Snort - Network Intrusion Detection & Prevention System

1-16804 - MALWARE-CNC Win.Trojan.Qakbot.E - initial load Rule
1-16805 - MALWARE-CNC Win.Trojan.Qakbot.E config check Rule
1-16808 - MALWARE-CNC Win.Trojan.Qakbot.E - register client Rule
1-52339 - MALWARE-OTHER Win.Dropper.Qakbot-7058183-0 download attempt Rule
1-52340 - MALWARE-OTHER Win.Dropper.Qakbot-7058183-0 download attempt Rule
1-16806 - MALWARE-CNC Win.Trojan.Qakbot.E - FTP upload seclog Rule
1-16807 - MALWARE-CNC Win.Trojan.Qakbot.E - FTP Upload ps_dump Rule
1-28990 - MALWARE-CNC Win.Trojan.Qakbot connection to cnc server Rule
1-28991 - MALWARE-CNC Win.Trojan.Qakbot FTP data exfiltration Rule
1-58903 - MALWARE-CNC Win.Trojan.Qakbot variant beaconing attempt Rule
1-58904 - MALWARE-CNC Win.Trojan.Qakbot variant beaconing attempt Rule
1-58949 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection Rule
1-60057 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection Rule
1-38607 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection Rule
1-39063 - MALWARE-CNC Win.Trojan.Qakbot outbound POST attempt Rule
1-61670 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt Rule
1-61671 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt Rule
1-300517 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt Rule
1-38606 - MALWARE-CNC Win.Trojan.Qakbot variant network speed test Rule
1-49034 - MALWARE-CNC Win.Trojan.Qakbot malicious executable download attempt Rule
1-49035 - MALWARE-CNC Win.Trojan.Qakbot malicious executable download attempt Rule
1-49941 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection attempt Rule
1-61668 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt Rule
1-61669 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt Rule
1-300516 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt Rule
Talos Rules 2022-01-18 - This release adds and modifies rules in several categories. Advisory
Talos Rules 2022-01-18 - This release adds and modifies rules in several categories. Advisory
Talos Rules 2022-01-18 - This release adds and modifies rules in several categories. Advisory
Talos Rules 2022-01-18 - This release adds and modifies rules in several categories. Advisory
Talos Rules 2022-01-18 - This release adds and modifies rules in several categories. Advisory

Snort Search

1-16804 - MALWARE-CNC Win.Trojan.Qakbot.E - initial load

1-16805 - MALWARE-CNC Win.Trojan.Qakbot.E config check

1-16808 - MALWARE-CNC Win.Trojan.Qakbot.E - register client

1-52339 - MALWARE-OTHER Win.Dropper.Qakbot-7058183-0 download attempt

1-52340 - MALWARE-OTHER Win.Dropper.Qakbot-7058183-0 download attempt

1-16806 - MALWARE-CNC Win.Trojan.Qakbot.E - FTP upload seclog

1-16807 - MALWARE-CNC Win.Trojan.Qakbot.E - FTP Upload ps_dump

1-28990 - MALWARE-CNC Win.Trojan.Qakbot connection to cnc server

1-28991 - MALWARE-CNC Win.Trojan.Qakbot FTP data exfiltration

1-58903 - MALWARE-CNC Win.Trojan.Qakbot variant beaconing attempt

1-58904 - MALWARE-CNC Win.Trojan.Qakbot variant beaconing attempt

1-58949 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection

1-60057 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection

1-38607 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection

1-39063 - MALWARE-CNC Win.Trojan.Qakbot outbound POST attempt

1-61670 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt

1-61671 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt

1-300517 - MALWARE-OTHER One.Dropper.Qakbot variant binary download attempt

1-38606 - MALWARE-CNC Win.Trojan.Qakbot variant network speed test

1-49034 - MALWARE-CNC Win.Trojan.Qakbot malicious executable download attempt

1-49035 - MALWARE-CNC Win.Trojan.Qakbot malicious executable download attempt

1-49941 - MALWARE-CNC Win.Trojan.Qakbot variant outbound connection attempt

1-61668 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt

1-61669 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt

1-300516 - MALWARE-OTHER Win.Trojan.IcedID variant binary download attempt

Talos Rules 2022-01-18 - This release adds and modifies rules in several categories.

Talos Rules 2022-01-18 - This release adds and modifies rules in several categories.

Talos Rules 2022-01-18 - This release adds and modifies rules in several categories.

Talos Rules 2022-01-18 - This release adds and modifies rules in several categories.

Talos Rules 2022-01-18 - This release adds and modifies rules in several categories.