| snort |
ET MALWARE OSX/Adware.Pirrit CnC Activity 3 |
rev 1 |
2021-05-25 |
| snort |
ET MALWARE OSX/Adware.Pirrit CnC Activity 4 |
rev 1 |
2021-05-25 |
| snort |
ET TROJAN OSX/MapperState CnC Domain in DNS Lookup |
rev 2 |
2021-05-25 |
| snort |
ET TROJAN Lemon_Duck Powershell CnC Checkin M6 |
rev 2 |
2021-05-24 |
| snort |
ET TROJAN Teslarvng Ransomware CnC Activity M3 |
rev 2 |
2021-05-24 |
| snort |
ET TROJAN Teslarvng Ransomware CnC Activity M1 |
rev 1 |
2021-05-24 |
| snort |
ET TROJAN Lemon_Duck Powershell CnC Activity M14 |
rev 1 |
2021-05-24 |
| snort |
ET TELNET Teslarvng Ransomware CnC Activity M2 |
rev 2 |
2021-05-24 |
| suricata |
ET MALWARE Teslarvng Ransomware CnC Activity M1 |
rev 1 |
2021-05-24 |
| suricata |
ET MALWARE Teslarvng Ransomware CnC Activity M2 |
rev 2 |
2021-05-24 |
| suricata |
ET MALWARE Teslarvng Ransomware CnC Activity M3 |
rev 2 |
2021-05-24 |
| suricata |
ET MALWARE Lemon_Duck Powershell CnC Activity M14 |
rev 1 |
2021-05-24 |
| snort |
ET TROJAN Cobalt Strike Malleable C2 JQuery Custom Profile Response |
rev 1 |
2021-05-21 |
| snort |
ET POLICY Wifi Geolocation Lookup Attempt |
rev 1 |
2021-05-21 |
| snort |
ET TROJAN Cobalt Strike Malleable C2 JQuery Custom Profile M3 |
rev 2 |
2021-05-21 |
| suricata |
ET MALWARE Cobalt Strike Malleable C2 JQuery Custom Profile Response |
rev 1 |
2021-05-21 |
| snort |
ET TROJAN NightfallGT Discord Nitro Ransomware |
rev 2 |
2021-05-19 |
| snort |
ET CURRENT_EVENTS Possible Phishing Landing Page 2021-05-18 |
rev 2 |
2021-05-19 |
| snort |
ET TROJAN NightfallGT Discord Token Grabber |
rev 1 |
2021-05-19 |
| suricata |
ET MALWARE NightfallGT Discord Nitro Ransomware |
rev 2 |
2021-05-19 |
| suricata |
ET MALWARE Suspected Sliver DNS CnC |
rev 2 |
2021-05-19 |
| suricata |
ET MALWARE NightfallGT Discord Token Grabber |
rev 1 |
2021-05-19 |
| snort |
ET INFO HTTP Request to a *.ml domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.gq domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.surf domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.cam domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.asia domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.buzz domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.ga domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.date domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO HTTP Request to a *.tw domain |
rev 1 |
2021-05-18 |
| snort |
ET INFO Possible ELF executable sent when remote host claims to send a Text File |
rev 1 |
2021-05-18 |
| snort |
ET TROJAN Observed Win32/Ymacco.AA36 User-Agent |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.cam domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.tw domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.date domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.asia domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.surf domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.ga domain |
rev 1 |
2021-05-18 |
| suricata |
ET INFO HTTP Request to a *.ml domain |
rev 1 |
2021-05-18 |