| suricata |
ET MALWARE AppleJeus - Union Crypto CnC Activity |
rev 1 |
2021-02-18 |
| snort |
ET TROJAN GoldenSpy CnC Activity |
rev 3 |
2021-02-17 |
| snort |
ET TROJAN MSIL/CoderVir Stealer Zip Upload |
rev 2 |
2021-02-15 |
| suricata |
ET MALWARE MSIL/CoderVir Stealer Zip Upload |
rev 2 |
2021-02-13 |
| snort |
ET MALWARE Win32/RemoteUtilities Checkin via SMTP |
rev 2 |
2021-02-12 |
| suricata |
ET ADWARE_PUP Win32/RemoteUtilities Checkin via SMTP |
rev 1 |
2021-02-12 |
| snort |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2021-02-11 |
| snort |
ET INFO Trend Micro Phishing Simulation Service |
rev 2 |
2021-02-11 |
| suricata |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2021-02-11 |
| suricata |
ET INFO Trend Micro Phishing Simulation Service |
rev 2 |
2021-02-11 |
| snort |
ET TROJAN Win32/CopperStealer Installer Started |
rev 2 |
2021-02-09 |
| suricata |
ET MALWARE Win32/CopperStealer Installer Started |
rev 2 |
2021-02-09 |
| snort |
ET TROJAN Win32/Detplock Checkin via SMTP |
rev 2 |
2021-02-08 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Compromised Server |
rev 2 |
2021-02-08 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Compromised Server |
rev 2 |
2021-02-08 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Compromised Server |
rev 2 |
2021-02-08 |
| suricata |
ET WEB_SERVER Generic Mailer Accessed on Internal Compromised Server |
rev 2 |
2021-02-08 |
| suricata |
ET MALWARE Win32/Detplock Checkin via SMTP |
rev 2 |
2021-02-08 |
| snort |
ET TROJAN Win32/TrojanDownloader.Small.AWO CnC Activity |
rev 2 |
2021-02-04 |
| suricata |
ET MALWARE Win32/TrojanDownloader.Small.AWO CnC Activity |
rev 1 |
2021-02-04 |
| snort |
ET TROJAN Snake Keylogger CnC Exfil via Telegram |
rev 2 |
2021-02-03 |
| snort |
ET INFO Minimal HTTP GET Request to rebrand .ly |
rev 3 |
2021-02-03 |
| snort |
ET INFO Minimal HTTP GET Request to cl .ly |
rev 3 |
2021-02-03 |
| snort |
ET TROJAN Win32/TrickBot maserv Module CnC Activity |
rev 2 |
2021-02-02 |
| snort |
ET TROJAN Win32/SystemBC CnC Checkin |
rev 2 |
2021-02-02 |
| suricata |
ET MALWARE Win32/SystemBC CnC Checkin |
rev 2 |
2021-02-02 |
| sigma |
ShimCache Flush |
stable |
2021-02-01 |
| snort |
ET TROJAN TeamTNT Gattling Gun CnC Domain in DNS Lookup |
rev 2 |
2021-01-28 |
| snort |
ET TROJAN TeamTNT Gattling Gun AWS Creds Exfil |
rev 2 |
2021-01-28 |
| snort |
ET TROJAN Sn0wsLogger CnC Exfil M2 |
rev 2 |
2021-01-28 |
| snort |
ET TROJAN Sn0wsLogger CnC Exfil M1 |
rev 2 |
2021-01-28 |
| suricata |
ET MALWARE TeamTNT Gattling Gun CnC Domain in DNS Lookup |
rev 1 |
2021-01-28 |
| suricata |
ET MALWARE TeamTNT Gattling Gun AWS Creds Exfil |
rev 2 |
2021-01-28 |
| snort |
ET POLICY SMB2 Remote AT Scheduled Job Create Request |
rev 3 |
2021-01-27 |
| suricata |
ET INFO SMB2 Remote AT Scheduled Job Create Request |
rev 3 |
2021-01-27 |
| snort |
ET INFO Suspicious POST Format |
rev 2 |
2021-01-26 |
| snort |
ET INFO Suspicious POST Format |
rev 2 |
2021-01-26 |
| snort |
ET INFO Suspicious POST to Wordpress Folder - Possible Successful Banking Phish |
rev 2 |
2021-01-26 |
| snort |
ET INFO Suspicious POST Format |
rev 2 |
2021-01-26 |
| snort |
ET TROJAN [401TRG] SUNBURST Related DNS Lookup to infinitysoftwares .com |
rev 2 |
2021-01-25 |