Versions (2)
Version DetailsCurrent
Rev: 3 • Sep 29, 2014, 12:00 PMET MALWARE Sourtoff Download Simda Request
alert tcp $HOME_NET ![23,25,80,137,139,445] -> $EXTERNAL_NET 20000: (msg:"ET MALWARE Sourtoff Download Simda Request"; flow:established,to_server; dsize:18; content:"|0a 10|"; depth:2; flowbits:set,ET.TROJAN.Sourtoff; flowbits:noalert; reference:md5,5469af0daa10f8acbe552cd2f1f6a6bb; classtype:trojan-activity; sid:2019312; rev:3; metadata:created_at 2014_09_29, signature_severity Major, updated_at 2019_07_26;)
Sep 29, 2014, 12:00 PM
Jul 26, 2019, 12:00 PM
Sep 29, 2014, 12:00 PM
Sep 10, 2024, 1:01 PM
rules/emerging-malware.rules