| suricata |
ET HUNTING SUSPICIOUS wsqmocn.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP GET SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP COOKIE SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP ENV SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET EXPLOIT_KIT DotkaChef EK initial landing from Oct 02 2013 mass-site compromise EK campaign |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET MALWARE W32/Caphaw Requesting Additional Modules From CnC |
rev 7 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP SESSION SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP POST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER Joomla Upload File Filter Bypass |
rev 4 |
2020-09-19 |
| suricata |
ET MALWARE Win32.Troj.Cidox Checkin |
rev 5 |
2020-09-19 |
| suricata |
ET MALWARE Possible FortDisco Reporting Hacked Accounts |
rev 5 |
2020-09-19 |
| suricata |
ET MALWARE Proxychecker Lookup |
rev 5 |
2020-09-19 |
| suricata |
ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action |
rev 6 |
2020-09-19 |
| suricata |
ET EXPLOIT_KIT Possible JDB Exploit Kit Class Request |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE Unknown Webserver Backdoor |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible Perl Shell in HTTP POST |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE W32/Downloader Secondary Download Request - W32/Hupigon.Backdoor Likely Secondary Payload |
rev 5 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT JDB Exploit Kit JAR Download |
rev 9 |
2020-09-18 |
| suricata |
ET MALWARE W32/Caphaw CnC Configuration File Request |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER suhosin.simulation PHP config option in uri |
rev 6 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT CritXPack Landing Pattern |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible SQLi xp_cmdshell POST body |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER PHP tag in UA |
rev 5 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Unknown Exploit Kit Exploit Request |
rev 4 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Styx Exploit Kit Jerk.cgi TDS |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE Trojan.Win32.VB.cefz Checkin |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER disable_functions PHP config option in uri |
rev 7 |
2020-09-18 |
| suricata |
ET MOBILE_MALWARE Android/GoldDream Infected Device Registration |
rev 6 |
2020-09-18 |
| suricata |
ET MALWARE Possible Linux/Cdorked.A CnC |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER open_basedir PHP config option in uri |
rev 6 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT - Possible Redkit 1-4 char JNLP request |
rev 8 |
2020-09-18 |
| suricata |
ET MALWARE Haxdoor Reporting User Activity 2 |
rev 9 |
2020-09-18 |
| suricata |
ET MALWARE W32/Iyus.H Initial CnC Beacon |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE W32/LetsGo.APT Sleep CnC Beacon |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE W32/Beebus HTTP POST CnC Beacon |
rev 4 |
2020-09-18 |
| suricata |
ET INFO PDF - Acrobat Enumeration - pdfobject.js |
rev 4 |
2020-09-18 |
| suricata |
ET WEB_SERVER allow_url_include PHP config option in uri |
rev 5 |
2020-09-18 |
| suricata |
ET WEB_SERVER auto_prepend_file PHP config option in uri |
rev 5 |
2020-09-18 |