| suricata |
ET MALWARE nspps Backdoor CnC Activity |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE TeleBots VBS Backdoor CnC Beacon 2 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Knock.php Shiz or Rohimafo CnC Server Contact URL |
rev 7 |
2024-04-20 |
| suricata |
ET MALWARE Sharik/Smoke Loader Adobe Connectivity Check 3 |
rev 5 |
2024-04-20 |
| suricata |
ET WEB_SPECIFIC_APPS Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway - Default Credentials |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE APT/TransparentTribe Style Request |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Possible Kimsuky APT Connectivity Check via Document |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - getiplist.php |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Fake Variation of Mozilla 4.0 - Likely Trojan |
rev 13 |
2024-04-20 |
| suricata |
ET MALWARE W32/Witch.3FA0!tr CnC Activity |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Valak <v9 Checkin |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE WooSIP Downloader CnC CreateFolderOnServer |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Likely FakeAV/Fakeinit/FraudLoad Checkin |
rev 9 |
2024-04-20 |
| suricata |
ET INFO Nimiq Miner Initiating Mining Session with Skypool |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/win/wcx |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE W32/Bravix.Dropper CnC Beacon |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 1 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE MSIL/Lordix Stealer Exfiltrating Data |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE FRat WebSocket Request M1 |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Win32/CopperStealer CnC Activity |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/win/cab |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE SuperFish CnC Beacon 2 |
rev 7 |
2024-04-20 |
| suricata |
ET MALWARE APT Hellsing Proxy Checker Checkin |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Trojan.Nurjax Checkin |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Likely PadCrypt Locker PKG DL |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE MSIL/SamMiner CnC Checkin M1 |
rev 4 |
2024-04-20 |
| suricata |
ET HUNTING Office UA Retrieving Content on Unusually High Port |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/ms/check |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE AlphaCrypt CnC Beacon 3 |
rev 8 |
2024-04-20 |
| suricata |
ET MOBILE_MALWARE Suspected Android Youzicheng Proxy Activity |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Lyposit Ransomware Checkin 2 |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE W32/VBS.SLoad.Backdoor Initial Base64 Encoded OK Server Response |
rev 4 |
2024-04-20 |
| suricata |
ET EXPLOIT HP Enterprise VAN SDN Controller Exec Backdoor |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Wintervivern Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Ransomware Win32/WinPlock.A CnC Beacon 2 |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Kuluoz Activity |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE Likely Malicious Windows SCT Download MSXMLHTTP M3 |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE Suspected Glupteba Download |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Bot.Sezin CnC Checkin |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Operation Cobra Venom WSF Stage 2 - CnC Checkin |
rev 3 |
2024-04-20 |