |
| suricata |
ET WEB_CLIENT HTA File containing Wscript.Shell Call - Potential CVE-2017-0199 |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE MegalodonHTTP/LuciferHTTP Client Action |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE Sage Ransomware Checkin Primer |
rev 8 |
2024-04-06 |
| suricata |
ET MALWARE Powershell commands sent B64 1 |
rev 5 |
2024-04-06 |
| suricata |
ET MALWARE APT Lurker POST CnC Beacon |
rev 9 |
2024-04-06 |
| suricata |
ET MALWARE MSIL/Alcatrez Locker Ransomware CnC Checkin |
rev 5 |
2024-04-06 |
| suricata |
ET EXPLOIT Possible $MFT NTFS Device Access in HTTP Response |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE Win32/HydraCrypt CnC Beacon 1 |
rev 6 |
2024-04-06 |
| suricata |
ET MALWARE Powershell commands sent B64 3 |
rev 5 |
2024-04-06 |
| suricata |
ET EXPLOIT Adobe Coldfusion BlazeDS Java Object Deserialization Remote Code Execution |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE OSX/OceanLotus.D Sending Data to CnC |
rev 4 |
2024-04-06 |
| suricata |
ET MALWARE CozyCar V2 CnC Beacon |
rev 6 |
2024-04-06 |