| snort |
ET INFO Observed DNS Query to .work TLD |
rev 3 |
2022-11-21 |
| snort |
ET WEB_SERVER HTTP Request to a *.54dfa1cb.com domain - Anuna Checkin - Compromised PHP Site |
rev 2 |
2022-11-21 |
| snort |
ET INFO Observed DNS Query to .world TLD |
rev 3 |
2022-11-21 |
| snort |
ET INFO Observed DNS Query to .okinawa TLD |
rev 3 |
2022-11-21 |
| snort |
ET INFO Observed DNS Query to .fit TLD |
rev 3 |
2022-11-21 |
| snort |
ET INFO HTTP Request to Suspicious *.life Domain |
rev 3 |
2022-11-21 |
| snort |
ET P2P Possible Torrent Download via HTTP Request |
rev 9 |
2022-11-21 |
| snort |
ET TROJAN ProjectSauron Remsec/HTTPBrowser/Pisloader Covert DNS CnC Channel TXT Lookup |
rev 6 |
2022-11-21 |
| snort |
ET INFO Observed DNS Query to .desi TLD |
rev 3 |
2022-11-21 |
| snort |
ET INFO infinityfree .net Domain in DNS Lookup |
rev 3 |
2022-11-21 |
| snort |
ET INFO Unconfigured nginx Access |
rev 2 |
2022-11-21 |
| snort |
ET INFO Observed DNS Query to .life TLD |
rev 3 |
2022-11-21 |
| snort |
ET TROJAN Golang Aurora Stealer Exfil Activity |
rev 1 |
2022-11-21 |
| snort |
ET TROJAN Win32/Filecoder.OJC CnC Checkin |
rev 1 |
2022-11-21 |
| snort |
ET INFO HTTP Request to Suspicious *.world Domain |
rev 3 |
2022-11-21 |
| snort |
ET INFO HTTP Request to Suspicious *.work Domain |
rev 3 |
2022-11-21 |
| snort |
ET INFO Redirect Link in TikTok URL |
rev 1 |
2022-11-21 |
| snort |
ET INFO Dotted Quad Host DOC Request |
rev 4 |
2022-11-21 |
| suricata |
ET INFO infinityfree .net Domain in DNS Lookup |
rev 2 |
2022-11-21 |
| suricata |
ET INFO DNS Query for Suspicious .icu Domain |
rev 4 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .work TLD |
rev 5 |
2022-11-21 |
| suricata |
ET MALWARE Golang Aurora Stealer Exfil Activity |
rev 1 |
2022-11-21 |
| suricata |
ET INFO HTTP Request to Suspicious *.work Domain |
rev 5 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .okinawa TLD |
rev 5 |
2022-11-21 |
| suricata |
ET P2P Possible Torrent Download via HTTP Request |
rev 12 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .biz TLD |
rev 5 |
2022-11-21 |
| suricata |
ET INFO HTTP Request to Suspicious *.world Domain |
rev 5 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .world TLD |
rev 5 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .fit TLD |
rev 5 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .life TLD |
rev 5 |
2022-11-21 |
| suricata |
ET HUNTING Redirect Link in TikTok URL |
rev 1 |
2022-11-21 |
| suricata |
ET INFO Observed DNS Query to .desi TLD |
rev 5 |
2022-11-21 |
| suricata |
ET INFO HTTP Request to Suspicious *.life Domain |
rev 5 |
2022-11-21 |
| sigma |
Suspicious Recursive Takeown |
test |
2022-11-21 |
| snort |
ET CURRENT_EVENTS TA399/Sidewinder Credential Phish Landing Page M1 2022-11-18 |
rev 1 |
2022-11-18 |
| snort |
ET CURRENT_EVENTS TA399/Sidewinder Credential Phish Landing Page M2 2022-11-18 |
rev 1 |
2022-11-18 |
| suricata |
ET PHISHING TA399/Sidewinder Credential Phish Landing Page M1 2022-11-18 |
rev 1 |
2022-11-18 |
| sigma |
Schtasks From Suspicious Folders |
test |
2022-11-18 |
| sigma |
Suspicious Service Path Modification |
test |
2022-11-18 |
| sigma |
Suspicious Modification Of Scheduled Tasks |
test |
2022-11-18 |