Back to Rule

Rule History

SID: 2019519 • Source: et/open

Versions (6)

Version DetailsCurrent

Rev: 3Oct 27, 2014, 12:00 PM

ET MALWARE Win32/Chanitor.A DNS Lookup

alert dns $HOME_NET any -> any any (msg:"ET MALWARE Win32/Chanitor.A DNS Lookup"; dns_query; content:"svcz25e3m4mwlauz"; depth:16; fast_pattern; nocase; classtype:trojan-activity; sid:2019519; rev:3; metadata:created_at 2014_10_27, malware_family Win32_Chanitor_A, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_08_30;)

Oct 27, 2014, 12:00 PM

Aug 30, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

Oct 3, 2025, 8:34 PM

rules/emerging-malware.rules