| snort |
ET TROJAN W32/Upatre.Downloader Encoded Binary Download Request |
rev 1 |
2015-01-23 |
| snort |
ET TROJAN W32/AGENT.NXNX Checkin 2 |
rev 2 |
2015-01-23 |
| snort |
ET TROJAN W32/Adrom.Backdoor CnC Beacon |
rev 1 |
2015-01-23 |
| snort |
ET TROJAN Inception APT malware |
rev 1 |
2015-01-22 |
| snort |
ET TROJAN Backdoor.TurlaCarbon.A C2 HTTP Request |
rev 1 |
2015-01-22 |
| snort |
ET TROJAN CryptoWall CryptoWall 3.0 Check-in |
rev 2 |
2015-01-21 |
| snort |
ET TROJAN Win32.ChinaZ.DDoSClient Checkin |
rev 2 |
2015-01-20 |
| snort |
ET TROJAN ISRStealer Checkin |
rev 7 |
2015-01-19 |
| snort |
ET TROJAN Filename server.exe Download - Common Hostile Filename |
rev 1 |
2015-01-16 |
| snort |
ET TROJAN Filename hkcmd.exe Download - Common Hostile Filename |
rev 2 |
2015-01-16 |
| snort |
ET TROJAN Filename svchost.exe Download - Common Hostile Filename |
rev 4 |
2015-01-16 |
| snort |
ET TROJAN Filename explorer.exe Download - Common Hostile Filename |
rev 5 |
2015-01-16 |
| snort |
ET TROJAN Linux/ChinaZ DDoS Bot Checkin |
rev 1 |
2015-01-15 |
| snort |
ET TROJAN Linux/DDoS.M Admin console status |
rev 1 |
2015-01-13 |
| snort |
ET TROJAN Hong Kong SWC Attack PcClient CnC Beacon |
rev 1 |
2015-01-13 |
| snort |
ET TROJAN Possible Office Doc with Embedded VBA containing Reverse Meterpreter Shell |
rev 3 |
2015-01-13 |
| snort |
ET TROJAN Known Sinkhole Response Header CERT.PL |
rev 1 |
2015-01-13 |
| snort |
ET TROJAN Vawtrak/NeverQuest Posting Data |
rev 1 |
2015-01-09 |
| snort |
ET TROJAN Mini/Cosmic Duke variant FTP upload |
rev 1 |
2015-01-08 |
| snort |
ET TROJAN Win32/Emotet.C Checkin |
rev 6 |
2015-01-08 |
| snort |
ET TROJAN Win32/Recslurp.D C2 Response |
rev 2 |
2015-01-08 |
| snort |
ET WEB_SERVER PHP System Command in HTTP POST |
rev 3 |
2015-01-08 |
| snort |
ET TROJAN TinyLoader.A Checkin x86 |
rev 1 |
2015-01-07 |
| snort |
ET TROJAN Steam Stealer |
rev 2 |
2015-01-07 |
| snort |
ET TROJAN TinyLoader.A Checkin x64 |
rev 1 |
2015-01-07 |
| snort |
ET EXPLOIT Possible Misfortune Cookie RomPager Server banner |
rev 1 |
2015-01-06 |
| snort |
ET WEB_SERVER ATTACKER WebShell - 1337w0rm - cPanel Cracker |
rev 1 |
2015-01-06 |
| snort |
ET WEB_SERVER ATTACKER WebShell - 1337w0rm - Landing Page |
rev 1 |
2015-01-06 |
| snort |
ET ATTACK_RESPONSE Microsoft CScript Banner Outbound |
rev 1 |
2015-01-05 |
| snort |
ET ATTACK_RESPONSE Microsoft Netsh Firewall Disable Output Outbound |
rev 1 |
2015-01-05 |
| snort |
ET TROJAN Trojan.Generic.5325921 Checkin |
rev 4 |
2015-01-05 |
| snort |
ET WEB_SPECIFIC_APPS ManageEngine Desktop Central Administrator Account Creation |
rev 1 |
2015-01-05 |
| snort |
ET ATTACK_RESPONSE Microsoft WMIC Prompt Outbound |
rev 1 |
2015-01-05 |
| snort |
ET ATTACK_RESPONSE SysInternals sc.exe Output Outbound |
rev 1 |
2015-01-05 |
| snort |
ET TROJAN Win64/Havex Checkin |
rev 1 |
2014-12-30 |
| snort |
ET TROJAN Andromeda Checkin Dec 29 2014 |
rev 1 |
2014-12-29 |
| snort |
ET TROJAN Kronos Checkin M2 |
rev 1 |
2014-12-29 |
| snort |
ET TROJAN Trojan.Nurjax Downloading PE |
rev 1 |
2014-12-23 |
| snort |
ET TROJAN US-CERT TA14-353A Listening Implant 7 |
rev 1 |
2014-12-23 |
| snort |
ET TROJAN Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive |
rev 2 |
2014-12-23 |