| snort |
ET INFO HTTP Request for FixMe.IT / Techinline Remote Access Tool |
rev 1 |
2023-12-29 |
| snort |
ET TROJAN Snake Keylogger HTTP Exfil |
rev 1 |
2023-12-29 |
| suricata |
ET MALWARE Snake Keylogger HTTP Exfil |
rev 1 |
2023-12-29 |
| suricata |
ET INFO HTTP Request for FixMe.IT / Techinline Remote Access Tool |
rev 1 |
2023-12-29 |
| suricata |
ET MALWARE Rezlt RDP Grabber - This is Not RDP |
rev 1 |
2023-12-29 |
| suricata |
ET MALWARE [ANY.RUN] zgRAT / PureLogs CnC Connection M2 |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] zgRAT / PureLogs CnC Data Exfiltration Attempt M1 |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] zgRAT / PureLogs CnC Data Exfiltration Attempt M1 |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] zgRAT / PureLogs CnC Connection M2 |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Win32/Lumma Stealer Exfiltration |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Win32/Gh0stRat Keep-Alive |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Win32/Gh0stRat Activity |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] LUMAR Stealer Exfiltration M1 |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN SimpleHelp Remote Access Software Activity |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Win32/Lumma Stealer Check-In |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] Win32/Lumma Stealer Configuration Request Attempt |
rev 1 |
2023-12-28 |
| snort |
ET TROJAN [ANY.RUN] LgoogLoader Retrieving Config File |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] Win32/Gh0stRat Activity |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] Win32/Gh0stRat Keep-Alive |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] LUMAR Stealer Exfiltration M1 |
rev 1 |
2023-12-28 |
| suricata |
ET MALWARE [ANY.RUN] Win32/Lumma Stealer Check-In |
rev 1 |
2023-12-28 |
| sigma |
Suspicious Redirection to Local Admin Share |
test |
2023-12-28 |
| snort |
ET TROJAN Turla APT Kazuar Backdoor Related Activity |
rev 1 |
2023-12-27 |
| snort |
ET SCADA Rockwell RNA Message Large Header Length - 8Kb |
rev 5 |
2023-12-27 |
| snort |
ET TROJAN Suspected Turla APT Kazuar Backdoor Related Activity |
rev 1 |
2023-12-27 |
| snort |
ET TROJAN Generic Stealer Checkin |
rev 1 |
2023-12-27 |
| suricata |
ET SCADA Rockwell RNA Message Large Header Length - 8Kb |
rev 5 |
2023-12-27 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M1 |
rev 4 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing to Awareness Landing Page |
rev 1 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Admin Panel Accessed on External Server |
rev 3 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M2 |
rev 1 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Awareness Landing Page M1 |
rev 5 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Admin Panel Accessed on Internal Server |
rev 3 |
2023-12-26 |
| snort |
ET TROJAN Win32/Suspected Reverse Shell Connection |
rev 2 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Landing Page M3 |
rev 1 |
2023-12-26 |
| snort |
ET CURRENT_EVENTS Lucy Security - Phishing Framework Plugin List POST |
rev 1 |
2023-12-26 |
| snort |
ET INFO Lucy Security - Awareness Landing Page M2 |
rev 1 |
2023-12-26 |