silence-is-best
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://mootsiestootsieskid.com | |
| additional dl | |
| http://billionaires-indo.com/coba1/1 | |
| http://billionaires-indo.com/coba1/2 | |
| http://billionaires-indo.com/coba1/3 | |
| http://primagamahomeschool.com/wp-includes/1 | |
| http://primagamahomeschool.com/wp-includes/2 | |
| http://primagamahomeschool.com/wp-includes/3 | |
| http://skolanovavesnn.cz/wp-admin/1 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://normamonteldesigns.com | |
| http://fsbams.net | |
| http://fsbams.com | |
| additional dl | |
| http://caiautoinsurance.com/1 | |
| http://caiautoinsurance.com/2 | |
| http://caiautoinsurance.com/3 | |
| http://doctor-t.ru/1 | |
| http://doctor-t.ru/2 |
silence-is-best
/ Emotet links Dec 13
Last active
August 20, 2020 00:22
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| doc dl | |
| http://adt-biotech.com/COMET/SIGNS/PAYMENT/NOTIFICATION/12/13/2018/Corporation/US_us/Invoices-attached | |
| http://roffers.com/kpRw-HDMdJyod3rnDmOd_aHSReoktw-Hkc/biz/Personal | |
| below thanks to @fewatoms | |
| http://13.127.126.242/US/Clients_transactions/2018-12/ | |
| http://144.76.14.182/US/Messages/122018/ | |
| http://159.65.107.159/983394575983735002/invoicing/scan/En_us/Paid-Invoice/ | |
| http://2d73.ru/INVOICE/2244626248/OVERPAYMENT/Document/En_us/Open-invoices/ | |
| http://31.207.35.116/wordpress/doc/US_us/Invoices-Overdue | |
| http://31.207.35.116/wordpress/invoices/364752419/DOC/US_us/Past-Due-Invoices/ |
silence-is-best
/ Hancitor Dec 17
Created
December 17, 2018 15:48
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| cryometers.com | |
| additional dl | |
| http://mail.porterranchpetnanny.com/wp-includes/1 | |
| http://mail.porterranchpetnanny.com/wp-includes/2 | |
| http://mail.porterranchpetnanny.com/wp-includes/3 | |
| http://precisionpartners.org/wp-admin/includes/1 | |
| http://precisionpartners.org/wp-admin/includes/2 | |
| http://precisionpartners.org/wp-admin/includes/3 | |
| http://rescuereinvented.org/wp-content/plugins/woocommerce/1 |
silence-is-best
/ Hancitor Dec 18
Created
December 18, 2018 15:52
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://gaslab.kr | |
| additional dl | |
| http://culture-developpement.asso.fr/wp-content/plugins/wp-pagenavi/1 | |
| http://culture-developpement.asso.fr/wp-content/plugins/wp-pagenavi/2 | |
| http://culture-developpement.asso.fr/wp-content/plugins/wp-pagenavi/3 | |
| http://digitalmarketingsheffield.co.uk/wp-includes/pomo/1 | |
| http://digitalmarketingsheffield.co.uk/wp-includes/pomo/2 | |
| http://digitalmarketingsheffield.co.uk/wp-includes/pomo/3 | |
| http://ledbazaar.net/wp-admin/1 |
silence-is-best
/ Hancitor Dec 20
Created
December 20, 2018 16:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://marylandrxcoupon.com | |
| additional doc dl below thanks to @JayTHL | |
| mainerxcoupon.com | |
| indianarxcoupon.com | |
| iowarxcoupon.com | |
| louisianarxcoupon.com | |
| minnesotarxcoupon.com | |
| montanarxcoupon.com | |
| mississippirxcoupon.com | |
| airxllc.com |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rule NewDDOSBot_bin | |
| { | |
| meta: | |
| description = "NewDDOSBot" | |
| author = " James_inthe_box" | |
| reference = "https://app.any.run/tasks/209085da-a3b3-4317-923a-90a4a2e82414" | |
| date = "2019/01" | |
| maltype = "Bot" | |
| strings: |
silence-is-best
/ gist:ebdf86147408fde8b163ad67b660c1d2
Created
April 16, 2020 13:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| http://ddl7.data.hu/get/309105/12392411/RFQ_and_Company_Profile_PDF.cab | |
| http://ddl7.data.hu/get/318254/12392412/Qoutation_for_April_and_Company_Profile_PDF.cab | |
| http://ddl7.data.hu/get/375193/12388695/Our_company_profile_as_requested_and_Purchase_Order_pdf.cab | |
| http://ddl7.data.hu/get/375297/12392504/Inquiry.pdf_and_samples.jpg__ZIP.cab |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rule newloader_bin | |
| { | |
| meta: | |
| description = "Unknown loader" | |
| author = "James_inthe_box" | |
| reference = "5a888d05804d06190f7fc408bede9da0423678c8f6eca37ecce83791de4df83d" | |
| date = "2020/4" | |
| maltype = "Poopy" | |
| strings: |
silence-is-best
/ gist:8781459aee73f438424b51c589da095a
Last active
April 23, 2020 15:30
Nanocore snort suricata
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| alert tcp any any -> any any (msg:"NanoCore RAT CnC"; flow:to_server,established; content:"|40 00 00 00 fe 31 80 44 e7 eb 4a 77|"; depth:12; reference:md5,18fe62a701d08affdd58ade2df0d1fb6; classtype:command-and-control; sid:20166322; rev:1; metadata:created_at 2020_4_23;) |
OlderNewer