| snort |
ET TROJAN ThirdEye Stealer System Information Gathering Attempt |
rev 1 |
2023-06-29 |
| snort |
ET TROJAN ThirdEye Stealer CnC Checkin |
rev 1 |
2023-06-29 |
| snort |
ET INFO DERO Crypto Mining Related Domain in DNS Lookup |
rev 1 |
2023-06-29 |
| suricata |
ET MALWARE [ANY.RUN] Meduza Stealer Exfiltration M1 |
rev 1 |
2023-06-29 |
| suricata |
ET INFO DERO Crypto Mining Related Domain in DNS Lookup |
rev 1 |
2023-06-29 |
| suricata |
ET MALWARE ThirdEye Stealer System Information Gathering Attempt |
rev 1 |
2023-06-29 |
| suricata |
ET MALWARE ThirdEye Stealer CnC Checkin |
rev 1 |
2023-06-29 |
| snort |
ET TROJAN Mystic Stealer C2 Client Hello Packet |
rev 2 |
2023-06-28 |
| snort |
ET TROJAN [ANY.RUN] StatusRecorder Stealer Sending System Information |
rev 1 |
2023-06-27 |
| suricata |
ET MALWARE [ANY.RUN] StatusRecorder Stealer Sending System Information |
rev 1 |
2023-06-27 |
| snort |
ET TROJAN [ANY.RUN] Gh0stBins RDP Remote Connection |
rev 1 |
2023-06-26 |
| snort |
ET INFO Monero Mining Pool DNS Lookup |
rev 3 |
2023-06-26 |
| snort |
ET TROJAN [ANY.RUN] Gh0stBins Checkin |
rev 1 |
2023-06-26 |
| snort |
ET TROJAN [ANY.RUN] Possible Gh0stRat Checkin |
rev 1 |
2023-06-26 |
| snort |
ET INFO DNS request for Monero mining pool |
rev 3 |
2023-06-26 |
| snort |
ET TROJAN [ANY.RUN] Gh0stBins Kernel Download Request |
rev 1 |
2023-06-26 |
| suricata |
ET MALWARE [ANY.RUN] Gh0stBins Kernel Download Request |
rev 1 |
2023-06-26 |
| suricata |
ET EXPLOIT_KIT Balada Injector Script |
rev 2 |
2023-06-26 |
| suricata |
ET INFO Monero Mining Pool DNS Lookup |
rev 4 |
2023-06-26 |
| suricata |
ET MALWARE [ANY.RUN] Gh0stBins RDP Remote Connection |
rev 1 |
2023-06-26 |
| snort |
ET INFO External Host Sending Docker Swarm Join Command |
rev 3 |
2023-06-23 |
| snort |
ET CURRENT_EVENTS Suspicious IPFS Domain Rewritten with Google Translate |
rev 1 |
2023-06-23 |
| snort |
ET CURRENT_EVENTS Successful BDO Bank Credential Phish 2023-06-23 |
rev 1 |
2023-06-23 |
| snort |
ET INFO External Host Creating Docker Image |
rev 3 |
2023-06-23 |
| snort |
ET MALWARE RemoteSpy.com Upload Detected |
rev 9 |
2023-06-23 |
| snort |
ET TROJAN [ANY.RUN] RCRU64 Ransomware Variant CnC Activity |
rev 1 |
2023-06-23 |
| suricata |
ET PHISHING Suspicious IPFS Domain Rewritten with Google Translate |
rev 1 |
2023-06-23 |
| suricata |
ET MALWARE RemoteSpy.com Upload Detected |
rev 11 |
2023-06-23 |
| suricata |
ET PHISHING Successful BDO Bank Credential Phish 2023-06-23 |
rev 1 |
2023-06-23 |
| sigma |
PktMon.EXE Execution |
test |
2023-06-23 |
| sigma |
Potential Adplus.EXE Abuse |
test |
2023-06-23 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |
| snort |
ET INFO Possible Node.js REPL Shell Banner - Reverse Shell |
rev 1 |
2023-06-22 |
| snort |
ET MOBILE_MALWARE Android Spy PREDATOR CnC Domain in DNS Lookup |
rev 1 |
2023-06-22 |