| suricata |
ET EXPLOIT_KIT Balada Injector Script |
rev 2 |
2023-06-26 |
| suricata |
ET MALWARE [ANY.RUN] Gh0stBins Kernel Download Request |
rev 1 |
2023-06-26 |
| suricata |
ET INFO Monero Mining Pool DNS Lookup |
rev 4 |
2023-06-26 |
| suricata |
ET MALWARE [ANY.RUN] Gh0stBins RDP Remote Connection |
rev 1 |
2023-06-26 |
| snort |
ET CURRENT_EVENTS Suspicious IPFS Domain Rewritten with Google Translate |
rev 1 |
2023-06-23 |
| snort |
ET CURRENT_EVENTS Successful BDO Bank Credential Phish 2023-06-23 |
rev 1 |
2023-06-23 |
| snort |
ET TROJAN [ANY.RUN] RCRU64 Ransomware Variant CnC Activity |
rev 1 |
2023-06-23 |
| snort |
ET INFO External Host Sending Docker Swarm Join Command |
rev 3 |
2023-06-23 |
| snort |
ET MALWARE RemoteSpy.com Upload Detected |
rev 9 |
2023-06-23 |
| snort |
ET INFO External Host Creating Docker Image |
rev 3 |
2023-06-23 |
| suricata |
ET MALWARE RemoteSpy.com Upload Detected |
rev 11 |
2023-06-23 |
| suricata |
ET PHISHING Suspicious IPFS Domain Rewritten with Google Translate |
rev 1 |
2023-06-23 |
| suricata |
ET PHISHING Successful BDO Bank Credential Phish 2023-06-23 |
rev 1 |
2023-06-23 |
| sigma |
PktMon.EXE Execution |
test |
2023-06-23 |
| sigma |
Potential Adplus.EXE Abuse |
test |
2023-06-23 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET TROJAN Possible DarkFinger ipconfig Retrieval Attempt |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET INFO Possible Node.js REPL Shell Banner - Reverse Shell |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET TROJAN Possible DarkFinger Payload Retrieval Attempt - nc10 |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |