| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Hancitor Feb 5 | Feb 5th, 2019 | Never | 1,981 | 0 | None | - |
| Shade/Troldesh links | Feb 3rd, 2019 | Never | 1,832 | 0 | None | - |
| Stack testing | Feb 1st, 2019 | Never | 745 | 0 | None | - |
| Powershell empire | Feb 1st, 2019 | Never | 554 | 0 | None | - |
| January Malspam Campaigns | Feb 1st, 2019 | Never | 1,104 | 0 | None | - |
| Snort / Suricata rules | Feb 1st, 2019 | Never | 650 | 0 | None | - |
| Qbot/Qakbot c2's | Jan 30th, 2019 | Never | 2,615 | 0 | None | - |
| Unknown botnet | Jan 29th, 2019 | Never | 1,205 | 0 | None | - |
| DarkComet config | Jan 28th, 2019 | Never | 530 | 0 | None | - |
| Signed azo yara | Jan 28th, 2019 | Never | 430 | 0 | None | - |
| Hancitor Jan 28 | Jan 28th, 2019 | Never | 812 | 0 | None | - |
| uPELoader yara | Jan 27th, 2019 | Never | 925 | 0 | None | - |
| Kewgad yara sig | Jan 27th, 2019 | Never | 821 | 0 | None | - |
| Shade/Troldesh links | Jan 25th, 2019 | Never | 1,882 | 0 | None | - |
| Shade/Troldesh links | Jan 24th, 2019 | Never | 311 | 0 | None | - |
| install.bat | Jan 23rd, 2019 | Never | 537 | 0 | None | - |
| Hancitor Jan 23 | Jan 23rd, 2019 | Never | 1,174 | 0 | None | - |
| VNCOLD yara sig | Jan 23rd, 2019 | Never | 980 | 0 | None | - |
| Hancitor Jan 22 | Jan 22nd, 2019 | Never | 2,225 | 0 | None | - |
| Emotet links Jan 22 | Jan 22nd, 2019 | Never | 2,047 | 0 | None | - |
| Peppy yara rule | Jan 21st, 2019 | Never | 523 | 0 | None | - |
| Agenttesla new yara | Jan 21st, 2019 | Never | 622 | 0 | None | - |
| Hancitor Jan 17 | Jan 17th, 2019 | Never | 683 | 0 | None | - |
| Async RAT v1.8 snort suricata | Jan 17th, 2019 | Never | 593 | 0 | None | - |
| Emotet links Jan 15 | Jan 15th, 2019 | Never | 1,984 | 0 | None | - |
| SASL burst brute #2 Submission | Jan 14th, 2019 | Never | 512 | 0 | None | - |
| SASL burst brute #2 | Jan 14th, 2019 | Never | 531 | 0 | None | - |
| Qealler Loader sig | Jan 14th, 2019 | Never | 577 | 0 | None | - |
| Emotet links Jan 14 | Jan 14th, 2019 | Never | 1,959 | 0 | None | - |
| Hancitor Jan 14 | Jan 14th, 2019 | Never | 894 | 0 | None | - |
| SASL burst brute | Jan 13th, 2019 | Never | 491 | 0 | None | - |
| NSIS DLL loader | Jan 13th, 2019 | Never | 497 | 0 | None | - |
| Initial assessment | Jan 11th, 2019 | Never | 1,052 | 0 | None | - |
| Kutaki yara | Jan 7th, 2019 | Never | 600 | 0 | None | - |
| Jscript Bot | Jan 6th, 2019 | Never | 860 | 0 | None | - |
| SASL brutes | Jan 5th, 2019 | Never | 453 | 0 | None | - |
| 6 Months of Malware | Jan 4th, 2019 | Never | 916 | 0 | None | - |
| Ping rules | Jan 4th, 2019 | Never | 545 | 0 | None | - |
| TitanFox Loader sig | Jan 4th, 2019 | Never | 730 | 0 | None | - |
| NewDDOSBot | Jan 3rd, 2019 | Never | 1,102 | 0 | None | - |
| Powershell Ransomware | Jan 3rd, 2019 | Never | 690 | 0 | None | - |
| Netsupport | Dec 31st, 2018 | Never | 435 | 0 | None | - |
| Electrum domains | Dec 28th, 2018 | Never | 569 | 0 | None | - |
| ServSelper | Dec 26th, 2018 | Never | 1,167 | 0 | None | - |
| Emotet links Dec 22/23 | Dec 23rd, 2018 | Never | 962 | 0 | None | - |
| Emotet links Dec 21 | Dec 21st, 2018 | Never | 2,266 | 0 | None | - |
| Emotet links Dec 20 | Dec 20th, 2018 | Never | 1,967 | 0 | None | - |
| Hancitor Dec 20 | Dec 20th, 2018 | Never | 1,461 | 0 | None | - |
| Gandcrab domains | Dec 19th, 2018 | Never | 521 | 0 | None | - |
| Emotet links Dec 19 | Dec 19th, 2018 | Never | 2,674 | 0 | None | - |
| Hancitor Dec 19 | Dec 19th, 2018 | Never | 716 | 0 | None | - |
| Trickbot config | Dec 18th, 2018 | Never | 367 | 0 | None | - |
| Emotet links Dec 18 | Dec 18th, 2018 | Never | 2,296 | 0 | None | - |
| Hancitor Dec 18 | Dec 18th, 2018 | Never | 865 | 0 | None | - |
| Formbook domains | Dec 17th, 2018 | Never | 413 | 0 | None | - |
| Hancitor Dec 17 | Dec 17th, 2018 | Never | 966 | 0 | None | - |
| Emotet links Dec 17 | Dec 17th, 2018 | Never | 1,947 | 0 | None | - |
| Emotet links Dec 15 | Dec 15th, 2018 | Never | 885 | 0 | None | - |
| AveMaria yara | Dec 14th, 2018 | Never | 445 | 0 | None | - |
| AvaMaria snort suricata | Dec 14th, 2018 | Never | 540 | 0 | None | - |
| Emotet links Dec 14 | Dec 14th, 2018 | Never | 3,202 | 0 | None | - |
| Emotet links Dec 13 | Dec 13th, 2018 | Never | 1,209 | 0 | None | - |
| Hancitor Dec 12 | Dec 13th, 2018 | Never | 422 | 0 | None | - |
| Hancitor Dec 13 | Dec 13th, 2018 | Never | 546 | 0 | None | - |
| Emotet links Dec 12 | Dec 12th, 2018 | Never | 2,721 | 0 | None | - |
| Retefe yara sig | Dec 11th, 2018 | Never | 464 | 0 | None | - |
| Emotet links Dec 11 | Dec 11th, 2018 | Never | 2,656 | 0 | None | - |
| Further decoded | Dec 11th, 2018 | Never | 392 | 0 | None | - |
| Hancitor Dec 11 | Dec 11th, 2018 | Never | 879 | 0 | None | - |
| Formbook Domains | Dec 11th, 2018 | Never | 410 | 0 | None | - |
| SASL brutes | Dec 10th, 2018 | Never | 412 | 0 | None | - |
| Emotet links Dec 10 | Dec 10th, 2018 | Never | 2,446 | 0 | None | - |
| Firefoxx64 stealer yara sig | Dec 10th, 2018 | Never | 577 | 0 | None | - |
| Hancitor Dec 10 | Dec 10th, 2018 | Never | 593 | 0 | None | - |
| Netwire hosts | Dec 9th, 2018 | Never | 436 | 0 | None | - |
| Emotet links Dec 8 | Dec 8th, 2018 | Never | 1,105 | 0 | None | - |
| FF49PreemUp yara | Dec 7th, 2018 | Never | 392 | 0 | None | - |
| Emotet links Dec 7 | Dec 7th, 2018 | Never | 2,482 | 0 | None | - |
| Hancitor Dec 6 | Dec 6th, 2018 | Never | 373 | 0 | None | - |
| Emotet links Dec 6 | Dec 6th, 2018 | Never | 1,889 | 0 | None | - |
| DNSpionage yara | Dec 5th, 2018 | Never | 386 | 0 | None | - |
| Emotet links Dec 5 | Dec 5th, 2018 | Never | 2,111 | 0 | None | - |
| Hancitor Dec 5 | Dec 5th, 2018 | Never | 1,261 | 0 | None | - |
