| elastic |
Network Connection via Mshta |
deprecated |
2020-10-30 |
| snort |
ET CURRENT_EVENTS Multibank Captcha Phishing Landing |
rev 3 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| snort |
ET TROJAN ComRAT CnC Domain in DNS Lookup |
rev 2 |
2020-10-29 |
| suricata |
ET EXPLOIT_KIT Evil Redirect Leading to EK Jul 28 2016 |
rev 4 |
2020-10-29 |
| suricata |
ET PHISHING Multibank Captcha Phishing Landing |
rev 3 |
2020-10-29 |
| snort |
ET TROJAN Win32/Ficker Stealer Activity M3 |
rev 1 |
2020-10-28 |
| snort |
ET TROJAN Win32/Ficker Stealer Activity M2 |
rev 1 |
2020-10-28 |
| suricata |
ET EXPLOIT_KIT TDS Sutra - redirect received |
rev 7 |
2020-10-28 |
| suricata |
ET PHISHING Successful Generic Credit Card Information Phish 2019-08-02 |
rev 3 |
2020-10-28 |
| suricata |
ET MALWARE Possible Winnti DNS Lookup |
rev 2 |
2020-10-28 |
| suricata |
ET MALWARE Backdoor.Win32.RShot HTTP Checkin |
rev 7 |
2020-10-28 |
| suricata |
ET WEB_SERVER WebShell - GODSpy - MySQL |
rev 4 |
2020-10-28 |
| suricata |
ET MALWARE Generic Bot Checkin |
rev 7 |
2020-10-28 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - POST 1-letter.php |
rev 6 |
2020-10-28 |
| suricata |
ET MALWARE Win32/Ficker Stealer Activity M2 |
rev 1 |
2020-10-28 |
| suricata |
ET EXPLOIT_KIT TDS Sutra - cookie set |
rev 5 |
2020-10-28 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 2 |
2020-10-28 |
| suricata |
ET MALWARE Win32/Ficker Stealer Activity M3 |
rev 1 |
2020-10-28 |
| snort |
ET INFO Improperly Spaced Accept Header in User-Agent |
rev 2 |
2020-10-27 |
| snort |
ET TROJAN DTLoader Encoded Binary - Server Response |
rev 2 |
2020-10-27 |
| snort |
ET TROJAN DTLoader Binary Request |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE DTLoader Encoded Binary - Server Response |
rev 1 |
2020-10-27 |
| suricata |
ET HUNTING Telegram API Certificate Observed |
rev 2 |
2020-10-27 |
| suricata |
ET INFO Website Hosting Service Observed in DNS Query |
rev 3 |
2020-10-27 |
| suricata |
ET MALWARE ELF/Rekoobe CnC Observed in DNS Query |
rev 3 |
2020-10-27 |
| suricata |
ET WEB_CLIENT Observed DNS Query to Malicious Cookie Monster Roulette JS Cookie Stealer Exfil Domain |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE DonotGroup Staging Domain Observed in DNS Query |
rev 3 |
2020-10-27 |
| suricata |
ET HUNTING Improperly Spaced Accept Header in User-Agent |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE Gamaredon CnC Observed in DNS Query |
rev 2 |
2020-10-27 |
| suricata |
ET PHISHING Successful Generic Credit Card Information Phish 2020-01-27 |
rev 2 |
2020-10-27 |
| suricata |
ET MALWARE Group 21 CnC Domain Observed in DNS Query |
rev 3 |
2020-10-27 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 2 |
2020-10-27 |