| snort |
ET TROJAN Diavol Communicating with CnC - Register M2 |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol HTTP Cookie Observed |
rev 2 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Ext Request |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Mirai pTea Variant - Bot Upload Command Outbound |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Landing Request |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Mirai pTea Variant - Info Submission Outbound |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Key Request |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Observed DNS Query to Known Indexsinas CnC Domain |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Mirai pTea Variant - Info Submission Inbound |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Mirai pTea Variant - Initial CnC Checkin Inbound |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Register M1 |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Priority Request |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol CnC Checkin |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Diavol Communicating with CnC - Services Request |
rev 1 |
2021-07-05 |
| snort |
ET EXPLOIT Possible REvil 0day Exploitation Activity Inbound |
rev 1 |
2021-07-05 |
| snort |
ET TROJAN Observed DNS Query to Known Indexsinas CnC Domain |
rev 2 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Register M2 |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol CnC Checkin |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Ignore Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Observed DNS Query to Known Indexsinas CnC Domain |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Landing Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Priority Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Services Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol HTTP Cookie Observed |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Mirai pTea Variant - Initial CnC Checkin Outbound |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Ext Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Observed DNS Query to Known Indexsinas CnC Domain |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Key Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Register M1 |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Mirai pTea Variant - Info Submission Outbound |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Mirai pTea Variant - Initial CnC Checkin Inbound |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Diavol Communicating with CnC - Wipe Request |
rev 1 |
2021-07-05 |
| suricata |
ET MALWARE Mirai pTea Variant - Info Submission Inbound |
rev 1 |
2021-07-05 |
| snort |
ET CURRENT_EVENTS Observed Possible Phishing Landing Page 2021-06-25 |
rev 1 |
2021-07-01 |
| suricata |
ET MALWARE zgRAT / PureLogs CnC Activity M2 |
rev 1 |
2021-06-30 |
| snort |
ET TROJAN NightfallGT Mercurial Grabber |
rev 3 |
2021-06-30 |
| snort |
ET MALWARE Reborn Stealer 2021 Exfil attempt via Telegram |
rev 1 |
2021-06-30 |
| snort |
ET TROJAN REvil Exfil SFTP Certificate Inbound |
rev 1 |
2021-06-30 |
| snort |
ET TROJAN Valyria Downloader Activity |
rev 1 |
2021-06-30 |
| suricata |
ET MALWARE Reborn Stealer 2021 Exfil attempt via Telegram |
rev 1 |
2021-06-30 |