Search
Keyword: coinmine behavior
This is the Trend Micro heuristic detection for suspicious files that manifest similar behavior and characteristics. Specifically, this is the detection for keystroke log files of BKDR_POISON.
Description Name: Possible Self-Signed SSL certificate detected .
Description Name: Log Files Upload .
Description Name: MDMP File Upload .
Description Name: Powershell - SMB .
Description Name: Possible DGA - DNS (Response) .
Description Name: GZ Inflate in PHP File - HTTP (Response) .
Description Name: Possible SoftEther VPN Client - HTTPS (REQUEST) .
Description Name: NULL BYTES - HTTP (Request) .
Description Name: ATERA - HTTP(REQUEST) .
Description Name: ANYDESK - HTTPS(REQUEST) .
Description Name: Possible KAVO - HTTP (Request) . This is the Trend Micro detection for malicious N/A network packet that manifest any of the following actions:CallbackThis attack is used for Command and Control Communication
Description Name: Powershell Remote Command Execution Via WinRM - HTTP (Request) .
Description Name: Covert Iodine tunnel - DNS (Request) .
Description Name: Possible Pseudorandom Subdomain Attack - DNS (Response) .
Description Name: CobaltStrike - HTTPS (Request) .
Description Name: Possible data-stealing malware - HTTP (Request) . This is the Trend Micro detection for malicious N/A network packet that manifest any of the following actions:CallbackThis attack is used for Command and Control Communication
Description Name: Remote Service execution through SMB2 SVCCTL detected .
Description Name: POSSIBLE XSS - HTTP (Request) .
Description Name: POSSIBLE WEBSHELL - HTTP (REQUEST) .