| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Hancitor Feb 5 | Feb 5th, 2019 | Never | 2,357 | 0 | None | - |
| Shade/Troldesh links | Feb 3rd, 2019 | Never | 1,875 | 0 | None | - |
| Stack testing | Feb 1st, 2019 | Never | 784 | 0 | None | - |
| Powershell empire | Feb 1st, 2019 | Never | 594 | 0 | None | - |
| January Malspam Campaigns | Feb 1st, 2019 | Never | 1,151 | 0 | None | - |
| Snort / Suricata rules | Feb 1st, 2019 | Never | 692 | 0 | None | - |
| Qbot/Qakbot c2's | Jan 30th, 2019 | Never | 2,905 | 0 | None | - |
| Unknown botnet | Jan 29th, 2019 | Never | 1,261 | 0 | None | - |
| DarkComet config | Jan 28th, 2019 | Never | 564 | 0 | None | - |
| Signed azo yara | Jan 28th, 2019 | Never | 466 | 0 | None | - |
| Hancitor Jan 28 | Jan 28th, 2019 | Never | 858 | 0 | None | - |
| uPELoader yara | Jan 27th, 2019 | Never | 962 | 0 | None | - |
| Kewgad yara sig | Jan 27th, 2019 | Never | 860 | 0 | None | - |
| Shade/Troldesh links | Jan 25th, 2019 | Never | 1,921 | 0 | None | - |
| Shade/Troldesh links | Jan 24th, 2019 | Never | 358 | 0 | None | - |
| install.bat | Jan 23rd, 2019 | Never | 573 | 0 | None | - |
| Hancitor Jan 23 | Jan 23rd, 2019 | Never | 1,213 | 0 | None | - |
| VNCOLD yara sig | Jan 23rd, 2019 | Never | 1,024 | 0 | None | - |
| Hancitor Jan 22 | Jan 22nd, 2019 | Never | 2,312 | 0 | None | - |
| Emotet links Jan 22 | Jan 22nd, 2019 | Never | 2,301 | 0 | None | - |
| Peppy yara rule | Jan 21st, 2019 | Never | 567 | 0 | None | - |
| Agenttesla new yara | Jan 21st, 2019 | Never | 670 | 0 | None | - |
| Hancitor Jan 17 | Jan 17th, 2019 | Never | 715 | 0 | None | - |
| Async RAT v1.8 snort suricata | Jan 17th, 2019 | Never | 635 | 0 | None | - |
| Emotet links Jan 15 | Jan 15th, 2019 | Never | 2,250 | 0 | None | - |
| SASL burst brute #2 Submission | Jan 14th, 2019 | Never | 561 | 0 | None | - |
| SASL burst brute #2 | Jan 14th, 2019 | Never | 585 | 0 | None | - |
| Qealler Loader sig | Jan 14th, 2019 | Never | 621 | 0 | None | - |
| Emotet links Jan 14 | Jan 14th, 2019 | Never | 2,231 | 0 | None | - |
| Hancitor Jan 14 | Jan 14th, 2019 | Never | 941 | 0 | None | - |
| SASL burst brute | Jan 13th, 2019 | Never | 521 | 0 | None | - |
| NSIS DLL loader | Jan 13th, 2019 | Never | 537 | 0 | None | - |
| Initial assessment | Jan 11th, 2019 | Never | 1,076 | 0 | None | - |
| Kutaki yara | Jan 7th, 2019 | Never | 632 | 0 | None | - |
| Jscript Bot | Jan 6th, 2019 | Never | 920 | 0 | None | - |
| SASL brutes | Jan 5th, 2019 | Never | 490 | 0 | None | - |
| 6 Months of Malware | Jan 4th, 2019 | Never | 961 | 0 | None | - |
| Ping rules | Jan 4th, 2019 | Never | 599 | 0 | None | - |
| TitanFox Loader sig | Jan 4th, 2019 | Never | 778 | 0 | None | - |
| NewDDOSBot | Jan 3rd, 2019 | Never | 1,139 | 0 | None | - |
| Powershell Ransomware | Jan 3rd, 2019 | Never | 737 | 0 | None | - |
| Netsupport | Dec 31st, 2018 | Never | 463 | 0 | None | - |
| Electrum domains | Dec 28th, 2018 | Never | 620 | 0 | None | - |
| ServSelper | Dec 26th, 2018 | Never | 1,197 | 0 | None | - |
| Emotet links Dec 22/23 | Dec 23rd, 2018 | Never | 1,011 | 0 | None | - |
| Emotet links Dec 21 | Dec 21st, 2018 | Never | 2,534 | 0 | None | - |
| Emotet links Dec 20 | Dec 20th, 2018 | Never | 2,234 | 0 | None | - |
| Hancitor Dec 20 | Dec 20th, 2018 | Never | 1,570 | 0 | None | - |
| Gandcrab domains | Dec 19th, 2018 | Never | 562 | 0 | None | - |
| Emotet links Dec 19 | Dec 19th, 2018 | Never | 2,933 | 0 | None | - |
| Hancitor Dec 19 | Dec 19th, 2018 | Never | 760 | 0 | None | - |
| Trickbot config | Dec 18th, 2018 | Never | 415 | 0 | None | - |
| Emotet links Dec 18 | Dec 18th, 2018 | Never | 2,554 | 0 | None | - |
| Hancitor Dec 18 | Dec 18th, 2018 | Never | 907 | 0 | None | - |
| Formbook domains | Dec 17th, 2018 | Never | 441 | 0 | None | - |
| Hancitor Dec 17 | Dec 17th, 2018 | Never | 1,024 | 0 | None | - |
| Emotet links Dec 17 | Dec 17th, 2018 | Never | 2,207 | 0 | None | - |
| Emotet links Dec 15 | Dec 15th, 2018 | Never | 929 | 0 | None | - |
| AveMaria yara | Dec 14th, 2018 | Never | 496 | 0 | None | - |
| AvaMaria snort suricata | Dec 14th, 2018 | Never | 583 | 0 | None | - |
| Emotet links Dec 14 | Dec 14th, 2018 | Never | 3,591 | 0 | None | - |
| Emotet links Dec 13 | Dec 13th, 2018 | Never | 1,247 | 0 | None | - |
| Hancitor Dec 12 | Dec 13th, 2018 | Never | 452 | 0 | None | - |
| Hancitor Dec 13 | Dec 13th, 2018 | Never | 573 | 0 | None | - |
| Emotet links Dec 12 | Dec 12th, 2018 | Never | 2,990 | 0 | None | - |
| Retefe yara sig | Dec 11th, 2018 | Never | 500 | 0 | None | - |
| Emotet links Dec 11 | Dec 11th, 2018 | Never | 2,916 | 0 | None | - |
| Further decoded | Dec 11th, 2018 | Never | 420 | 0 | None | - |
| Hancitor Dec 11 | Dec 11th, 2018 | Never | 965 | 0 | None | - |
| Formbook Domains | Dec 11th, 2018 | Never | 442 | 0 | None | - |
| SASL brutes | Dec 10th, 2018 | Never | 446 | 0 | None | - |
| Emotet links Dec 10 | Dec 10th, 2018 | Never | 2,708 | 0 | None | - |
| Firefoxx64 stealer yara sig | Dec 10th, 2018 | Never | 602 | 0 | None | - |
| Hancitor Dec 10 | Dec 10th, 2018 | Never | 621 | 0 | None | - |
| Netwire hosts | Dec 9th, 2018 | Never | 469 | 0 | None | - |
| Emotet links Dec 8 | Dec 8th, 2018 | Never | 1,141 | 0 | None | - |
| FF49PreemUp yara | Dec 7th, 2018 | Never | 443 | 0 | None | - |
| Emotet links Dec 7 | Dec 7th, 2018 | Never | 2,749 | 0 | None | - |
| Hancitor Dec 6 | Dec 6th, 2018 | Never | 411 | 0 | None | - |
| Emotet links Dec 6 | Dec 6th, 2018 | Never | 2,145 | 0 | None | - |
| DNSpionage yara | Dec 5th, 2018 | Never | 416 | 0 | None | - |
| Emotet links Dec 5 | Dec 5th, 2018 | Never | 2,382 | 0 | None | - |
| Hancitor Dec 5 | Dec 5th, 2018 | Never | 1,298 | 0 | None | - |
