Скачать или смотреть [pawpatrules.fr] SnakeKeylogger multiple detection methods with Suricata IDS/NSM

For a few weeks now, SnakeKeylogger (also known as 404Keylogger), a .NET based advanced infostealer seems to be really active.
According to Fortiguard Lab, a major peak in SnakeKeylogger detection was observed on August 1, 2024 :

https://www.fortiguard.com/threat-sig...

An interesting analyse of SnakeKeylogger is available here :

https://zw01f.github.io/malware%20ana...
Mirror : https://samples.vx-underground.org/Pa...

PawPatrules offers many rules for detecting SnakeKeylogger actions.

To download PAW Patrules rules collection for Suricata :

https://pawpatrules.fr/

SELKS solution is used in this video : https://www.stamus-networks.com/selks
EveBox is used in this video : https://evebox.org/
Suricata is used in this video : https://suricata.io/