| snort |
ET TROJAN BrushaLoader CnC DNS Lookup |
rev 2 |
2019-02-21 |
| snort |
ET TROJAN BrushaLoader CnC DNS Lookup |
rev 2 |
2019-02-21 |
| snort |
ET TROJAN BrushaLoader CnC DNS Lookup |
rev 2 |
2019-02-21 |
| snort |
ET TROJAN TickGroup Datper CnC Checkin M2 |
rev 2 |
2019-02-20 |
| snort |
ET TROJAN TickGroup Datper CnC Checkin M1 |
rev 2 |
2019-02-20 |
| snort |
ET TROJAN TickGroup Datper CnC Checkin M3 |
rev 2 |
2019-02-20 |
| snort |
ET TROJAN Punto Loader Checkin |
rev 2 |
2019-02-19 |
| snort |
ET TROJAN Possible SharpShooter Framework Generated VBS Script |
rev 2 |
2019-02-18 |
| snort |
ET TROJAN Possible SharpShooter Framework Generated Script |
rev 2 |
2019-02-18 |
| snort |
ET TROJAN Cayosin/Mirai CnC Domain in DNS Lookup |
rev 2 |
2019-02-15 |
| snort |
ET TROJAN OSX/Shlayer CnC Activity M3 |
rev 2 |
2019-02-14 |
| snort |
ET POLICY Suspicious SSN Parameter in HTTP POST - Possible Phishing |
rev 2 |
2019-02-14 |
| snort |
ET TROJAN OSX/Shlayer CnC Activity M1 |
rev 2 |
2019-02-14 |
| snort |
ET CURRENT_EVENTS Successful Generic Personalized Phish 2019-02-13 |
rev 2 |
2019-02-13 |
| snort |
ET MOBILE_MALWARE Android/Xnore Fake Facebook Login Credentials Collected |
rev 2 |
2019-02-13 |
| snort |
ET TROJAN BrushaLoader CnC Domain in SNI |
rev 2 |
2019-02-12 |
| snort |
ET POLICY IP Logger Redirect Domain in SNI |
rev 2 |
2019-02-11 |
| snort |
ET TROJAN Observed CDC Ransomware User-Agent |
rev 2 |
2019-02-08 |
| snort |
ET POLICY External IP Address Lookup via iplocation.com |
rev 2 |
2019-02-07 |
| snort |
ET INFO HTTP POST Request to Suspicious *.icu domain |
rev 2 |
2019-02-06 |
| snort |
ET TROJAN Peppy/KeeOIL Google Connectivity Check |
rev 2 |
2019-02-05 |
| snort |
ET POLICY Skypool Coin Mining Pool DNS Lookup |
rev 2 |
2019-02-01 |
| snort |
ET POLICY Nimiq Miner Initiating Mining Session with Skypool |
rev 2 |
2019-02-01 |
| snort |
ET TROJAN CoreDn CnC Checkin M2 |
rev 2 |
2019-01-31 |
| snort |
ET TROJAN CoreDn CnC Checkin M1 |
rev 2 |
2019-01-31 |
| snort |
ET TROJAN [PTsecurity] Remcos RAT Checkin 87 |
rev 1 |
2019-01-30 |
| snort |
ET INFO Possible RTF File With Obfuscated Version Header |
rev 1 |
2019-01-30 |
| snort |
ET P2P Pando Client User-Agent Detected |
rev 8 |
2019-01-30 |
| snort |
ET CURRENT_EVENTS Successful Microsoft Account Phish 2019-01-29 |
rev 2 |
2019-01-29 |
| snort |
ET TROJAN TEMP.Periscope APT Domain in DNS Lookup |
rev 4 |
2019-01-28 |
| snort |
ET TROJAN W32.Razy Inject Domain in DNS Lookup |
rev 1 |
2019-01-25 |
| snort |
ET TROJAN W32.Razy Inject Domain in DNS Lookup |
rev 1 |
2019-01-25 |
| snort |
ET TROJAN W32.Razy Inject Domain in DNS Lookup |
rev 1 |
2019-01-25 |
| snort |
ET TROJAN W32.Razy Inject Domain in DNS Lookup |
rev 1 |
2019-01-25 |
| snort |
ET TROJAN [PTsecurity] Possible Backdoor.Win32.TeamBot / RTM C2 Response |
rev 2 |
2019-01-24 |
| snort |
ET TROJAN [PTsecurity] Remcos RAT Checkin 86 |
rev 2 |
2019-01-24 |
| snort |
ET TROJAN [PTsecurity] Remcos RAT Checkin 85 |
rev 2 |
2019-01-24 |
| snort |
ET POLICY WinRM wsman Access - Possible Lateral Movement |
rev 2 |
2019-01-23 |
| snort |
ET WEB_SERVER jQuery File Upload Attempt |
rev 2 |
2019-01-22 |
| snort |
ET TROJAN [PTsecurity] Bitter RAT C2 Response |
rev 2 |
2019-01-22 |