| sigma |
PsExec Service Child Process Execution as LOCAL SYSTEM |
test |
2023-02-28 |
| sigma |
Potential File Overwrite Via Sysinternals SDelete |
test |
2023-02-28 |
| sigma |
Suspicious Parent Double Extension File Execution |
test |
2023-02-28 |
| snort |
ET INFO User-Agent with Non Standard Characters |
rev 1 |
2023-02-27 |
| snort |
ET TROJAN Win32/VB.AAF Checkin |
rev 1 |
2023-02-27 |
| snort |
ET TROJAN Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M1 |
rev 1 |
2023-02-27 |
| snort |
ET TROJAN Win32/Grandoreiro TCP CnC Activity |
rev 1 |
2023-02-27 |
| snort |
ET CURRENT_EVENTS Successful Generic Credential Phish 2023-02-27 |
rev 1 |
2023-02-27 |
| snort |
ET CURRENT_EVENTS Generic Credential Phish Landing Page 2023-02-27 |
rev 1 |
2023-02-27 |
| snort |
ET TROJAN Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M3 |
rev 1 |
2023-02-27 |
| snort |
ET TROJAN Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M2 |
rev 1 |
2023-02-27 |
| snort |
ET CURRENT_EVENTS Successful Orange.fr Credential Phish 2023-02-27 |
rev 1 |
2023-02-27 |
| suricata |
ET MALWARE Win32/Grandoreiro TCP CnC Activity |
rev 1 |
2023-02-27 |
| suricata |
ET PHISHING Generic Credential Phish Landing Page 2023-02-27 |
rev 1 |
2023-02-27 |
| suricata |
ET PHISHING Successful Generic Credential Phish 2023-02-27 |
rev 1 |
2023-02-27 |
| suricata |
ET PHISHING Successful Orange.fr Credential Phish 2023-02-27 |
rev 1 |
2023-02-27 |
| suricata |
ET MALWARE Win32/VB.AAF Checkin |
rev 1 |
2023-02-27 |
| suricata |
ET HUNTING User-Agent with Non Standard Characters |
rev 1 |
2023-02-27 |
| suricata |
ET MALWARE Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M2 |
rev 1 |
2023-02-27 |
| suricata |
ET MALWARE Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M1 |
rev 1 |
2023-02-27 |
| suricata |
ET MALWARE Win32/S1deload Stealer CnC Checkin - Coinminer Payload Retrieval M3 |
rev 1 |
2023-02-27 |
| sigma |
Suspicious File Created Via OneNote Application |
test |
2023-02-27 |
| snort |
ET CURRENT_EVENTS HiYu - Request for User Specific Landing Page |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS Coinbase Credential Phish 2023-02-24 |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS VigLink Redirect To HiYu Phishing Landing Page |
rev 2 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS HiYu - Victim Enrichment Response M1 |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS HiYu - Victim Enrichment Response M3 |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS HiYu - Victim Enrichment Response M2 |
rev 1 |
2023-02-24 |
| snort |
ET TROJAN PS1Loader Encoded Profiling POST |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| snort |
ET CURRENT_EVENTS TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| snort |
ET TROJAN Trojan/Win32.Agent Variant Checkin |
rev 1 |
2023-02-24 |
| suricata |
ET PHISHING HiYu - Victim Enrichment Response M1 |
rev 1 |
2023-02-24 |
| suricata |
ET PHISHING TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| suricata |
ET PHISHING TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| suricata |
ET PHISHING TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |
| suricata |
ET PHISHING TA453 Phishing Domain in DNS Lookup |
rev 1 |
2023-02-24 |