| snort |
ET CURRENT_EVENTS Successful View Samples Phish 2016-09-09 |
rev 1 |
2016-09-16 |
| snort |
ET TROJAN Windows WMIC SYSACCOUNT get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC SHARE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows gpresult Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC PROCESS get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC STARTUP get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET WEB_CLIENT Microsoft Tech Support Scam M2 2016-09-15 |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows driverquery -v Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows quser Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC OS get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows netsh advfirewall show allprofiles Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC SERVICE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN LuminosityLink - Inbound Data Channel CnC Delimiter |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows driverquery -si Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows qwinsta Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC NIC get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error Invalid Argument |
rev 1 |
2016-09-15 |
| snort |
ET WEB_CLIENT Microsoft Tech Support Scam M1 2016-09-15 |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN LuminosityLink - Outbound Data Channel CnC Delimiter |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows WMIC NETLOGIN get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2016-09-15 |
| snort |
ET TROJAN Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2016-09-15 |
| snort |
ET CURRENT_EVENTS Successful SeniorPeopleMeet Phish M1 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET TROJAN Quant Loader Download Request |
rev 2 |
2016-09-14 |
| snort |
ET CURRENT_EVENTS Successful Dropbox Phish 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET CURRENT_EVENTS Successful SeniorPeopleMeet Phish M2 2016-09-14 |
rev 1 |
2016-09-14 |
| snort |
ET TROJAN Quant Loader Download Response |
rev 2 |
2016-09-14 |
| snort |
ET EXPLOIT Possible MySQL cnf overwrite CVE-2016-6662 Attempt |
rev 1 |
2016-09-13 |
| snort |
ET EXPLOIT Possible MySQL CVE-2016-6662 Attempt |
rev 1 |
2016-09-13 |
| snort |
ET CURRENT_EVENTS Successful Paypal Phish 2016-09-09 |
rev 1 |
2016-09-09 |
| snort |
ET TROJAN Plasmabot CnC Host Checkin |
rev 3 |
2016-09-09 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2016-09-08 |
rev 1 |
2016-09-08 |
| snort |
ET TROJAN OSX/Mokes.A CnC Heartbeat |
rev 1 |
2016-09-08 |
| snort |
ET INFO Suspicious Minimal HTTP Refresh to Googledrive.com - Possible Phishing |
rev 1 |
2016-09-08 |
| snort |
ET CURRENT_EVENTS Successful Microsoft Live Email Account Phish 2016-09-08 |
rev 1 |
2016-09-08 |
| snort |
ET CURRENT_EVENTS Fedex Javascript Phishing Landing 2016-09-08 |
rev 1 |
2016-09-08 |
| snort |
ET CURRENT_EVENTS Successful Yahoo Phish M1 2016-09-08 |
rev 1 |
2016-09-08 |
| snort |
ET TROJAN Possible Pegasus/Trident Related HTTP Beacon 4 |
rev 2 |
2016-09-06 |
| snort |
ET CURRENT_EVENTS Account Update Phishing Landing 2016-09-06 |
rev 1 |
2016-09-06 |
| snort |
ET TROJAN Linux/LuaBot CnC Beacon Response |
rev 1 |
2016-09-06 |