| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Hancitor Feb 5 | Feb 5th, 2019 | Never | 2,392 | 0 | None | - |
| Shade/Troldesh links | Feb 3rd, 2019 | Never | 1,894 | 0 | None | - |
| Stack testing | Feb 1st, 2019 | Never | 798 | 0 | None | - |
| Powershell empire | Feb 1st, 2019 | Never | 609 | 0 | None | - |
| January Malspam Campaigns | Feb 1st, 2019 | Never | 1,167 | 0 | None | - |
| Snort / Suricata rules | Feb 1st, 2019 | Never | 709 | 0 | None | - |
| Qbot/Qakbot c2's | Jan 30th, 2019 | Never | 2,919 | 0 | None | - |
| Unknown botnet | Jan 29th, 2019 | Never | 1,282 | 0 | None | - |
| DarkComet config | Jan 28th, 2019 | Never | 578 | 0 | None | - |
| Signed azo yara | Jan 28th, 2019 | Never | 477 | 0 | None | - |
| Hancitor Jan 28 | Jan 28th, 2019 | Never | 880 | 0 | None | - |
| uPELoader yara | Jan 27th, 2019 | Never | 980 | 0 | None | - |
| Kewgad yara sig | Jan 27th, 2019 | Never | 873 | 0 | None | - |
| Shade/Troldesh links | Jan 25th, 2019 | Never | 1,937 | 0 | None | - |
| Shade/Troldesh links | Jan 24th, 2019 | Never | 378 | 0 | None | - |
| install.bat | Jan 23rd, 2019 | Never | 584 | 0 | None | - |
| Hancitor Jan 23 | Jan 23rd, 2019 | Never | 1,226 | 0 | None | - |
| VNCOLD yara sig | Jan 23rd, 2019 | Never | 1,041 | 0 | None | - |
| Hancitor Jan 22 | Jan 22nd, 2019 | Never | 2,344 | 0 | None | - |
| Emotet links Jan 22 | Jan 22nd, 2019 | Never | 2,311 | 0 | None | - |
| Peppy yara rule | Jan 21st, 2019 | Never | 579 | 0 | None | - |
| Agenttesla new yara | Jan 21st, 2019 | Never | 685 | 0 | None | - |
| Hancitor Jan 17 | Jan 17th, 2019 | Never | 728 | 0 | None | - |
| Async RAT v1.8 snort suricata | Jan 17th, 2019 | Never | 652 | 0 | None | - |
| Emotet links Jan 15 | Jan 15th, 2019 | Never | 2,261 | 0 | None | - |
| SASL burst brute #2 Submission | Jan 14th, 2019 | Never | 575 | 0 | None | - |
| SASL burst brute #2 | Jan 14th, 2019 | Never | 600 | 0 | None | - |
| Qealler Loader sig | Jan 14th, 2019 | Never | 635 | 0 | None | - |
| Emotet links Jan 14 | Jan 14th, 2019 | Never | 2,250 | 0 | None | - |
| Hancitor Jan 14 | Jan 14th, 2019 | Never | 956 | 0 | None | - |
| SASL burst brute | Jan 13th, 2019 | Never | 536 | 0 | None | - |
| NSIS DLL loader | Jan 13th, 2019 | Never | 554 | 0 | None | - |
| Initial assessment | Jan 11th, 2019 | Never | 1,084 | 0 | None | - |
| Kutaki yara | Jan 7th, 2019 | Never | 647 | 0 | None | - |
| Jscript Bot | Jan 6th, 2019 | Never | 934 | 0 | None | - |
| SASL brutes | Jan 5th, 2019 | Never | 507 | 0 | None | - |
| 6 Months of Malware | Jan 4th, 2019 | Never | 975 | 0 | None | - |
| Ping rules | Jan 4th, 2019 | Never | 611 | 0 | None | - |
| TitanFox Loader sig | Jan 4th, 2019 | Never | 792 | 0 | None | - |
| NewDDOSBot | Jan 3rd, 2019 | Never | 1,154 | 0 | None | - |
| Powershell Ransomware | Jan 3rd, 2019 | Never | 750 | 0 | None | - |
| Netsupport | Dec 31st, 2018 | Never | 472 | 0 | None | - |
| Electrum domains | Dec 28th, 2018 | Never | 635 | 0 | None | - |
| ServSelper | Dec 26th, 2018 | Never | 1,211 | 0 | None | - |
| Emotet links Dec 22/23 | Dec 23rd, 2018 | Never | 1,025 | 0 | None | - |
| Emotet links Dec 21 | Dec 21st, 2018 | Never | 2,554 | 0 | None | - |
| Emotet links Dec 20 | Dec 20th, 2018 | Never | 2,248 | 0 | None | - |
| Hancitor Dec 20 | Dec 20th, 2018 | Never | 1,586 | 0 | None | - |
| Gandcrab domains | Dec 19th, 2018 | Never | 578 | 0 | None | - |
| Emotet links Dec 19 | Dec 19th, 2018 | Never | 2,946 | 0 | None | - |
| Hancitor Dec 19 | Dec 19th, 2018 | Never | 780 | 0 | None | - |
| Trickbot config | Dec 18th, 2018 | Never | 432 | 0 | None | - |
| Emotet links Dec 18 | Dec 18th, 2018 | Never | 2,569 | 0 | None | - |
| Hancitor Dec 18 | Dec 18th, 2018 | Never | 918 | 0 | None | - |
| Formbook domains | Dec 17th, 2018 | Never | 451 | 0 | None | - |
| Hancitor Dec 17 | Dec 17th, 2018 | Never | 1,038 | 0 | None | - |
| Emotet links Dec 17 | Dec 17th, 2018 | Never | 2,222 | 0 | None | - |
| Emotet links Dec 15 | Dec 15th, 2018 | Never | 944 | 0 | None | - |
| AveMaria yara | Dec 14th, 2018 | Never | 512 | 0 | None | - |
| AvaMaria snort suricata | Dec 14th, 2018 | Never | 601 | 0 | None | - |
| Emotet links Dec 14 | Dec 14th, 2018 | Never | 3,602 | 0 | None | - |
| Emotet links Dec 13 | Dec 13th, 2018 | Never | 1,264 | 0 | None | - |
| Hancitor Dec 12 | Dec 13th, 2018 | Never | 465 | 0 | None | - |
| Hancitor Dec 13 | Dec 13th, 2018 | Never | 583 | 0 | None | - |
| Emotet links Dec 12 | Dec 12th, 2018 | Never | 3,007 | 0 | None | - |
| Retefe yara sig | Dec 11th, 2018 | Never | 513 | 0 | None | - |
| Emotet links Dec 11 | Dec 11th, 2018 | Never | 2,928 | 0 | None | - |
| Further decoded | Dec 11th, 2018 | Never | 431 | 0 | None | - |
| Hancitor Dec 11 | Dec 11th, 2018 | Never | 990 | 0 | None | - |
| Formbook Domains | Dec 11th, 2018 | Never | 455 | 0 | None | - |
| SASL brutes | Dec 10th, 2018 | Never | 460 | 0 | None | - |
| Emotet links Dec 10 | Dec 10th, 2018 | Never | 2,725 | 0 | None | - |
| Firefoxx64 stealer yara sig | Dec 10th, 2018 | Never | 616 | 0 | None | - |
| Hancitor Dec 10 | Dec 10th, 2018 | Never | 636 | 0 | None | - |
| Netwire hosts | Dec 9th, 2018 | Never | 477 | 0 | None | - |
| Emotet links Dec 8 | Dec 8th, 2018 | Never | 1,154 | 0 | None | - |
| FF49PreemUp yara | Dec 7th, 2018 | Never | 454 | 0 | None | - |
| Emotet links Dec 7 | Dec 7th, 2018 | Never | 2,765 | 0 | None | - |
| Hancitor Dec 6 | Dec 6th, 2018 | Never | 423 | 0 | None | - |
| Emotet links Dec 6 | Dec 6th, 2018 | Never | 2,155 | 0 | None | - |
| DNSpionage yara | Dec 5th, 2018 | Never | 426 | 0 | None | - |
| Emotet links Dec 5 | Dec 5th, 2018 | Never | 2,400 | 0 | None | - |
| Hancitor Dec 5 | Dec 5th, 2018 | Never | 1,312 | 0 | None | - |
