| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Matiex Keylogger Exfil Via Telegram |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2020-08-19 |
| suricata |
ET PHISHING Possible Glitch.me Phishing Domain |
rev 3 |
2020-08-19 |
| suricata |
ET WEB_CLIENT Generic Mailer Check Accessed on External Server |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE Shark Pass Stealer Email Report |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET WEB_CLIENT Tech Support Scam Landing 2020-08-19 |
rev 2 |
2020-08-19 |
| suricata |
ET EXPLOIT UCM6202 1.0.18.13 - Remote Command Injection Attempt |
rev 2 |
2020-08-19 |
| suricata |
ET RPC DCERPC SVCCTL - Remote Service Control Manager Access |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Banito/Agent.pb Pass Stealer Email Report Outbound |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE PowerSploit/PowerView SMTP Data Exfil |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Win32/FlawedAmmyy RAT CnC Checkin |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter core_channel_* Command Response |
rev 5 |
2020-08-19 |
| suricata |
ET MALWARE LDPinch SMTP Password Report |
rev 7 |
2020-08-19 |
| suricata |
ET MALWARE Possible Pipka JS Skimmer CnC Request |
rev 2 |
2020-08-19 |
| suricata |
ET HUNTING Suspicious Quotation Mark Usage in FTP Username |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Linux/MayhemBruter Checkin |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter stdapi_* Command Request |
rev 4 |
2020-08-19 |
| suricata |
ET PHISHING Possible Phishing Landing Obfuscation 2016-03-17 |
rev 5 |
2020-08-19 |
| suricata |
ET MALWARE APT40/Dadstache Related DNS Lookup |
rev 3 |
2020-08-19 |
| suricata |
ET WEB_CLIENT SmailMax PHPMailer Accessed on External Server |
rev 2 |
2020-08-19 |
| suricata |
ET MALWARE Windows netstat Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2020-08-19 |
| suricata |
ET MALWARE Metasploit Meterpreter stdapi_* Command Response |
rev 4 |
2020-08-19 |
| suricata |
ET MALWARE Group 21 Payload CnC Checkin |
rev 3 |
2020-08-19 |
| snort |
ET TROJAN Echelon/DarkStealer Variant CnC Exfil M2 |
rev 2 |
2020-08-18 |
| snort |
ET TROJAN Trickbot/Anchor ICMP Request |
rev 1 |
2020-08-18 |
| suricata |
ET USER_AGENTS Long Fake wget 3.0 User-Agent Detected |
rev 6 |
2020-08-18 |
| suricata |
ET SCAN OpenVAS User-Agent Inbound |
rev 6 |
2020-08-18 |
| suricata |
ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity |
rev 10 |
2020-08-18 |
| suricata |
ET MALWARE TDSServ or Tidserv variant Checkin |
rev 6 |
2020-08-18 |
| suricata |
ET MALWARE Rerdom/Asprox CnC Beacon |
rev 4 |
2020-08-18 |
| suricata |
ET MALWARE Jorik FakeAV GET |
rev 5 |
2020-08-18 |
| suricata |
ET INFO Softango.com Installer Checking For Update |
rev 4 |
2020-08-18 |
| suricata |
ET ATTACK_RESPONSE webr00t WebShell Access |
rev 5 |
2020-08-18 |
| suricata |
ET MALWARE Trickbot/Anchor ICMP Request |
rev 1 |
2020-08-18 |
| snort |
ET TROJAN Echelon/DarkStealer Variant CnC Exfil |
rev 2 |
2020-08-17 |
| snort |
ET INFO BitNinja IO Security Check |
rev 2 |
2020-08-17 |