| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET TROJAN XDMonitor Sending Debug Messages |
rev 2 |
2020-10-02 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET EXPLOIT [401TRG] HPDM Backdoor Login |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET MALWARE XDUpload Sending File Upload Progress |
rev 1 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET MALWARE XDMonitor Checkin Activity |
rev 1 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET MALWARE XDMonitor Sending Debug Messages |
rev 1 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET MALWARE XDUpload Sending Screenshot Upload Progress |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 2 |
2020-10-02 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 2 |
2020-10-02 |
| snort |
ET CURRENT_EVENTS Possible Phishing Landing Hosted on CodeSandbox.io M5 |
rev 2 |
2020-10-01 |
| snort |
ET CURRENT_EVENTS Possible Phishing Landing Hosted on CodeSandbox.io M6 |
rev 2 |
2020-10-01 |
| snort |
ET TROJAN TA428 Infostealer CnC Host Checkin |
rev 2 |
2020-10-01 |
| snort |
ET TROJAN TA428 Tmanger Checkin |
rev 1 |
2020-10-01 |
| suricata |
ET EXPLOIT_KIT DRIVEBY Possible Goon/Infinity/Magnitude EK SilverLight Exploit |
rev 5 |
2020-10-01 |
| suricata |
ET PHISHING Possible Phishing Landing Hosted on CodeSandbox.io M5 |
rev 2 |
2020-10-01 |
| suricata |
ET PHISHING Possible Phishing Landing Hosted on CodeSandbox.io M6 |
rev 2 |
2020-10-01 |
| suricata |
ET MALWARE TA428 Tmanger Checkin |
rev 1 |
2020-10-01 |
| suricata |
ET WEB_SERVER IIS ISN BackDoor Command Get Logpath |
rev 8 |
2020-10-01 |
| suricata |
ET MALWARE TA428 Infostealer CnC Host Checkin |
rev 2 |
2020-10-01 |
| suricata |
ET WEB_SERVER IIS ISN BackDoor Command Delete Log |
rev 8 |
2020-10-01 |
| snort |
ET TROJAN Observed Ttint Update CnC Domain in DNS Query |
rev 2 |
2020-09-30 |
| snort |
ET MALWARE Observed DownloadAssistant User-Agent |
rev 2 |
2020-09-30 |
| snort |
ET TROJAN Observed Ttint CnC Domain in DNS Query |
rev 2 |
2020-09-30 |
| snort |
ET TROJAN Observed Ttint CnC Domain in DNS Query |
rev 2 |
2020-09-30 |
| snort |
ET TROJAN Observed Ttint CnC Domain in DNS Query |
rev 2 |
2020-09-30 |
| snort |
ET TROJAN Ttint XORed CnC Checkin |
rev 2 |
2020-09-30 |
| snort |
ET MALWARE DownloadAssistant Activity |
rev 2 |
2020-09-30 |
| suricata |
ET MALWARE Ttint XORed CnC Checkin |
rev 2 |
2020-09-30 |