Versions (3)
Version DetailsCurrent
Rev: 6 • Jul 12, 2012, 12:00 PMET MALWARE Generic - 8Char.JAR Naming Algorithm
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE Generic - 8Char.JAR Naming Algorithm"; flow:established,to_client; http.header; content:"-Disposition|3a 20|inline"; nocase; content:".jar"; fast_pattern; pcre:"/[=\"]\w{8}\.jar/i"; file.data; content:"PK"; depth:2; classtype:trojan-activity; sid:2015050; rev:6; metadata:created_at 2012_07_12, confidence Medium, signature_severity Major, updated_at 2020_11_05;)
Jul 12, 2012, 12:00 PM
Nov 5, 2020, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-malware.rules