| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) | | 1,311 | 2015/01/20 | 2002981 | ET TROJAN Banker.Delf Infection variant 4 - Sending Initial Email to Owner; [1,2] | | 1,310 | 2015/01/20 | 2002980 | ET TROJAN Banker.Delf Infection variant 3 - Sending Initial Email to Owner; [1,2] | | 1,309 | 2015/01/20 | 2002979 | ET TROJAN SC-KeyLog Keylogger Installed - Sending Initial Email Report; [1,2] | | 1,308 | 2015/01/20 | 2002978 | ET TROJAN Banker.Delf Infection variant 2 - Sending Initial Email to Owner; [1,2] | | 1,307 | 2015/01/20 | 2002977 | ET TROJAN Banload Downloader Infection - Sending initial email to owner; [1,2] | | 1,306 | 2015/01/20 | 2002976 | ET TROJAN Banker.Delf Infection - Sending Initial Email to Owner; [1,2] | | 1,305 | 2015/01/20 | 2002975 | ET TROJAN Backdoor.Hupigon INFECTION - Reporting Host Type; [1,2] | | 1,304 | 2015/01/20 | 2002974 | ET TROJAN Backdoor.Hupigon Possible Control Connection Being Established; [1,2] | | 1,303 | 2015/01/20 | 2002973 | ET SCAN Behavioral Unusual Port 3127 traffic, Potential Scan or Backdoor; [1] | | 1,302 | 2015/01/20 | 2002971 | ET ACTIVEX Wmm2fxa.dll COM Object Instantiation Memory Corruption CLSID 1 Access Attempt; [1,2] | | 1,301 | 2015/01/20 | 2002967 | ET MALWARE Dollarrevenue.com Spyware Code Download; [1,2] | | 1,300 | 2015/01/20 | 2002966 | ET MALWARE Elitemediagroup.net Spyware Config Download; [1,2] | | 1,299 | 2015/01/20 | 2002965 | ET DELETED Generic Spambot Spam Download; [1] | | 1,298 | 2015/01/20 | 2002964 | ET TROJAN Generic Spyware Update Download; [1] | | 1,297 | 2015/01/20 | 2002963 | ET TROJAN Generic Spambot-Spyware Access; [1] | | 1,296 | 2015/01/20 | 2002962 | ET DELETED Tibs Code Download; [1] | | 1,295 | 2015/01/20 | 2002961 | ET TROJAN Tibs Checkin 2; [1] | | 1,294 | 2015/01/20 | 2002960 | ET DELETED Tibs Download; [1] | | 1,293 | 2015/01/20 | 2002959 | ET TROJAN Tibs Checkin; [1] | | 1,292 | 2015/01/20 | 2002957 | ET MALWARE Bestcount.net Spyware Initial Infection Download; [1,2] | | 1,291 | 2015/01/20 | 2002956 | ET MALWARE Bestcount.net Spyware Downloading vxgame; [1,2] | | 1,290 | 2015/01/20 | 2002955 | ET MALWARE Win32/Tibs Checkin; | | 1,289 | 2015/01/20 | 2002954 | ET MALWARE Bravesentry.com Fake Antispyware Download; [1,2,3] | | 1,288 | 2015/01/20 | 2002953 | ET P2P TOR 1.0 Outbound Circuit Traffic; [1,2] | | 1,287 | 2015/01/20 | 2002952 | ET P2P TOR 1.0 Inbound Circuit Traffic; [1,2] | | 1,286 | 2015/01/20 | 2002951 | ET P2P TOR 1.0 Status Update; [1,2] | | 1,285 | 2015/01/20 | 2002950 | ET P2P TOR 1.0 Server Key Retrieval; [1,2] | | 1,284 | 2015/01/20 | 2002949 | ET POLICY Windows Update in Progress; [1,2] | | 1,283 | 2015/01/20 | 2002948 | ET POLICY External Windows Update in Progress; [1,2] | | 1,282 | 2015/01/20 | 2002947 | ET GAMES PunkBuster Server webkey Buffer Overflow; [1,2] | | 1,281 | 2015/01/20 | 2002946 | ET POLICY Java Url Lib User Agent; [1,2] | | 1,280 | 2015/01/20 | 2002945 | ET POLICY Java Url Lib User Agent Web Crawl; [1,2] | | 1,279 | 2015/01/20 | 2002944 | ET POLICY python.urllib User Agent; [1,2] | | 1,278 | 2015/01/20 | 2002943 | ET POLICY python.urllib User Agent Web Crawl; [1,2] | | 1,277 | 2015/01/20 | 2002942 | ET TROJAN XP keylogger v2.1 mail report - Outbound; [1] | | 1,276 | 2015/01/20 | 2002941 | ET TROJAN elitekeylogger v1.0 reporting - Outbound; [1] | | 1,275 | 2015/01/20 | 2002940 | ET TROJAN XP keylogger v2.1 mail report - Inbound; [1] | | 1,274 | 2015/01/20 | 2002938 | ET TROJAN elitekeylogger v1.0 reporting - Inbound; [1] | | 1,273 | 2015/01/20 | 2002937 | ET DELETED WebAttacker kit (ie0606); [1] | | 1,272 | 2015/01/20 | 2002935 | ET POLICY Possible Web Crawl - libwww-perl User Agent; [1,2] | | 1,271 | 2015/01/20 | 2002934 | ET POLICY libwww-perl User Agent; [1,2] | | 1,270 | 2015/01/20 | 2002933 | ET MALWARE CWS Spy-Sheriff.com Infeced Buy Page Request; [1,2] | | 1,269 | 2015/01/20 | 2002932 | ET MALWARE CWS Related Installer; [1,2] | | 1,268 | 2015/01/20 | 2002931 | ET MALWARE CWS Trafcool.biz Related Installer; [1,2] | | 1,267 | 2015/01/20 | 2002929 | ET TROJAN Haxdoor Reporting User Activity 2; [1,2,3,4,5] | | 1,266 | 2015/01/20 | 2002928 | ET SNMP Cisco Non-Trap PDU request on SNMPv3 random port; [1] | | 1,265 | 2015/01/20 | 2002927 | ET SNMP Cisco Non-Trap PDU request on SNMPv2 random port; [1] | | 1,264 | 2015/01/20 | 2002926 | ET SNMP Cisco Non-Trap PDU request on SNMPv1 random port; [1] | | 1,263 | 2015/01/20 | 2002925 | ET INAPPROPRIATE Google Image Search, Safe Mode Off; [1] | | 1,262 | 2015/01/20 | 2002924 | ET EXPLOIT VNC Server Not Requiring Authentication; [1,2] | | < 511 512 513 514 515 516 517 518 519 520 > |
|