| snort |
ET WEB_SERVER WebShell - Romanian Webshell |
rev 4 |
2013-03-14 |
| snort |
ET WEB_SERVER WebShell - MySQL Interface - Client Cookie mysql_web_admin*= |
rev 1 |
2013-03-14 |
| snort |
ET DNS APT_NGO_wuaclt C2 Domain micorsofts.net |
rev 3 |
2013-03-14 |
| snort |
ET WEB_SERVER WebShell - MySQL Interface - Server Set Cookie mysql_web_admin*= |
rev 1 |
2013-03-14 |
| snort |
ET TROJAN APT_NGO_wuaclt |
rev 1 |
2013-03-14 |
| snort |
ET WEB_SERVER WebShell - MySQL Interface - Database List |
rev 1 |
2013-03-14 |
| snort |
ET DNS APT_NGO_wuaclt C2 Domain hotmal1.com |
rev 1 |
2013-03-14 |
| snort |
ET TROJAN W32/Trustezeb.C CnC Beacon |
rev 1 |
2013-03-08 |
| snort |
ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download |
rev 2 |
2013-03-07 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS JAR Download by Java UA with non JAR EXT matches various EKs |
rev 2 |
2013-03-07 |
| snort |
ET TROJAN Win32/Fareit Checkin 2 |
rev 3 |
2013-03-07 |
| snort |
ET TROJAN Stabuniq Checkin |
rev 2 |
2013-03-07 |
| snort |
ET TROJAN W32/TrojanSpy.MSIL Set Done Day CnC Beacon |
rev 1 |
2013-03-05 |
| snort |
ET TROJAN W32/TrojanSpy.MSIL Fetch Header CnC Beacon |
rev 1 |
2013-03-05 |
| snort |
ET CURRENT_EVENTS Unknown Exploit Kit Exploit Request |
rev 1 |
2013-03-05 |
| snort |
ET TROJAN W32/TrojanSpy.MSIL Get New MAC CnC Beacon |
rev 1 |
2013-03-05 |
| snort |
ET TROJAN W32/TrojanSpy.MSIL Fetch Time CnC Beacon |
rev 1 |
2013-03-05 |
| snort |
ET TROJAN Gimemo Activity |
rev 2 |
2013-03-04 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure |
rev 1 |
2013-03-04 |
| snort |
ET MOBILE_MALWARE Android/Smsilence.A Successful Install Report |
rev 1 |
2013-03-01 |
| snort |
ET MOBILE_MALWARE Android/Smsilence.A Sending SMS Messages CnC Beacon |
rev 2 |
2013-03-01 |
| snort |
ET TROJAN W32/Caphaw CnC Configuration File Request |
rev 1 |
2013-02-27 |
| snort |
ET MOBILE_MALWARE Android/FakeTimer.A Reporting to CnC |
rev 2 |
2013-02-27 |
| snort |
ET WEB_SERVER WebShell - zecmd - Form |
rev 1 |
2013-02-26 |
| snort |
ET INFO Serialized Data request |
rev 1 |
2013-02-26 |
| snort |
ET TROJAN Gimemo Ransomware Checkin |
rev 3 |
2013-02-25 |
| snort |
ET TROJAN Win32/Small.XR Checkin 2 WEBC2-CSON APT1 Related |
rev 4 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-KT3 Intial Connection Beacon APT1 Related |
rev 2 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-DIV UA |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-UGX Embedded CnC Response APT1 |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-CLOVER Checkin APT1 Related |
rev 1 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-KT3 Intial Connection Beacon Server Response APT1 Related |
rev 3 |
2013-02-22 |
| snort |
ET TROJAN WEBC2-TABLE Checkin 3 - APT1 Related |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN Likseput.B Checkin |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN Backdoor.Win32/Likseput.A Checkin Windows Vista/7/8 |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-ADSPACE Server Response |
rev 1 |
2013-02-20 |
| snort |
ET TROJAN Win32/Namsoth.A Checkin/NEWSREELS APT1 Related |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN SEASALT Client Checkin |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN SEASALT Server Response |
rev 2 |
2013-02-20 |
| snort |
ET TROJAN WEBC2-TABLE Checkin Response - Embedded CnC APT1 Related |
rev 1 |
2013-02-20 |