| suricata |
ET WEB_SERVER PHP ENV SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP SESSION SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP POST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET HUNTING SUSPICIOUS msctcd.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-21 |
| suricata |
ET HUNTING SUSPICIOUS connhost.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET HUNTING SUSPICIOUS taskmgr.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-21 |
| suricata |
ET MALWARE W32/Caphaw Requesting Additional Modules From CnC |
rev 7 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP SERVER SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action |
rev 6 |
2020-09-19 |
| suricata |
ET MALWARE Proxychecker Lookup |
rev 5 |
2020-09-19 |
| suricata |
ET MALWARE Possible FortDisco Reporting Hacked Accounts |
rev 5 |
2020-09-19 |
| suricata |
ET WEB_SERVER Joomla Upload File Filter Bypass |
rev 4 |
2020-09-19 |
| suricata |
ET MALWARE Win32.Troj.Cidox Checkin |
rev 5 |
2020-09-19 |
| suricata |
ET MALWARE Trojan.Win32.VB.cefz Checkin |
rev 4 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Styx Exploit Kit Jerk.cgi TDS |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER disable_functions PHP config option in uri |
rev 7 |
2020-09-18 |
| suricata |
ET MALWARE W32/Beebus HTTP POST CnC Beacon |
rev 4 |
2020-09-18 |
| suricata |
ET MOBILE_MALWARE Android/GoldDream Infected Device Registration |
rev 6 |
2020-09-18 |
| suricata |
ET WEB_SERVER PHP tag in UA |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible Perl Shell in HTTP POST |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE Unknown Webserver Backdoor |
rev 4 |
2020-09-18 |
| suricata |
ET INFO BitCoin User-Agent Likely Bitcoin Miner |
rev 6 |
2020-09-18 |
| suricata |
ET MALWARE W32/Caphaw CnC Configuration File Request |
rev 4 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Possible JDB Exploit Kit Class Request |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE Hangover Campaign Keylogger Checkin |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER auto_prepend_file PHP config option in uri |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible SQLi xp_cmdshell POST body |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible Perl Shell in HTTP POST |
rev 8 |
2020-09-18 |
| suricata |
ET WEB_SERVER Apache Struts Possible xwork Disable Method Execution |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE W32/Downloader Secondary Download Request - W32/Hupigon.Backdoor Likely Secondary Payload |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER open_basedir PHP config option in uri |
rev 6 |
2020-09-18 |
| suricata |
ET MALWARE W32/Iyus.H work_troy.php CnC Request |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE W32/LetsGo.APT Sleep CnC Beacon |
rev 4 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT JDB Exploit Kit JAR Download |
rev 9 |
2020-09-18 |
| suricata |
ET MALWARE Haxdoor Reporting User Activity 2 |
rev 9 |
2020-09-18 |
| suricata |
ET INFO PDF - Acrobat Enumeration - pdfobject.js |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE Possible Linux/Cdorked.A CnC |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE Revoyem Ransomware Check-in |
rev 6 |
2020-09-18 |