| suricata |
ET MALWARE Possible Winnti DNS Lookup |
rev 2 |
2020-01-31 |
| snort |
ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M7 |
rev 2 |
2020-01-30 |
| snort |
ET INFO TLS Handshake Failure |
rev 2 |
2020-01-30 |
| snort |
ET MALWARE Win32.AdWare.iBryte.C Install |
rev 3 |
2020-01-30 |
| suricata |
ET INFO TLS Handshake Failure |
rev 2 |
2020-01-30 |
| suricata |
ET ADWARE_PUP Win32.AdWare.iBryte.C Install |
rev 4 |
2020-01-30 |
| snort |
ET TROJAN Mimikatz x64 Mimidrv.sys File Transfer Over SMB |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x64 Executable Transfer Over SMB |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x86 Mimidrv.sys Download Over HTTP |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x64 Executable Download Over HTTP |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Observed Unk.PowerShell Loader CnC Domain in TLS SNI |
rev 2 |
2020-01-29 |
| snort |
ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M4 |
rev 2 |
2020-01-29 |
| snort |
ET CURRENT_EVENTS Terse POST to Wordpress Folder - Probable Successful Phishing M2 |
rev 3 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x86 Executable Transfer Over SMB |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x86 Mimidrv.sys File Transfer Over SMB |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Mimikatz x86 Executable Download Over HTTP |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2020-01-29 |
| snort |
ET TROJAN Hisoka CnC Domain Observed in DNS Query |
rev 2 |
2020-01-29 |
| suricata |
ET MALWARE Mimikatz x64 Mimidrv.sys File Transfer Over SMB |
rev 1 |
2020-01-29 |
| suricata |
ET MALWARE Mimikatz x86 Executable Transfer Over SMB |
rev 1 |
2020-01-29 |
| suricata |
ET MALWARE Mimikatz x64 Executable Transfer Over SMB |
rev 1 |
2020-01-29 |
| suricata |
ET MALWARE Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2020-01-29 |
| suricata |
ET MALWARE Mimikatz x86 Mimidrv.sys File Transfer Over SMB |
rev 1 |
2020-01-29 |
| snort |
ET CURRENT_EVENTS Successful Generic Credit Card Information Phish 2020-01-27 |
rev 2 |
2020-01-27 |
| snort |
ET POLICY Telegram API Certificate Observed |
rev 2 |
2020-01-27 |
| snort |
ET TROJAN Possible Generic RAT over Telegram API |
rev 2 |
2020-01-27 |
| snort |
ET TROJAN Mermaid Ransomware Variant CnC Activity M3 |
rev 2 |
2020-01-24 |
| snort |
ET TROJAN ELF/Muhstik - IRC CnC Checkin |
rev 2 |
2020-01-23 |
| snort |
ET TROJAN Gamaredon CnC Observed in DNS Query |
rev 2 |
2020-01-23 |
| suricata |
ET MALWARE ELF/Muhstik - IRC CnC Checkin |
rev 1 |
2020-01-23 |
| snort |
ET POLICY Website Hosting Service Observed in DNS Query |
rev 2 |
2020-01-22 |
| snort |
ET TROJAN Observed Magecart CnC Domain in TLS SNI |
rev 2 |
2020-01-22 |
| snort |
ET TROJAN Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-01-22 |
| snort |
ET TROJAN ELF/Rekoobe CnC Observed in DNS Query |
rev 2 |
2020-01-22 |
| snort |
ET TROJAN Observed Magecart CnC Domain in TLS SNI |
rev 2 |
2020-01-22 |
| suricata |
ET MALWARE Observed Magecart CnC Domain in TLS SNI |
rev 1 |
2020-01-22 |
| suricata |
ET MALWARE Observed Magecart CnC Domain in TLS SNI |
rev 1 |
2020-01-22 |
| snort |
ET TROJAN MageCart CnC Domain Observed in DNS Query |
rev 2 |
2020-01-20 |
| snort |
ET TROJAN Nemty Ransomware Payment Page ID File Upload |
rev 2 |
2020-01-17 |