| suricata |
ET MALWARE Red October/Win32.Digitalia Checkin cgi-bin/ms/check |
rev 5 |
2024-04-20 |
| suricata |
ET INFO GET Minimal HTTP Headers Flowbit Set |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE APT Hellsing Proxy Checker Checkin |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE DarkHotel Downloader CnC Beacon 1 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE MSIL/Lordix Stealer Exfiltrating Data |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE TickGroup Datper CnC Checkin M3 |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Wintervivern Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE W32/VBS.SLoad.Backdoor Initial Base64 Encoded OK Server Response |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Ransomware Locky CnC Beacon |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE AlphaCrypt CnC Beacon 3 |
rev 8 |
2024-04-20 |
| suricata |
ET HUNTING Office UA Retrieving Content on Unusually High Port |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Sharik/Smoke Loader Adobe Connectivity Check 2 |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE Possible Java/Downloader Observed in Pawn Storm CVE-2015-2590 1 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE L0rdix Stealer CnC Data Exfil |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE Ransomware Locky CnC Beacon |
rev 8 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Geodo Checkin |
rev 12 |
2024-04-20 |
| suricata |
ET MALWARE SolarBot Plugin Download MessageBox |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE SAD Ransomware CnC Activity |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE [PT MALWARE] Hacked Mikrotik C2 Request |
rev 8 |
2024-04-20 |
| suricata |
ET MALWARE Win32/Rarog Stealer CnC Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET INFO CNET TechTracker Software Manager request |
rev 5 |
2024-04-20 |
| suricata |
ET MALWARE DarkHotel Initial Beacon |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE W32/TrojanSpy.MSIL Set Done Day CnC Beacon |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Razy Variant Checkin |
rev 12 |
2024-04-20 |
| suricata |
ET MALWARE APT/TransparentTribe CnC Checkin |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE ELF/Kinsing Payload Request M2 |
rev 2 |
2024-04-20 |
| suricata |
ET HUNTING Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Ransomware Win32/WinPlock.A Successfully Installed CnC Beacon |
rev 5 |
2024-04-20 |
| suricata |
ET EXPLOIT Possible Magento Directory Traversal Attempt |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Hangover related campaign Response |
rev 6 |
2024-04-20 |
| suricata |
ET MALWARE Win32/CollectorStealer CnC Exfil M2 |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Generic -POST To file.php w/Extended ASCII Characters |
rev 11 |
2024-04-20 |
| suricata |
ET MALWARE Evrial Stealer CnC Activity |
rev 3 |
2024-04-20 |
| suricata |
ET MALWARE SolarBot Plugin Download ComputerInfo |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Evrial Stealer Retrieving CnC Information |
rev 3 |
2024-04-20 |
| suricata |
ET ADWARE_PUP SoftwareTracking Site - Install Report |
rev 2 |
2024-04-20 |
| suricata |
ET MALWARE Win32/TrojanDownloader.Delf.BXC CnC Beacon |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE W32/Citadel.Arx Variant CnC Beacon 1 |
rev 4 |
2024-04-20 |
| suricata |
ET MALWARE Infostealer.Mysayad Checkin 1 |
rev 5 |
2024-04-20 |
| suricata |
ET WEB_CLIENT Office UA FB SET |
rev 3 |
2024-04-20 |