Versions (4)
Version DetailsCurrent
Rev: 1 • Aug 30, 2022, 12:00 PMET MALWARE Win32/Nitrokod CnC Domain (nvidiacenter .com) in DNS Lookup
alert dns $HOME_NET any -> any any (msg:"ET MALWARE Win32/Nitrokod CnC Domain (nvidiacenter .com) in DNS Lookup"; dns.query; dotprefix; content:".nvidiacenter.com"; nocase; endswith; reference:url,research.checkpoint.com/2022/check-point-research-detects-crypto-miner-malware-disguised-as-google-translate-desktop-and-other-legitimate-applications; classtype:coin-mining; sid:2038678; rev:1; metadata:created_at 2022_08_30, malware_family Win32_Nitrokod, performance_impact Significant, confidence High, signature_severity Major, updated_at 2022_08_30;)
Aug 30, 2022, 12:00 PM
Aug 30, 2022, 12:00 PM
Sep 21, 2024, 3:00 AM
Sep 21, 2024, 3:00 AM
rules/emerging-malware.rules