| suricata |
ET ADWARE_PUP HTTP Connection to go2000.cn - Common Malware Checkin Server |
rev 6 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Observed DNS Query to APT10 Related CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .int.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .ch.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious smss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE Glupteba CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Glupteba CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious svchost.exe in URI - Possible Process Dump/Trojan Download |
rev 16 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .noip.cn Domain |
rev 5 |
2020-09-17 |
| suricata |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Outbound |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Cloudflare DNS Over HTTPS Certificate Inbound |
rev 5 |
2020-09-17 |
| suricata |
ET INFO DNS Query for TOR Hidden Domain .onion Accessible Via TOR |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Plurox CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO TuneIn Internet Radio Usage Detected |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Unk HeavensGate Loader CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Suspicious *.vv.cc domain |
rev 5 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .cz.tf Domain |
rev 5 |
2020-09-17 |