Versions (4)
Version DetailsCurrent
Rev: 3 • Sep 10, 2019, 12:00 PMET DELETED Hash - Possible Malware - Banking Phish
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Hash - Possible Malware - Banking Phish"; ja3_hash; content:"10ee8d30a5d01c042afd7b2b205facc4"; reference:url,github.com/trisulnsm/trisul-scripts/blob/master/lua/frontend_scripts/reassembly/ja3/prints/ja3fingerprint.json; reference:url,www.malware-traffic-analysis.net; classtype:unknown; sid:2030399; rev:3; metadata:created_at 2019_09_10, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_06_26;)
Sep 10, 2019, 12:00 PM
Jun 26, 2020, 12:00 PM
Sep 21, 2024, 3:00 AM
Sep 17, 2025, 9:34 PM
rules/emerging-deleted.rules