Versions (3)
Version DetailsCurrent
Rev: 3 • Sep 19, 2012, 12:00 PMET MALWARE Mirage Campaign checkin
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Mirage Campaign checkin"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/result?hl="; depth:11; content:"&meta="; distance:0; http.request_body; content:"Mjtdkj"; depth:6; reference:md5,ce1cdc9c95a6808945f54164b2e4d9d2; reference:url,secureworks.com/research/threats/the-mirage-campaign/; classtype:command-and-control; sid:2015714; rev:3; metadata:created_at 2012_09_19, signature_severity Major, updated_at 2020_04_22;)
Sep 19, 2012, 12:00 PM
Apr 22, 2020, 12:00 PM
Sep 19, 2012, 12:00 PM
Sep 10, 2024, 1:01 PM
rules/emerging-malware.rules