| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Backdoor.Esion CnC Checkin |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Mirai.shiina CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE IcedID Fake Resume Server in DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Possible PHP.MAILER WebShell Generic Request Inbound |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Inter Skimmer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Glupteba CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious explorer.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Shade Ransomware Payment Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious svchost.exe in URI - Possible Process Dump/Trojan Download |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Urlzone/Bebloh/Bublik Checkin /was/uid.php |
rev 4 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious smss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .us.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup APT CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO HTTP Request to Suspicious *.okinawa Domain |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO HTTP Request to Suspicious *.ryukyu Domain |
rev 4 |
2020-09-17 |
| suricata |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Outbound |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Unsupported/Fake Internet Explorer Version MSIE 5. |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query for a Suspicious *.qc.cx domain |
rev 7 |
2020-09-17 |
| suricata |
ET WEB_SERVER WebShell - Unknown - .php?x=img&img= |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |