Search
Keyword: arp flooding attack
Description Name: Possible Pseudorandom Subdomain Attack - DNS (Response) .
Description Name: CobaltStrike - HTTPS (Request) .
Description Name: Remote Service execution through SMB2 SVCCTL detected .
Description Name: Powershell script requested from root directory - HTTP (Request) . Related Malware: coinmine behavior
Description Name: POSSIBLE XSS - HTTP (Request) .
Description Name: POSSIBLE WEBSHELL - HTTP (REQUEST) .
Description Name: ACTIVE DIRECTORY GPO DEPLOY COMMAND - SMB2 (Response) .
Description Name: HTA Download - HTTP (Request) .
Description Name: ELF File requested from root directory - HTTP (Response) .
Description Name: Possible RIG Exploit Kit - HTTP (Request) .
Description Name: TREVOR - HTTP (Response) .
Description Name: ICMP SWEEP - ICMP (Request) .
Description Name: COBALTSTRIKE - HTTP (Request) .
Description Name: COBALTSTRIKE - DNS (Response) - Variant 2 .
systems using specific flooding method(s). Arrival Details This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
systems using specific flooding method(s). Arrival Details This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
capabilities: Propagates through the following P2P applications: Kazaa BearShare iMesh Shareaza DC++ Emule LimeWire Ares Performs denial of service (DoS) attacks on affected systems using SYN flooding Drops an
NUL Backdoor Routine This worm executes the following command(s) from a remote malicious user: P2P Propagation Drive Infect Flooding Port Scanning MSN Spread Back Connect However, as of this writing,
This malware is the final payload of a targeted attack campaign leveraging the April 2013 Boston Marathon Bombing. It downloads malicious files onto the systems it infects. Affected users may find
from C&C. The tunnel will establish the connection between the infected device and an attacker. The attacker may access or attack other severs belonging to the same LAN. It can also use the victim's