| suricata |
ET SCAN w3af User-Agent 2 |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE HTTP Request for Possible ELF/LiLocked Ransomware Note |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE SmokeBot grab data plaintext |
rev 6 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ABUSE.CH Zloader CnC Domain Detected |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT Zuponcic Hostile JavaScript |
rev 4 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Suspicious *.orge.pl Domain |
rev 6 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .sg.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Plurox CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Urlzone/Bebloh/Bublik Checkin /was/uid.php |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Internal Host Retrieving External IP Via myip.ozymo.com |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE VirTool.Win32/VBInject.gen!DM Checkin |
rev 9 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET DNS Query for .to TLD |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Unk HeavensGate Loader CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DarkHotel CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .eu.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Suspicious *.vv.cc domain |
rev 5 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .ca.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE MirrorThief CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Possible ShadowHammer DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Possible Successful Phish - Password Submitted to *.000webhostapp.com |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |