| suricata |
ET MALWARE Possible Zendran ELF IRCBot Joining Channel |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Banker Trojan CnC AddNew Command |
rev 3 |
2019-07-26 |
| suricata |
ET VOIP REGISTER Message Flood TCP |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS RemoteActivation little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Windows systeminfo Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Smap VOIP Device Scan |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB IrotIsRunning attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE W32/DoubleTap.APT Downloader CnC Beacon |
rev 2 |
2019-07-26 |
| suricata |
GPL VOIP SIP 407 Proxy Authentication Required Flood |
rev 4 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP unsubscribe overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE OpenSSH in ICMP Payload - Possible Covert Channel |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap admind request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE Windows gpresult Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap rwalld request UDP |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 73 |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB OpenKey little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET CHAT Google IM traffic Jabber client sign-on |
rev 5 |
2019-07-26 |
| suricata |
GPL ICMP PING IP NetMonitor Macintosh |
rev 8 |
2019-07-26 |
| suricata |
GPL SQL Slammer Worm propagation attempt |
rev 9 |
2019-07-26 |
| suricata |
ET VOIP INVITE Message Flood TCP |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE ZeroAccess udp traffic detected |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Skeleton Key Filename in SMB2 Traffic |
rev 2 |
2019-07-26 |
| suricata |
ET INFO PTUNNEL OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of arguments.callee %u UTF-16 Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT nodes reply |
rev 4 |
2019-07-26 |
| suricata |
ET P2P Octoshape P2P streaming media |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Syrian Malware Checkin |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Powershell Command With Hidden Window Argument Over SMB - Likely Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET INFO SMB Remote AT Scheduled Job Pipe Creation |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows nbtstat -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Volatile Cedar Win32.Explosive CnC Beacon 3 |
rev 1 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Getblocktemplate Protocol Server Coinbasetxn Begin Mining Response |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt |
rev 21 |
2019-07-26 |
| suricata |
GPL IMAP unsubscribe literal overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP find overflow attempt |
rev 8 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M3 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE SuperCMD CnC Beacon |
rev 2 |
2019-07-26 |