| suricata |
ET INFO Query for Suspicious .sg.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET WEB_SERVER WebShell - Unknown - .php?x=img&img= |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .int.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Domen SocEng CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE HTTP Request for Possible ELF/LiLocked Ransomware Note |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ABUSE.CH Zloader CnC Domain Detected |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE SmokeBot grab data plaintext |
rev 6 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET MOBILE_MALWARE Android/GoldDream Uploading Watch Files |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Inter Skimmer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT DNSpionage/Karkoff CnC Domain in DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious lsass.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious csrss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET DNS Query to a .tk domain - Likely Hostile |
rev 7 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Unk HeavensGate Loader CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious svchost.exe in URI - Possible Process Dump/Trojan Download |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Unk HeavensGate Loader CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Inter Skimmer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .bg.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious smss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Observed DNS Query to APT10 Related CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |