Back to Rule

Rule History

SID: 2018664 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 7Jan 22, 2014, 12:00 PM

ET MALWARE Minirem

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Minirem"; flow:established,to_server; urilen:>18; http.method; content:"GET"; http.uri; content:"/FC001/"; fast_pattern; depth:7; http.user_agent; content:"Microsoft Internet Explorer"; reference:md5,d92075280872b9fe4f541f090bf0076c; classtype:trojan-activity; sid:2018664; rev:7; metadata:created_at 2014_01_22, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_04_30;)

Jan 22, 2014, 12:00 PM

Apr 30, 2020, 12:00 PM

Jan 22, 2014, 12:00 PM

Oct 24, 2025, 9:34 PM

rules/emerging-malware.rules