Back to Rule

Rule History

SID: 5000006 • Source: malsilo/win-malware

Versions (2)

Version DetailsCurrent

Rev: 1Dec 1, 2022, 12:00 PM

MalSilo MALWARE (emotet) C&C Detected

alert tcp any any -> 41.216.183.52 9882 (msg:"MalSilo MALWARE (emotet) C&C Detected"; flow:established,to_server; reference:url,malsilo.gitlab.io/feeds/dumps/master-feed.json; classtype:command-and-control; sid:5000006; rev:1; metadata: tag peexe32,tag pegui, created_at 2022_12_01, malware_family emotet, updated_at 2022_12_01;)

Dec 1, 2022, 12:00 PM

Dec 1, 2022, 12:00 PM

Jun 12, 2025, 7:35 PM

Jun 12, 2025, 7:35 PM

malsilo-ip.rules