| snort |
ET TROJAN APT Hellsing Proxy Checker Checkin |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN Generic Dropper Installing PUP 1 |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN FrauDrop UA single |
rev 1 |
2015-05-15 |
| snort |
ET TROJAN FrauDrop UA LETITGO |
rev 1 |
2015-05-15 |
| snort |
ET WEB_CLIENT SUSPICIOUS Possible Office Doc with Embedded VBA Project |
rev 2 |
2015-05-12 |
| snort |
ET WEB_CLIENT SUSPICIOUS Possible Office Doc with Embedded VBA Project |
rev 2 |
2015-05-12 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M1 |
rev 1 |
2015-05-09 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M3 |
rev 1 |
2015-05-09 |
| snort |
ET TROJAN Possible CryptoPHP Leaking Credentials May 8 2015 M2 |
rev 1 |
2015-05-09 |
| snort |
ET INFO SUSPICIOUS Dotted Quad Host MZ Response |
rev 1 |
2015-05-08 |
| snort |
ET WEB_CLIENT Possible CVE-2013-1710/CVE-2012-3993 Firefox Exploit Attempt |
rev 1 |
2015-05-08 |
| snort |
ET CURRENT_EVENTS Likely Trojan Multi-part Macro Download M1 |
rev 3 |
2015-05-08 |
| snort |
ET VOIP Possible Misuse Call from Cisco ooh323 |
rev 1 |
2015-05-07 |
| snort |
ET WEB_SPECIFIC_APPS WP Jetpack/Twentyfifteen Possible XSS Request |
rev 1 |
2015-05-07 |
| snort |
ET SCAN Xenu Link Sleuth Scanner Outbound |
rev 1 |
2015-05-05 |
| snort |
ET TROJAN njRAT Variant Outbound CnC Beacon |
rev 1 |
2015-05-05 |
| snort |
ET TROJAN Linux.Mumblehard Spam Command CnC |
rev 1 |
2015-05-04 |
| snort |
ET CURRENT_EVENTS Fiesta EK SilverLight Exploit Apr 23 2015 |
rev 2 |
2015-05-04 |
| snort |
ET TROJAN Linux.Trojan.IptabLex Variant Checkin |
rev 1 |
2015-05-04 |
| snort |
ET CURRENT_EVENTS Unknown EK Secondary Landing Page May 01 2015 M1 |
rev 1 |
2015-05-02 |
| snort |
ET CURRENT_EVENTS Unknown EK Secondary Landing Page May 01 2015 M2 |
rev 1 |
2015-05-02 |
| snort |
ET TROJAN BePush/Kilim payload retrieval |
rev 3 |
2015-04-30 |
| snort |
ET SCAN Nmap NSE Heartbleed Response |
rev 1 |
2015-04-28 |
| snort |
ET SCAN Nmap NSE Heartbleed Request |
rev 1 |
2015-04-28 |
| snort |
ET EXPLOIT WNR2000v4 HTTP POST RCE Attempt Via Timestamp Discovery |
rev 1 |
2015-04-28 |
| snort |
ET TROJAN Downeks Checkin |
rev 1 |
2015-04-28 |
| snort |
ET WEB_SPECIFIC_APPS Vulnerable Magento Adminhtml Access |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 2 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 2 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 1 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains wininet.dll Call - Potentially Dridex MalDoc 1 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 3 |
rev 1 |
2015-04-24 |
| snort |
ET CURRENT_EVENTS Sundown EK Secondary Landing Apr 20 2015 |
rev 1 |
2015-04-24 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 8 |
rev 3 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 4 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 5 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN Windows nbtstat -n Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 6 |
rev 1 |
2015-04-22 |
| snort |
ET TROJAN CozyDuke APT Possible SSL Cert 2 |
rev 1 |
2015-04-22 |