Back to Rule

Rule History

SID: 2018017 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 5Jan 28, 2014, 12:00 PM

ET MALWARE Predator Logger Sending Data over SMTP

alert tcp $HOME_NET any -> $EXTERNAL_NET [25,587,2525] (msg:"ET MALWARE Predator Logger Sending Data over SMTP"; flow:to_server,established; content:"Subject|3a 20|Predator Logger|20|"; fast_pattern; reference:md5,91f885e08d627097fb1116a3d4634b82; reference:url,stopmalvertising.com/malware-reports/analysis-of-the-predator-pain-keylogger.html; classtype:trojan-activity; sid:2018017; rev:5; metadata:created_at 2014_01_28, deprecation_reason Age, signature_severity Major, updated_at 2024_02_09, reviewed_at 2024_02_09;)

Jan 28, 2014, 12:00 PM

Feb 9, 2024, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-malware.rules