TF-MAL-elf.auto_color |
Malware family: Auto-Color |
|
Auto-Color |
1 |
10 |
|
|
|
TF-MAL-elf.lootwodniw |
Malware family: Lootwodniw |
|
Lootwodniw |
1 |
10 |
|
|
|
TF-MAL-js.nodecordrat |
Malware family: NodeCordRAT |
|
NodeCordRAT |
1 |
10 |
|
|
|
TF-MAL-elf.insidiousgh0st |
Malware family: InsidiousGh0st |
|
InsidiousGh0st |
1 |
10 |
|
|
|
ET-3381 |
Ruleset Update Summary - 2026/07/13 - v11232 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-elf.ext4 |
Malware family: ext4 |
|
ext4 |
1 |
10 |
|
|
|
TF-MAL-jar.qrat |
Malware family: QRat |
|
QRat |
1 |
10 |
|
|
|
TF-MAL-elf.minocat |
Malware family: MINOCAT |
|
MINOCAT |
1 |
10 |
|
|
|
TF-MAL-elf.gotitan |
Malware family: GoTitan |
|
GoTitan |
1 |
10 |
|
|
|
TF-MAL-js.icecube |
Malware family: IceCube |
|
IceCube |
1 |
10 |
|
|
|
TF-MAL-jar.jarleash |
Malware family: JARLEASH |
|
JARLEASH |
1 |
10 |
|
|
|
TF-MAL-elf.longleash |
Malware family: LONGLEASH |
|
LONGLEASH |
1 |
8 |
|
|
|
TF-MAL-elf.dogleash |
Malware family: DOGLEASH |
|
DOGLEASH |
1 |
8 |
|
|
|
TF-MAL-osx.interception |
Malware family: Interception |
|
Interception |
1 |
10 |
|
|
|
TF-MAL-osx.poolrat |
Malware family: POOLRAT |
|
POOLRAT |
1 |
10 |
|
|
|
TF-MAL-osx.frigid_stealer |
Malware family: FrigidStealer |
|
FrigidStealer |
1 |
10 |
|
|
|
TF-MAL-ps1.ptero_graphin |
Malware family: PteroGraphin |
|
PteroGraphin |
1 |
10 |
|
|
|
TF-MAL-php.c99 |
Malware family: c99shell |
|
c99shell |
1 |
10 |
|
|
|
TF-MAL-pl.silence_ddos |
Malware family: Silence DDoS |
|
Silence DDoS |
1 |
10 |
|
|
|
TF-MAL-elf.doki |
Malware family: Doki |
|
Doki |
1 |
10 |
|
|
|
TF-MAL-osx.unidentified_001 |
Malware family: Unidentified macOS 001 (UnionCryptoTrader) |
|
Unidentified macOS 001 (UnionCryptoTrader) |
1 |
10 |
|
|
|
TF-MAL-ps1.lightbot |
Malware family: LightBot |
|
LightBot |
1 |
10 |
|
|
|
TF-MAL-osx.cthulhu_stealer |
Malware family: Cthulhu Stealer |
|
Cthulhu Stealer |
1 |
10 |
|
|
|
TF-MAL-osx.creative_updater |
Malware family: CreativeUpdater |
|
CreativeUpdater |
1 |
10 |
|
|
|
TF-MAL-osx.proton_rat |
Malware family: Proton RAT |
|
Proton RAT |
1 |
10 |
|
|
|
TF-MAL-ps1.quadagent |
Malware family: QUADAGENT |
|
QUADAGENT |
1 |
10 |
|
|
|
TF-MAL-osx.cdds |
Malware family: CDDS |
|
CDDS |
1 |
10 |
|
|
|
TF-MAL-osx.patcher |
Malware family: Patcher |
|
Patcher |
1 |
10 |
|
|
|
ET-3380 |
Ruleset Update Summary - 2026/07/10 - v11231 |
|
forum-post |
1 |
10 |
|
|
|
VT-walk-fit.io |
VirusTotal: walk-fit.io |
medium |
ioc |
1 |
10 |
|
|
|
ET-3379 |
Ruleset Update Summary - 2026/07/09 - v11230 |
|
forum-post |
1 |
10 |
|
|
|
ET-3376 |
Ruleset Update Summary - 2026/07/06 - v11227 |
|
forum-post |
1 |
10 |
|
|
|
ET-3377 |
Ruleset Update Summary - 2026/07/07 - v11228 |
|
forum-post |
1 |
10 |
|
|
|
ET-3378 |
Ruleset Update Summary - 2026/07/08 - v11229 |
|
forum-post |
1 |
10 |
|
|
|
ET-3368 |
Ruleset Update Summary - 2026/06/30 - v11224 |
|
forum-post |
1 |
10 |
|
|
|
ET-3369 |
Ruleset Update Summary - 2026/07/01 - v11225 |
|
forum-post |
1 |
10 |
|
|
|
ET-3366 |
Top most triggered signatures? |
|
forum-post |
1 |
10 |
|
|
|
ET-3364 |
Ruleset Update Summary - 2026/06/25 - v11221 |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-osx.waveshaper |
Malware family: WAVESHAPER |
|
WAVESHAPER |
1 |
10 |
|
|
|
ET-3357 |
Ruleset Update Summary - 2026/06/15 - v11214 |
|
forum-post |
1 |
10 |
|
|
|
ET-3355 |
Ruleset Update Summary - 2026/06/12 - v11213 |
|
forum-post |
1 |
10 |
|
|
|
AI-IOC-995c55a82271 |
Emotet Botnet Infrastructure IP |
medium |
ai-validated |
0 |
11 |
|
|
|
ET-3351 |
Ruleset Update Summary - 2026/06/09 - v11210 |
|
forum-post |
1 |
10 |
|
|
|
ET-3352 |
SIG:ET HUNTING Possible Sliver Age and Minisign Key Material in Internal TCP Stream |
|
forum-post |
1 |
10 |
|
|
|
TF-MAL-ps1.phantom_relay |
Malware family: PhantomRelay |
|
PhantomRelay |
1 |
10 |
|
|
|
TF-MAL-ps1.banana_rat |
Malware family: Banana RAT |
|
Banana RAT |
1 |
8 |
|
|
|
TF-MAL-elf.lockbit |
Malware family: LockBit |
|
LockBit |
1 |
10 |
|
|
|
TF-MAL-osx.lockbit |
Malware family: LockBit |
|
LockBit |
1 |
10 |
|
|
|
MB-899b268e756f5158f6707e76e15e0af4ab9a6a09953274ee1b549666f3cf2f12 |
Unknown: 899b268e756f5158f6707e76e15e0af4ab9a6a09953274ee1b549666f3cf2f12 |
high |
Unknown |
1 |
8 |
|
|
|
MB-846a2e3a606c07e5497cda85364879b8ff31009a4526d75a7d1ab0d06c71b948 |
AsyncRAT: hm888.exe |
high |
AsyncRAT |
1 |
10 |
|
|
|