Back to Rule

Rule History

SID: 2014139 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 8Jan 21, 2012, 12:00 PM

ET MALWARE Query to Known CnC Domain msnsolution.nicaze.net

alert dns $HOME_NET any -> any any (msg:"ET MALWARE Query to Known CnC Domain msnsolution.nicaze.net"; dns.query; content:"icaze.net"; depth:9; fast_pattern; endswith; reference:md5,89332c92d0360095e2dda8385d400258; classtype:command-and-control; sid:2014139; rev:8; metadata:created_at 2012_01_21, confidence High, signature_severity Major, updated_at 2020_09_17;)

Jan 21, 2012, 12:00 PM

Sep 17, 2020, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-malware.rules