| suricata |
ET MALWARE VBS/Dojos Downloader Activity M2 |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE Kimsuky CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE FatDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE Diezen/Sakabota CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE FatDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET PHISHING Suntrust Captcha Phishing Landing |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE FatDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE Lazarus CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE APT-C-27 CnC Domain Observed in DNS Query |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE MiniDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE FatDuke Domain Observed |
rev 2 |
2020-10-20 |
| suricata |
ET MALWARE PolyglotDuke Domain Observed |
rev 2 |
2020-10-20 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-19 |
| snort |
ET CURRENT_EVENTS Generic Mailer Accessed on External Compromised Server |
rev 2 |
2020-10-19 |
| snort |
ET TROJAN MSIL/GravityRAT CnC Checkin M2 |
rev 2 |
2020-10-19 |
| snort |
ET CURRENT_EVENTS Generic Mailer Accessed on Internal Compromised Server |
rev 2 |
2020-10-19 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-19 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-19 |
| suricata |
ET INFO POSSIBLE Web Crawl using Curl |
rev 11 |
2020-10-19 |
| suricata |
ET MALWARE JEUSD CnC Domain Observed in DNS Query |
rev 2 |
2020-10-19 |
| suricata |
ET MALWARE NSO Group Pegasus CnC Domain Observed in DNS Query |
rev 2 |
2020-10-19 |
| suricata |
ET MALWARE APT 41 CnC Domain Observed in DNS Query |
rev 3 |
2020-10-19 |
| suricata |
ET MALWARE NSO Group Pegasus CnC Domain Observed in DNS Query |
rev 2 |
2020-10-19 |
| suricata |
ET P2P Ares traffic |
rev 11 |
2020-10-19 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Compromised Server |
rev 2 |
2020-10-19 |
| suricata |
ET MALWARE APT 41 CnC Domain Observed in DNS Query |
rev 3 |
2020-10-19 |