Versions (4)
Version DetailsCurrent
Rev: 1 • Nov 26, 2015, 12:00 PMET MALWARE ELF/muBoT IRC Activity 7 (bindshell)
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE ELF/muBoT IRC Activity 7 (bindshell)"; flow:established,from_server; content:"|0a c2 84 c2 9f|muBoT|c2 84 c2 9f|REMOTE|c2 84 c2 9f|SHELL"; reference:url,blog.malwaremustdie.org/2015/11/mmd-0044-2015-source-code-disclosure.html; classtype:trojan-activity; sid:2022190; rev:1; metadata:affected_product Linux, created_at 2015_11_26, malware_family ELF_muBoT, signature_severity Major, updated_at 2019_07_26;)
Nov 26, 2015, 12:00 PM
Jul 26, 2019, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-malware.rules