| snort |
ET TROJAN Suspected PULSECHECK Webshell Access Inbound |
rev 3 |
2021-05-05 |
| snort |
ET TROJAN [FIREEYE] PULSECHECK Webshell Access Outbound |
rev 2 |
2021-05-05 |
| snort |
ET MALWARE [FIREEYE] SLIGHTPULSE Webshell Activity M2 |
rev 2 |
2021-05-05 |
| snort |
ET TROJAN Suspected HARDPULSE Request |
rev 2 |
2021-05-05 |
| snort |
ET TROJAN [FIREEYE] SLIGHTPULSE Webshell Activity M3 |
rev 2 |
2021-05-05 |
| suricata |
ET MALWARE Suspected HARDPULSE Request |
rev 2 |
2021-05-05 |
| suricata |
ET MALWARE Suspected PULSECHECK Webshell Access Inbound |
rev 3 |
2021-05-05 |
| snort |
ET TROJAN ELF/DarkNexus User-Agent |
rev 2 |
2021-05-03 |
| snort |
ET MALWARE Buer - DomainInfo User-Agent |
rev 2 |
2021-04-30 |
| suricata |
ET MALWARE Buer - DomainInfo User-Agent |
rev 1 |
2021-04-30 |
| snort |
ET TROJAN Malicious lnk Activity |
rev 1 |
2021-04-29 |
| snort |
ET CURRENT_EVENTS PurpleFox EK Landing Page Domain in SNI |
rev 1 |
2021-04-29 |
| suricata |
ET MALWARE Malicious lnk Activity |
rev 1 |
2021-04-29 |
| suricata |
ET MALWARE Win32/XRat.AT Variant CnC Activity |
rev 2 |
2021-04-29 |
| snort |
ET TROJAN Win32/TrojanDropper.Agent.RLO CnC Acitivty |
rev 1 |
2021-04-28 |
| snort |
ET TROJAN SupremeLogger CnC Checkin |
rev 1 |
2021-04-28 |
| suricata |
ET MALWARE Win32/TrojanDropper.Agent.RLO CnC Acitivty |
rev 1 |
2021-04-28 |
| snort |
ET TROJAN Win32.SpyEyes.bllw CnC Exfil |
rev 1 |
2021-04-27 |
| snort |
ET TROJAN SharpNoPSExec EXE Lateral Movement Tool Downloaded |
rev 2 |
2021-04-27 |
| snort |
ET TROJAN Win32/Koubbeh Sending Windows System Info |
rev 2 |
2021-04-27 |
| snort |
ET TROJAN Lunar Builder Exfil Attempt |
rev 1 |
2021-04-27 |
| snort |
ET TELNET Lunar Builder CnC Activity |
rev 1 |
2021-04-27 |
| suricata |
ET MALWARE Win32/Koubbeh Sending Windows System Info |
rev 1 |
2021-04-27 |
| suricata |
ET MALWARE Lunar Builder CnC Activity |
rev 1 |
2021-04-27 |
| suricata |
ET MALWARE Lunar Builder Exfil Attempt |
rev 1 |
2021-04-27 |
| snort |
ET TROJAN PHP Skimmer Exfil Attempt |
rev 2 |
2021-04-26 |
| snort |
ET TROJAN Win32/CollectorStealer CnC Exfil M2 |
rev 2 |
2021-04-23 |
| snort |
ET MOBILE_MALWARE Phenakite Audio Upload CnC |
rev 2 |
2021-04-23 |
| snort |
ET TROJAN MICROPSIA Screenshot Upload M2 |
rev 2 |
2021-04-23 |
| snort |
ET MOBILE_MALWARE Phenakite Image Upload CnC activity |
rev 2 |
2021-04-23 |
| snort |
ET TROJAN MICROPSIA Screenshot Upload M3 |
rev 2 |
2021-04-23 |
| snort |
ET MOBILE_MALWARE Possible Phenakite User-Agent |
rev 1 |
2021-04-23 |
| snort |
ET TROJAN MICROPSIA CnC Checkin M2 |
rev 1 |
2021-04-23 |
| snort |
ET TROJAN MSIL/MosaiqueRAT CnC Checkin |
rev 1 |
2021-04-23 |
| suricata |
ET MALWARE MSIL/MosaiqueRAT CnC Checkin |
rev 1 |
2021-04-23 |
| snort |
ET TROJAN Lunar Builder Exfil via Discord M1 |
rev 2 |
2021-04-22 |
| suricata |
ET MALWARE Lunar Builder Exfil via Discord M1 |
rev 1 |
2021-04-22 |
| snort |
ET INFO Observed DNS Query to DDNS Domain .myfirewall .org |
rev 1 |
2021-04-21 |
| snort |
ET TROJAN 44 Caliber Stealer Data Exfil via Discord |
rev 2 |
2021-04-21 |
| snort |
ET TROJAN Unk.PSAttack Activity |
rev 1 |
2021-04-21 |