Ruleset Update Summary - 2024/06/21 - v10624

Ruleset Updates
1

Summary:

17 new OPEN, 17 new PRO (17 + 0)

Thanks @Jane_0sint

Added rules:

Open:

  • 2053784 - ET EXPLOIT_KIT ClearFake Domain in DNS Lookup (ryruhuu3 .xyz) (exploit_kit.rules)
  • 2053785 - ET EXPLOIT_KIT ClearFake Domain in TLS SNI (ryruhuu3 .xyz) (exploit_kit.rules)
  • 2053786 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (intensedefense300 .com) (exploit_kit.rules)
  • 2053787 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (intensedefense300 .com) (exploit_kit.rules)
  • 2053788 - ET MALWARE DNS Query to ClickFix Domain (cleanway .5asec .fr) (malware.rules)
  • 2053789 - ET MALWARE Observed ClickFix Domain (cleanway .5asec .fr in TLS SNI) (malware.rules)
  • 2053790 - ET MALWARE [ANY.RUN] NjRat (tXRAT v.2.3R) Client Sends State Active Window (malware.rules)
  • 2053791 - ET MALWARE [ANY.RUN] NjRat (tXRAT v.2.3R) Server Sends Plugin to Client (malware.rules)
  • 2053792 - ET MALWARE [ANY.RUN] NjRat (tXRAT v.2.3R) Client Sends Check-in Packet (malware.rules)
  • 2053793 - ET INFO DYNAMIC_DNS Query to a *.michiganbowling .com Domain (info.rules)
  • 2053794 - ET INFO DYNAMIC_DNS HTTP Request to a *.michiganbowling .com Domain (info.rules)
  • 2053795 - ET INFO DYNAMIC_DNS Query to a *.manoahinvest .com Domain (info.rules)
  • 2053796 - ET INFO DYNAMIC_DNS HTTP Request to a *.manoahinvest .com Domain (info.rules)
  • 2053797 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (accumulationeyerwos .shop) (malware.rules)
  • 2053798 - ET MALWARE Observed Lumma Stealer Related Domain (accumulationeyerwos .shop in TLS SNI) (malware.rules)
  • 2053799 - ET MOBILE_MALWARE Android Rafel RAT Checkin M1 (mobile_malware.rules)
  • 2053800 - ET MOBILE_MALWARE Android Rafel RAT Checkin M2 (mobile_malware.rules)

Modified inactive rules:

  • 2053723 - ET INFO DYNAMIC_DNS Query to a *.dyndns-at-home .com Domain (info.rules)
  • 2053724 - ET INFO DYNAMIC_DNS HTTP Request to a *.dyndns-at-home .com Domain (info.rules)
  • 2853389 - ETPRO HUNTING Common Java RCE Gadgets Observed M1 (hunting.rules)
  • 2853390 - ETPRO HUNTING Common Java RCE Gadgets Observed M2 (hunting.rules)
  • 2853391 - ETPRO HUNTING Common Java RCE Gadgets Observed M3 (hunting.rules)
  • 2853392 - ETPRO HUNTING Common Java RCE Gadgets Observed M4 (hunting.rules)
  • 2853393 - ETPRO HUNTING Common Java RCE Gadgets Observed M5 (hunting.rules)
  • 2853394 - ETPRO HUNTING Common Java RCE Gadgets Observed M6 (hunting.rules)
  • 2853395 - ETPRO HUNTING Common Java RCE Gadgets Observed M7 (hunting.rules)
  • 2853396 - ETPRO HUNTING Common Java RCE Gadgets Observed M8 (hunting.rules)
  • 2853397 - ETPRO HUNTING Common Java RCE Gadgets Observed M9 (hunting.rules)
  • 2853398 - ETPRO HUNTING Common Java RCE Gadgets Observed M10 (hunting.rules)
  • 2853399 - ETPRO HUNTING Common Java RCE Gadgets Observed M11 (hunting.rules)
  • 2853400 - ETPRO HUNTING Common Java RCE Gadgets Observed M12 (hunting.rules)
  • 2853401 - ETPRO HUNTING Common Java RCE Gadgets Observed M13 (hunting.rules)
  • 2853402 - ETPRO HUNTING Common Java RCE Gadgets Observed M14 (hunting.rules)
  • 2853403 - ETPRO HUNTING Common Java RCE Gadgets Observed M15 (hunting.rules)
  • 2853404 - ETPRO HUNTING Common Java RCE Gadgets Observed M16 (hunting.rules)
  • 2853405 - ETPRO HUNTING Common Java RCE Gadgets Observed M17 (hunting.rules)
  • 2853406 - ETPRO HUNTING Common Java RCE Gadgets Observed M18 (hunting.rules)
  • 2853407 - ETPRO HUNTING Common Java RCE Gadgets Observed M19 (hunting.rules)
  • 2853408 - ETPRO HUNTING Common Java RCE Gadgets Observed M20 (hunting.rules)
  • 2853409 - ETPRO HUNTING Common Java RCE Gadgets Observed M21 (hunting.rules)
  • 2853410 - ETPRO HUNTING Common Java RCE Gadgets Observed M22 (hunting.rules)
  • 2853411 - ETPRO HUNTING Common Java RCE Gadgets Observed M23 (hunting.rules)
  • 2853412 - ETPRO HUNTING Common Java RCE Gadgets Observed M24 (hunting.rules)
  • 2853413 - ETPRO HUNTING Common Java RCE Gadgets Observed M25 (hunting.rules)
  • 2853414 - ETPRO HUNTING Common Java RCE Gadgets Observed M26 (hunting.rules)
  • 2853415 - ETPRO HUNTING Common Java RCE Gadgets Observed M27 (hunting.rules)
  • 2853416 - ETPRO HUNTING Common Java RCE Gadgets Observed M28 (hunting.rules)
  • 2853417 - ETPRO HUNTING Common Java RCE Gadgets Observed M29 (hunting.rules)
  • 2853418 - ETPRO HUNTING Common Java RCE Gadgets Observed M30 (hunting.rules)
  • 2853419 - ETPRO HUNTING Common Java RCE Gadgets Observed M31 (hunting.rules)
  • 2853420 - ETPRO HUNTING Common Java RCE Gadgets Observed M32 (hunting.rules)
  • 2853421 - ETPRO HUNTING Common Java RCE Gadgets Observed M33 (hunting.rules)
  • 2853422 - ETPRO HUNTING Common Java RCE Gadgets Observed M34 (hunting.rules)
  • 2853423 - ETPRO HUNTING Common Java RCE Gadgets Observed M35 (hunting.rules)
  • 2853424 - ETPRO HUNTING Common Java RCE Gadgets Observed M36 (hunting.rules)
  • 2853425 - ETPRO HUNTING Common Java RCE Gadgets Observed M37 (hunting.rules)
  • 2853426 - ETPRO HUNTING Common Java RCE Gadgets Observed M38 (hunting.rules)
  • 2853427 - ETPRO HUNTING Common Java RCE Gadgets Observed M39 (hunting.rules)
  • 2853428 - ETPRO HUNTING Common Java RCE Gadgets Observed M40 (hunting.rules)
  • 2853429 - ETPRO HUNTING Common Java RCE Gadgets Observed M41 (hunting.rules)
  • 2853430 - ETPRO HUNTING Common Java RCE Gadgets Observed M42 (hunting.rules)
  • 2853431 - ETPRO HUNTING Common Java RCE Gadgets Observed M43 (hunting.rules)
  • 2853432 - ETPRO HUNTING Common Java RCE Gadgets Observed M44 (hunting.rules)
  • 2853433 - ETPRO HUNTING Common Java RCE Gadgets Observed M45 (hunting.rules)
  • 2853434 - ETPRO HUNTING Common Java RCE Gadgets Observed M46 (hunting.rules)
  • 2853435 - ETPRO HUNTING Common Java RCE Gadgets Observed M47 (hunting.rules)
  • 2853436 - ETPRO HUNTING Common Java RCE Gadgets Observed M48 (hunting.rules)
  • 2853437 - ETPRO HUNTING Common Java RCE Gadgets Observed M49 (hunting.rules)
  • 2853438 - ETPRO HUNTING Common Java RCE Gadgets Observed M50 (hunting.rules)
  • 2853439 - ETPRO HUNTING Common Java RCE Gadgets Observed M51 (hunting.rules)
  • 2853440 - ETPRO HUNTING Common Java RCE Gadgets Observed M52 (hunting.rules)
  • 2853441 - ETPRO HUNTING Common Java RCE Gadgets Observed M53 (hunting.rules)
  • 2853442 - ETPRO HUNTING Common Java RCE Gadgets Observed M54 (hunting.rules)
  • 2853443 - ETPRO HUNTING Common Java RCE Gadgets Observed M55 (hunting.rules)
  • 2853444 - ETPRO HUNTING Common Java RCE Gadgets Observed M56 (hunting.rules)
  • 2853445 - ETPRO HUNTING Common Java RCE Gadgets Observed M57 (hunting.rules)
  • 2853446 - ETPRO HUNTING Common Java RCE Gadgets Observed M58 (hunting.rules)
  • 2853447 - ETPRO HUNTING Common Java RCE Gadgets Observed M59 (hunting.rules)
  • 2853448 - ETPRO HUNTING Common Java RCE Gadgets Observed M60 (hunting.rules)
  • 2853449 - ETPRO HUNTING Common Java RCE Gadgets Observed M61 (hunting.rules)
  • 2853450 - ETPRO HUNTING Common Java RCE Gadgets Observed M62 (hunting.rules)
  • 2853451 - ETPRO HUNTING Common Java RCE Gadgets Observed M63 (hunting.rules)
  • 2853452 - ETPRO HUNTING Common Java RCE Gadgets Observed M64 (hunting.rules)
  • 2853453 - ETPRO HUNTING Common Java RCE Gadgets Observed M65 (hunting.rules)
  • 2853454 - ETPRO HUNTING Common Java RCE Gadgets Observed M66 (hunting.rules)
  • 2853455 - ETPRO HUNTING Common Java RCE Gadgets Observed M67 (hunting.rules)
  • 2853456 - ETPRO HUNTING Common Java RCE Gadgets Observed M68 (hunting.rules)
  • 2853457 - ETPRO HUNTING Common Java RCE Gadgets Observed M69 (hunting.rules)
  • 2853458 - ETPRO HUNTING Common Java RCE Gadgets Observed M70 (hunting.rules)
  • 2853459 - ETPRO HUNTING Common Java RCE Gadgets Observed M71 (hunting.rules)
  • 2853460 - ETPRO HUNTING Common Java RCE Gadgets Observed M72 (hunting.rules)
  • 2853461 - ETPRO HUNTING Common Java RCE Gadgets Observed M73 (hunting.rules)
  • 2853462 - ETPRO HUNTING Common Java RCE Gadgets Observed M74 (hunting.rules)
  • 2853463 - ETPRO HUNTING Common Java RCE Gadgets Observed M75 (hunting.rules)
  • 2853464 - ETPRO HUNTING Common Java RCE Gadgets Observed M76 (hunting.rules)
  • 2853465 - ETPRO HUNTING Common Java RCE Gadgets Observed M77 (hunting.rules)
  • 2853466 - ETPRO HUNTING Common Java RCE Gadgets Observed M78 (hunting.rules)
  • 2853467 - ETPRO HUNTING Common Java RCE Gadgets Observed M79 (hunting.rules)
  • 2853468 - ETPRO HUNTING Common Java RCE Gadgets Observed M80 (hunting.rules)
  • 2853469 - ETPRO HUNTING Common Java RCE Gadgets Observed M81 (hunting.rules)
  • 2853470 - ETPRO HUNTING Common Java RCE Gadgets Observed M82 (hunting.rules)
  • 2853471 - ETPRO HUNTING Common Java RCE Gadgets Observed M83 (hunting.rules)
  • 2853472 - ETPRO HUNTING Common Java RCE Gadgets Observed M84 (hunting.rules)
  • 2853473 - ETPRO HUNTING Common Java RCE Gadgets Observed M85 (hunting.rules)
  • 2853474 - ETPRO HUNTING Common Java RCE Gadgets Observed M86 (hunting.rules)
  • 2853475 - ETPRO HUNTING Common Java RCE Gadgets Observed M87 (hunting.rules)
  • 2853476 - ETPRO HUNTING Common Java RCE Gadgets Observed M88 (hunting.rules)
  • 2853477 - ETPRO HUNTING Common Java RCE Gadgets Observed M89 (hunting.rules)
  • 2853478 - ETPRO HUNTING Common Java RCE Gadgets Observed M90 (hunting.rules)
  • 2853479 - ETPRO HUNTING Common Java RCE Gadgets Observed M91 (hunting.rules)
  • 2853480 - ETPRO HUNTING Common Java RCE Gadgets Observed M92 (hunting.rules)
  • 2853481 - ETPRO HUNTING Common Java RCE Gadgets Observed M93 (hunting.rules)
  • 2853482 - ETPRO HUNTING Common Java RCE Gadgets Observed M95 (hunting.rules)
  • 2853483 - ETPRO HUNTING Common Java RCE Gadgets Observed M96 (hunting.rules)
  • 2853484 - ETPRO HUNTING Common Java RCE Gadgets Observed M97 (hunting.rules)
  • 2853485 - ETPRO HUNTING Common Java RCE Gadgets Observed M98 (hunting.rules)
  • 2853486 - ETPRO HUNTING Common Java RCE Gadgets Observed M99 (hunting.rules)
  • 2853487 - ETPRO HUNTING Common Java RCE Gadgets Observed M100 (hunting.rules)
  • 2853488 - ETPRO HUNTING Common Java RCE Gadgets Observed M101 (hunting.rules)
  • 2853489 - ETPRO HUNTING Common Java RCE Gadgets Observed M102 (hunting.rules)
  • 2853490 - ETPRO HUNTING Common Java RCE Gadgets Observed M103 (hunting.rules)
  • 2853491 - ETPRO HUNTING Common Java RCE Gadgets Observed M104 (hunting.rules)
  • 2853492 - ETPRO HUNTING Common Java RCE Gadgets Observed M105 (hunting.rules)
  • 2853493 - ETPRO HUNTING Common Java RCE Gadgets Observed M106 (hunting.rules)
  • 2853494 - ETPRO HUNTING Common Java RCE Gadgets Observed M107 (hunting.rules)
  • 2853495 - ETPRO HUNTING Common Java RCE Gadgets Observed M108 (hunting.rules)
  • 2853496 - ETPRO HUNTING Common Java RCE Gadgets Observed M109 (hunting.rules)
  • 2853497 - ETPRO HUNTING Common Java RCE Gadgets Observed M110 (hunting.rules)
  • 2853498 - ETPRO HUNTING Common Java RCE Gadgets Observed M111 (hunting.rules)
  • 2853499 - ETPRO HUNTING Common Java RCE Gadgets Observed M112 (hunting.rules)
  • 2853500 - ETPRO HUNTING Common Java RCE Gadgets Observed M113 (hunting.rules)
  • 2853501 - ETPRO HUNTING Common Java RCE Gadgets Observed M114 (hunting.rules)
  • 2853502 - ETPRO HUNTING Common Java RCE Gadgets Observed M115 (hunting.rules)
  • 2853503 - ETPRO HUNTING Common Java RCE Gadgets Observed M116 (hunting.rules)
  • 2853504 - ETPRO HUNTING Common Java RCE Gadgets Observed M117 (hunting.rules)
  • 2854017 - ETPRO HUNTING Common Java RCE Gadgets Observed M119 (hunting.rules)
  • 2854018 - ETPRO HUNTING Common Java RCE Gadgets Observed M121 (hunting.rules)
  • 2854019 - ETPRO HUNTING Common Java RCE Gadgets Observed M122 (hunting.rules)
  • 2854020 - ETPRO HUNTING Common Java RCE Gadgets Observed M123 (hunting.rules)
  • 2854021 - ETPRO HUNTING Common Java RCE Gadgets Observed M120 (hunting.rules)
  • 2854022 - ETPRO HUNTING Common Java RCE Gadgets Observed M124 (hunting.rules)
  • 2854023 - ETPRO HUNTING Common Java RCE Gadgets Observed M125 (hunting.rules)
  • 2854024 - ETPRO HUNTING Common Java RCE Gadgets Observed M126 (hunting.rules)
  • 2854025 - ETPRO HUNTING Common Java RCE Gadgets Observed M127 (hunting.rules)
  • 2854026 - ETPRO HUNTING Common Java RCE Gadgets Observed M128 (hunting.rules)
  • 2854027 - ETPRO HUNTING Common Java RCE Gadgets Observed M129 (hunting.rules)
  • 2854028 - ETPRO HUNTING Common Java RCE Gadgets Observed M130 (hunting.rules)
  • 2854029 - ETPRO HUNTING Common Java RCE Gadgets Observed M131 (hunting.rules)
  • 2854030 - ETPRO HUNTING Common Java RCE Gadgets Observed M132 (hunting.rules)
  • 2854031 - ETPRO HUNTING Common Java RCE Gadgets Observed M133 (hunting.rules)
  • 2854032 - ETPRO HUNTING Common Java RCE Gadgets Observed M134 (hunting.rules)
  • 2854033 - ETPRO HUNTING Common Java RCE Gadgets Observed M135 (hunting.rules)
  • 2854034 - ETPRO HUNTING Common Java RCE Gadgets Observed M136 (hunting.rules)
  • 2854035 - ETPRO HUNTING Common Java RCE Gadgets Observed M138 (hunting.rules)
  • 2854036 - ETPRO HUNTING Common Java RCE Gadgets Observed M139 (hunting.rules)
  • 2854037 - ETPRO HUNTING Common Java RCE Gadgets Observed M140 (hunting.rules)
  • 2854038 - ETPRO HUNTING Common Java RCE Gadgets Observed M141 (hunting.rules)
  • 2854039 - ETPRO HUNTING Common Java RCE Gadgets Observed M142 (hunting.rules)
  • 2854040 - ETPRO HUNTING Common Java RCE Gadgets Observed M143 (hunting.rules)
  • 2854041 - ETPRO HUNTING Common Java RCE Gadgets Observed M144 (hunting.rules)
  • 2854042 - ETPRO HUNTING Common Java RCE Gadgets Observed M145 (hunting.rules)
  • 2854043 - ETPRO HUNTING Common Java RCE Gadgets Observed M146 (hunting.rules)
  • 2854044 - ETPRO HUNTING Common Java RCE Gadgets Observed M147 (hunting.rules)
  • 2854045 - ETPRO HUNTING Common Java RCE Gadgets Observed M148 (hunting.rules)
  • 2854046 - ETPRO HUNTING Common Java RCE Gadgets Observed M149 (hunting.rules)
  • 2854047 - ETPRO HUNTING Common Java RCE Gadgets Observed M150 (hunting.rules)
  • 2854048 - ETPRO HUNTING Common Java RCE Gadgets Observed M151 (hunting.rules)
  • 2854049 - ETPRO HUNTING Common Java RCE Gadgets Observed M152 (hunting.rules)
  • 2854050 - ETPRO HUNTING Common Java RCE Gadgets Observed M153 (hunting.rules)
  • 2854051 - ETPRO HUNTING Common Java RCE Gadgets Observed M154 (hunting.rules)
  • 2854052 - ETPRO HUNTING Common Java RCE Gadgets Observed M155 (hunting.rules)
  • 2854053 - ETPRO HUNTING Common Java RCE Gadgets Observed M156 (hunting.rules)
  • 2854054 - ETPRO HUNTING Common Java RCE Gadgets Observed M137 (hunting.rules)