Versions (5)
Version DetailsCurrent
Rev: 7 • Jul 30, 2010, 12:00 PMET MALWARE Win32/Nubjub.A HTTP Check-in
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Win32/Nubjub.A HTTP Check-in"; flow:established,to_server; http.method; content:"GET"; depth:3; http.uri; content:".php"; content:"?&mode="; fast_pattern; content:"&id="; content:"&output="; content:"&time="; classtype:trojan-activity; sid:2009521; rev:7; metadata:created_at 2010_07_30, malware_family Win32_Nubjub_A, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_05_01;)
Jul 30, 2010, 12:00 PM
May 1, 2020, 12:00 PM
Jul 30, 2010, 12:00 PM
Dec 12, 2025, 10:34 PM
rules/emerging-malware.rules