| suricata |
GPL NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error Invalid Argument |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoOpen Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Enumiax Inter-Asterisk Exchange Protocol Username Scan |
rev 3 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of document.write % Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2019-07-26 |
| suricata |
ET COINMINER CoinMiner Malicious Authline Seen After CVE-2017-10271 Exploit |
rev 1 |
2019-07-26 |
| suricata |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC mountd UDP mount path overflow attempt |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE DDoS Win32/Nitol.A Checkin |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrconnect unicode little endian overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NDdeSetTrustedShareW overflow attempt |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE W32/iGrabber Info Stealer FTP Upload |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Windows WMIC PROCESS get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB IrotIsRunning little endian attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2019-07-26 |
| suricata |
GPL ICMP PING Seer Windows |
rev 8 |
2019-07-26 |
| suricata |
GPL IMAP status overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET SCAN Amap TCP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Sisproc |
rev 3 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Microsoft WMIC Prompt Outbound |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE NCSC XAgent itwm beacon v2 |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 11 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] DorkBot.Downloader CnC Beacon |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE LuminosityLink - Data Channel Client Request |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Black Stealer Exfil FTP STOR |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB RemoteActivation little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 1 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB IrotIsRunning unicode little endian attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL RPC portmap NFS request UDP |
rev 8 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 6 |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Multiple MON_LIST Seq 0 Response Spanning Multiple Packets IMPL 0x03 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Ipconfig Command in SMB Traffic - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful TCP Map to External Network |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Tapazom.A |
rev 1 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x02 |
rev 2 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M4 |
rev 2 |
2019-07-26 |