| suricata |
ET HUNTING Suspicious svchost.exe in URI - Possible Process Dump/Trojan Download |
rev 16 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .noip.cn Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET DNS Query for .cc TLD |
rev 5 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious smss.exe in URI |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE Shade Ransomware Payment Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious explorer.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .at.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Inter Skimmer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 23 |
rev 3 |
2020-09-16 |
| suricata |
ET INFO HTTP POST Request to Suspicious *.icu domain |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 2 |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 4 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 9 |
rev 4 |
2020-09-16 |
| suricata |
ET WEB_SPECIFIC_APPS Blind Server-Side Request Forgery |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE W32.Razy Inject Domain in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET PHISHING Successful Generic Personalized Phish 2018-09-27 M2 |
rev 3 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 29 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 9 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE iOS/Bahamut DNS Lookup 2 |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 13 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MOBILE_MALWARE NSO Related Domain 30 |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE APT33/CharmingKitten DDNS Overlap Domain in DNS Lookup M1 |
rev 5 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 7 |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE STOLENPENCIL CnC Domain in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE APT DarkHydrus DNS Lookup 11 |
rev 3 |
2020-09-16 |
| suricata |
ET WEB_CLIENT PolarisOffice Insecure Library Loading |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE BrushaLoader CnC DNS Lookup |
rev 3 |
2020-09-16 |
| suricata |
ET MALWARE JS.InfectedMikrotik Injects Domain Observed in DNS Lookup |
rev 4 |
2020-09-16 |
| suricata |
ET MALWARE Win32/Bisonal DNS Lookup 5 |
rev 3 |
2020-09-16 |