Versions (4)
Version DetailsCurrent
Rev: 6 • Sep 25, 2014, 12:00 PMET MALWARE Infostealer.Boleteiro checking stolen boleto payment information
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Infostealer.Boleteiro checking stolen boleto payment information"; flow:to_server,established; http.uri; content:"Vencimento="; fast_pattern; content:"&Valor="; content:"&Sacado="; content:"&URL="; content:"&Browser=Chrome"; reference:md5,3cffb955c08f6c1546bfeae37a215787; reference:url,symantec.com/security_response/writeup.jsp?docid=2014-091718-2034-99&tabid=2; classtype:command-and-control; sid:2019243; rev:6; metadata:created_at 2014_09_25, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_09_25;)
Sep 25, 2014, 12:00 PM
Sep 25, 2020, 12:00 PM
Sep 21, 2024, 3:00 AM
Oct 20, 2025, 3:34 PM
rules/emerging-malware.rules