Rule History

alert tcp $HOME_NET any -> $EXTERNAL_NET 1024: (msg:"ET MALWARE Trojan.Delf-5496 Checkin Error"; flow:established,to_server; dsize:350<>450; content:"Erorr File active\;sorry file erorr plaes down file agen"; classtype:command-and-control; sid:2008905; rev:3; metadata:created_at 2010_07_30, signature_severity Major, updated_at 2019_07_26;)