| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| Hancitor Feb 5 | Feb 5th, 2019 | Never | 2,605 | 0 | None | - |
| Shade/Troldesh links | Feb 3rd, 2019 | Never | 1,992 | 0 | None | - |
| Stack testing | Feb 1st, 2019 | Never | 909 | 0 | None | - |
| Powershell empire | Feb 1st, 2019 | Never | 698 | 0 | None | - |
| January Malspam Campaigns | Feb 1st, 2019 | Never | 1,276 | 0 | None | - |
| Snort / Suricata rules | Feb 1st, 2019 | Never | 809 | 0 | None | - |
| Qbot/Qakbot c2's | Jan 30th, 2019 | Never | 3,026 | 0 | None | - |
| Unknown botnet | Jan 29th, 2019 | Never | 1,399 | 0 | None | - |
| DarkComet config | Jan 28th, 2019 | Never | 692 | 0 | None | - |
| Signed azo yara | Jan 28th, 2019 | Never | 582 | 0 | None | - |
| Hancitor Jan 28 | Jan 28th, 2019 | Never | 978 | 0 | None | - |
| uPELoader yara | Jan 27th, 2019 | Never | 1,113 | 0 | None | - |
| Kewgad yara sig | Jan 27th, 2019 | Never | 958 | 0 | None | - |
| Shade/Troldesh links | Jan 25th, 2019 | Never | 2,036 | 0 | None | - |
| Shade/Troldesh links | Jan 24th, 2019 | Never | 466 | 0 | None | - |
| install.bat | Jan 23rd, 2019 | Never | 703 | 0 | None | - |
| Hancitor Jan 23 | Jan 23rd, 2019 | Never | 1,321 | 0 | None | - |
| VNCOLD yara sig | Jan 23rd, 2019 | Never | 1,139 | 0 | None | - |
| Hancitor Jan 22 | Jan 22nd, 2019 | Never | 2,509 | 0 | None | - |
| Emotet links Jan 22 | Jan 22nd, 2019 | Never | 2,405 | 0 | None | - |
| Peppy yara rule | Jan 21st, 2019 | Never | 671 | 0 | None | - |
| Agenttesla new yara | Jan 21st, 2019 | Never | 800 | 0 | None | - |
| Hancitor Jan 17 | Jan 17th, 2019 | Never | 821 | 0 | None | - |
| Async RAT v1.8 snort suricata | Jan 17th, 2019 | Never | 774 | 0 | None | - |
| Emotet links Jan 15 | Jan 15th, 2019 | Never | 2,356 | 0 | None | - |
| SASL burst brute #2 Submission | Jan 14th, 2019 | Never | 669 | 0 | None | - |
| SASL burst brute #2 | Jan 14th, 2019 | Never | 702 | 0 | None | - |
| Qealler Loader sig | Jan 14th, 2019 | Never | 733 | 0 | None | - |
| Emotet links Jan 14 | Jan 14th, 2019 | Never | 2,345 | 0 | None | - |
| Hancitor Jan 14 | Jan 14th, 2019 | Never | 1,053 | 0 | None | - |
| SASL burst brute | Jan 13th, 2019 | Never | 628 | 0 | None | - |
| NSIS DLL loader | Jan 13th, 2019 | Never | 676 | 0 | None | - |
| Initial assessment | Jan 11th, 2019 | Never | 1,187 | 0 | None | - |
| Kutaki yara | Jan 7th, 2019 | Never | 740 | 0 | None | - |
| Jscript Bot | Jan 6th, 2019 | Never | 1,033 | 0 | None | - |
| SASL brutes | Jan 5th, 2019 | Never | 609 | 0 | None | - |
| 6 Months of Malware | Jan 4th, 2019 | Never | 1,097 | 0 | None | - |
| Ping rules | Jan 4th, 2019 | Never | 725 | 0 | None | - |
| TitanFox Loader sig | Jan 4th, 2019 | Never | 908 | 0 | None | - |
| NewDDOSBot | Jan 3rd, 2019 | Never | 1,257 | 0 | None | - |
| Powershell Ransomware | Jan 3rd, 2019 | Never | 853 | 0 | None | - |
| Netsupport | Dec 31st, 2018 | Never | 577 | 0 | None | - |
| Electrum domains | Dec 28th, 2018 | Never | 740 | 0 | None | - |
| ServSelper | Dec 26th, 2018 | Never | 1,320 | 0 | None | - |
| Emotet links Dec 22/23 | Dec 23rd, 2018 | Never | 1,144 | 0 | None | - |
| Emotet links Dec 21 | Dec 21st, 2018 | Never | 2,658 | 0 | None | - |
| Emotet links Dec 20 | Dec 20th, 2018 | Never | 2,348 | 0 | None | - |
| Hancitor Dec 20 | Dec 20th, 2018 | Never | 1,704 | 0 | None | - |
| Gandcrab domains | Dec 19th, 2018 | Never | 681 | 0 | None | - |
| Emotet links Dec 19 | Dec 19th, 2018 | Never | 3,043 | 0 | None | - |
| Hancitor Dec 19 | Dec 19th, 2018 | Never | 875 | 0 | None | - |
| Trickbot config | Dec 18th, 2018 | Never | 543 | 0 | None | - |
| Emotet links Dec 18 | Dec 18th, 2018 | Never | 2,675 | 0 | None | - |
| Hancitor Dec 18 | Dec 18th, 2018 | Never | 1,003 | 0 | None | - |
| Formbook domains | Dec 17th, 2018 | Never | 556 | 0 | None | - |
| Hancitor Dec 17 | Dec 17th, 2018 | Never | 1,161 | 0 | None | - |
| Emotet links Dec 17 | Dec 17th, 2018 | Never | 2,333 | 0 | None | - |
| Emotet links Dec 15 | Dec 15th, 2018 | Never | 1,063 | 0 | None | - |
| AveMaria yara | Dec 14th, 2018 | Never | 615 | 0 | None | - |
| AvaMaria snort suricata | Dec 14th, 2018 | Never | 696 | 0 | None | - |
| Emotet links Dec 14 | Dec 14th, 2018 | Never | 3,709 | 0 | None | - |
| Emotet links Dec 13 | Dec 13th, 2018 | Never | 1,374 | 0 | None | - |
| Hancitor Dec 12 | Dec 13th, 2018 | Never | 564 | 0 | None | - |
| Hancitor Dec 13 | Dec 13th, 2018 | Never | 657 | 0 | None | - |
| Emotet links Dec 12 | Dec 12th, 2018 | Never | 3,098 | 0 | None | - |
| Retefe yara sig | Dec 11th, 2018 | Never | 611 | 0 | None | - |
| Emotet links Dec 11 | Dec 11th, 2018 | Never | 3,037 | 0 | None | - |
| Further decoded | Dec 11th, 2018 | Never | 511 | 0 | None | - |
| Hancitor Dec 11 | Dec 11th, 2018 | Never | 1,112 | 0 | None | - |
| Formbook Domains | Dec 11th, 2018 | Never | 548 | 0 | None | - |
| SASL brutes | Dec 10th, 2018 | Never | 562 | 0 | None | - |
| Emotet links Dec 10 | Dec 10th, 2018 | Never | 2,828 | 0 | None | - |
| Firefoxx64 stealer yara sig | Dec 10th, 2018 | Never | 693 | 0 | None | - |
| Hancitor Dec 10 | Dec 10th, 2018 | Never | 765 | 0 | None | - |
| Netwire hosts | Dec 9th, 2018 | Never | 579 | 0 | None | - |
| Emotet links Dec 8 | Dec 8th, 2018 | Never | 1,251 | 0 | None | - |
| FF49PreemUp yara | Dec 7th, 2018 | Never | 552 | 0 | None | - |
| Emotet links Dec 7 | Dec 7th, 2018 | Never | 2,863 | 0 | None | - |
| Hancitor Dec 6 | Dec 6th, 2018 | Never | 543 | 0 | None | - |
| Emotet links Dec 6 | Dec 6th, 2018 | Never | 2,230 | 0 | None | - |
| DNSpionage yara | Dec 5th, 2018 | Never | 532 | 0 | None | - |
| Emotet links Dec 5 | Dec 5th, 2018 | Never | 2,509 | 0 | None | - |
| Hancitor Dec 5 | Dec 5th, 2018 | Never | 1,411 | 0 | None | - |
