Rule History

SID: 5000002 • Source: malsilo/win-malware

Versions (2)

Version DetailsCurrent

Rev: 1 • Dec 1, 2022, 12:00 PM

Message:

MalSilo MALWARE (generic) DNS Lookup

Rule:

alert dns $HOME_NET any -> any any (msg:"MalSilo MALWARE (generic) DNS Lookup"; dns_query; content:"host-file-host6.com"; nocase; depth:19; isdataat:!1,relative; fast_pattern; reference:url,malsilo.gitlab.io/feeds/dumps/master-feed.json; classtype:trojan-activity; sid:5000002; rev:1; metadata:tag peexe32, tag pegui, created_at 2022_12_01, malware_family generic, updated_at 2022_12_01;)

Created:

Dec 1, 2022, 12:00 PM

Updated:

Dec 1, 2022, 12:00 PM

DB Created:

Jun 12, 2025, 7:35 PM

DB Updated:

Jun 12, 2025, 7:35 PM

Filename:

malsilo-dns.rules