Back to Rule

Rule History

SID: 2012226 • Source: et/open

Versions (5)

Version DetailsCurrent

Rev: 4Jan 24, 2011, 12:00 PM

ET MALWARE Win32/Banbra Banking Trojan Communication

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Win32/Banbra Banking Trojan Communication"; flow:established,to_server; content:"para="; nocase; content:"titulo="; nocase; distance:0; content:"mensagem="; nocase; distance:0; reference:md5,7ce03717d6879444d8e45b7cf6470c67; classtype:trojan-activity; sid:2012226; rev:4; metadata:created_at 2011_01_24, malware_family Win32_Banbra, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Jan 24, 2011, 12:00 PM

Jul 26, 2019, 12:00 PM

Jan 24, 2011, 12:00 PM

Oct 21, 2025, 10:35 PM

rules/emerging-malware.rules