| snort |
ET TROJAN TransparentTribe Related CnC Activity |
rev 1 |
2021-09-16 |
| snort |
ET INFO DNS Lookup for 8+ hexadecimal only duckdns domain |
rev 2 |
2021-09-16 |
| snort |
ET TROJAN Win32/Bisonal Backdoor CnC Domain in DNS Lookup |
rev 1 |
2021-09-16 |
| snort |
ET INFO Telegram API Domain in DNS Lookup |
rev 2 |
2021-09-16 |
| snort |
ET TROJAN Win32.Raccoon Stealer Data Exfil Attempt |
rev 2 |
2021-09-16 |
| suricata |
ET MALWARE Fake Software Download Redirect Leading to Malware M3 |
rev 1 |
2021-09-16 |
| suricata |
ET MALWARE TransparentTribe Related CnC Activity |
rev 1 |
2021-09-16 |
| suricata |
ET HUNTING DNS Lookup for 8+ hexadecimal only duckdns domain |
rev 1 |
2021-09-16 |
| snort |
ET MALWARE Fake Software Download Redirect Leading to Malware M1 |
rev 1 |
2021-09-15 |
| snort |
ET MALWARE Fake Software Download Redirect Leading to Malware M2 |
rev 2 |
2021-09-15 |
| snort |
ET INFO Possible Microsoft OMI Agent Default TLS Certificate Observed |
rev 2 |
2021-09-15 |
| snort |
ET INFO Inbound Powershell Creating .lnk File |
rev 1 |
2021-09-15 |
| snort |
ET INFO Inbound Powershell Creating .hta File |
rev 1 |
2021-09-15 |
| suricata |
ET HUNTING Inbound Powershell Creating .hta File |
rev 1 |
2021-09-15 |
| suricata |
ET INFO Possible Microsoft OMI Agent Default TLS Certificate Observed |
rev 2 |
2021-09-15 |
| suricata |
ET HUNTING Inbound Powershell Creating .lnk File |
rev 1 |
2021-09-15 |
| snort |
ET TROJAN Win32/Delf.OKR Variant CnC M1 |
rev 2 |
2021-09-14 |
| snort |
ET TROJAN Win32/NitroStealer/exoStub CnC Exfil |
rev 3 |
2021-09-14 |
| snort |
ET TROJAN Win32/Delf.OKR Variant CnC M2 |
rev 1 |
2021-09-14 |
| snort |
ET MALWARE Win32/Eyoorun.D Variant Checkin |
rev 1 |
2021-09-14 |
| suricata |
ET ADWARE_PUP Win32/Eyoorun.D Variant Checkin |
rev 1 |
2021-09-14 |
| suricata |
ET MALWARE Win32/Delf.OKR Variant CnC M1 |
rev 1 |
2021-09-14 |
| suricata |
ET MALWARE Win32/Delf.OKR Variant CnC M2 |
rev 1 |
2021-09-14 |
| sigma |
System Information Discovery |
stable |
2021-09-14 |
| snort |
ET TROJAN Win32/GenKryptik.FKJZ CnC Exfil |
rev 1 |
2021-09-13 |
| snort |
ET TROJAN MSIL/Black Hat Worm Checkin |
rev 2 |
2021-09-13 |
| snort |
ET EXPLOIT Possible ImageMagick Malformed SVG Upload Leading to RCE |
rev 1 |
2021-09-13 |
| snort |
ET TROJAN Bladabindi/njrat CnC Checkin |
rev 1 |
2021-09-13 |
| suricata |
ET MALWARE MSIL/Black Hat Worm Checkin |
rev 3 |
2021-09-13 |
| suricata |
ET MALWARE Bladabindi/njrat CnC Checkin |
rev 1 |
2021-09-13 |
| suricata |
ET MALWARE Win32/GenKryptik.FKJZ CnC Exfil |
rev 1 |
2021-09-13 |
| snort |
ET TROJAN MSIL/Small.FU Variant CnC Activity M3 |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN MirrorBlast Checkin |
rev 1 |
2021-09-10 |
| snort |
ET TROJAN Observed ELF/HabitsRAT CnC Domain in TLS SNI |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN Observed ELF/HabitsRAT CnC Domain in TLS SNI |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN MSIL/Small.FU Variant CnC Activity M2 |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN MSIL/Small.FU Variant CnC Activity M1 |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN Observed ELF/HabitsRAT CnC Domain in TLS SNI |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN Observed ELF/HabitsRAT CnC Domain in TLS SNI |
rev 2 |
2021-09-10 |
| snort |
ET TROJAN Observed ELF/HabitsRAT CnC Domain in TLS SNI |
rev 2 |
2021-09-10 |