시그니처 리스트, Signature List
번호날짜ID시그니처 (Total Ruleset: 27,111개)
25,1112017/09/19 2024707  ET CURRENT_EVENTS Possible Apple Phishing Landing - Title over non SSL;  
25,1102017/09/19 2024711  ET TROJAN CCleaner Backdoor DGA May 2017; [1] 
25,1092017/09/19 2024714  ET TROJAN CCleaner Backdoor DGA Aug 2017; [1] 
25,1082017/09/19 2024708  ET TROJAN CCleaner Backdoor DGA Feb 2017; [1] 
25,1072017/09/19 2024712  ET TROJAN CCleaner Backdoor DGA Jun 2017; [1] 
25,1062017/09/19 2024715  ET TROJAN CCleaner Backdoor DGA Sep 2017; [1] 
25,1052017/09/19 2024713  ET TROJAN CCleaner Backdoor DGA Jul 2017; [1] 
25,1042017/09/19 2024716  ET TROJAN CCleaner Backdoor DGA Oct 2017; [1] 
25,1032017/09/16 2024706  ET CURRENT_EVENTS Possible CVE-2017-8759 Soap File DL;  
25,1022017/09/16 2024704  ET CURRENT_EVENTS Apple Phishing Landing M2 Sep 14 2017;  
25,1012017/09/16 2024703  ET CURRENT_EVENTS Apple Phishing Landing M1 Sep 14 2017;  
25,1002017/09/16 2024705  ET CURRENT_EVENTS Apple Phishing Landing M3 Sep 14 2017;  
25,0992017/09/14 2405099  ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] 
25,0982017/09/14 2405094  ET CNC Shadowserver Reported CnC Server Port 33333 Group 1; [1,2] 
25,0972017/09/14 2405097  ET CNC Shadowserver Reported CnC Server Port 51987 Group 1; [1,2] 
25,0962017/09/14 2405098  ET CNC Shadowserver Reported CnC Server Port 54321 Group 1; [1,2] 
25,0952017/09/14 2405093  ET CNC Shadowserver Reported CnC Server Port 32768 Group 1; [1,2] 
25,0942017/09/14 2405095  ET CNC Shadowserver Reported CnC Server Port 40669 Group 1; [1,2] 
25,0932017/09/14 2405096  ET CNC Shadowserver Reported CnC Server Port 47221 Group 1; [1,2] 
25,0922017/09/14 2405091  ET CNC Shadowserver Reported CnC Server Port 26745 Group 1; [1,2] 
25,0912017/09/14 2405092  ET CNC Shadowserver Reported CnC Server Port 32164 Group 1; [1,2] 
25,0902017/09/14 2024702  ET CURRENT_EVENTS Possible CVE-2017-8759 Soap File DL;  
25,0892017/09/13 2024701  ET TROJAN [PTsecurity] JS.Trojan-Downloader.Nemucod.yo HTTP POST (:Exec:);  
25,0882017/09/13 2024700  ET CURRENT_EVENTS HoeflerText Chrome Popup DriveBy Download Attempt 2; [1] 
25,0872017/09/12 2405088  ET CNC Shadowserver Reported CnC Server Port 47221 Group 1; [1,2] 
25,0862017/09/12 2405089  ET CNC Shadowserver Reported CnC Server Port 51987 Group 1; [1,2] 
25,0852017/09/12 2405090  ET CNC Shadowserver Reported CnC Server Port 54321 Group 1; [1,2] 
25,0842017/09/12 2024693  ET MALWARE Win32/LoadMoney Adware Activity;  
25,0832017/09/12 2024692  ET TROJAN Win32/Unk.Bot CnC Checkin 2;  
25,0822017/09/12 2024694  ET TROJAN [PTsecurity] pkt checker 0;  
25,0812017/09/12 2024696  ET TROJAN [PTsecurity] pkt checker 2;  
25,0802017/09/12 2024689  ET WEB_CLIENT Download of Multimedia Content flowbit set; [1] 
25,0792017/09/12 2024699  ET TROJAN [PTsecurity] Adware/Rukometa(LoadMoney) Fake PNG File;  
25,0782017/09/12 2024691  ET CURRENT_EVENTS RIG encrypted payload Sept 11 (1);  
25,0772017/09/12 2024690  ET WEB_CLIENT Download of .MOV Content flowbit set; [1] 
25,0762017/09/12 2024695  ET TROJAN [PTsecurity] pkt checker 1;  
25,0752017/09/12 2024697  ET TROJAN [PTsecurity] pkt checker 3;  
25,0742017/09/12 2024698  ET TROJAN [PTsecurity] Backdoor.Win32/Remcos RAT pkt checker 4; [1] 
25,0732017/09/09 2405086  ET CNC Shadowserver Reported CnC Server Port 51987 Group 1; [1,2] 
25,0722017/09/09 2405082  ET CNC Shadowserver Reported CnC Server Port 32164 Group 1; [1,2] 
25,0712017/09/09 2405083  ET CNC Shadowserver Reported CnC Server Port 32768 Group 1; [1,2] 
25,0702017/09/09 2405081  ET CNC Shadowserver Reported CnC Server Port 26745 Group 1; [1,2] 
25,0692017/09/09 2405087  ET CNC Shadowserver Reported CnC Server Port 54321 Group 1; [1,2] 
25,0682017/09/09 2405085  ET CNC Shadowserver Reported CnC Server Port 40669 Group 1; [1,2] 
25,0672017/09/09 2405084  ET CNC Shadowserver Reported CnC Server Port 33333 Group 1; [1,2] 
25,0662017/09/09 2024679  ET TROJAN Win32/Unk.Bot CnC Checkin;  
25,0652017/09/09 2024683  ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL Certificate Detected (ZeusPanda MITM); [1] 
25,0642017/09/09 2024685  ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL Certificate Detected (ZeusPanda MITM); [1] 
25,0632017/09/09 2024688  ET CURRENT_EVENTS Tech Support Scam Sep 08 2017;  
25,0622017/09/09 2024686  ET TROJAN ABUSE.CH SSL Fingerprint Blacklist Malicious SSL Certificate Detected (ZeusPanda MITM); [1] 
< 41  42  43  44  45  46  47  48  49  50 >
GigaVPN & GigaIPS is based MikroTik, Suricata and EmergingThreats.
Copyright ⓒ 2010 . All Rights Reserved.