Back to Rule

Rule History

SID: 2035488 • Source: et/open

Versions (4)

Rev: 2
Sep 4, 2025, 9:34 PM
Current
Rev: 2
Sep 21, 2024, 3:00 AM
Archived
Rev: 2
May 31, 2024, 9:00 PM
Archived
Rev: 2
Mar 17, 2022, 12:00 PM
Archived

Version Details

Rev: 2 • Mar 17, 2022, 12:00 PM

ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Realrat.c (DNS Lookup) 3

alert dns $HOME_NET any -> any any (msg:"ET MOBILE_MALWARE Trojan-Spy.AndroidOS.Realrat.c (DNS Lookup) 3"; dns_query; content:"alfa-toxic.xyz"; isdataat:!1,relative; reference:md5,2ea18b97e95171afabd9cfafa4813812; classtype:domain-c2; sid:2035488; rev:2; metadata:created_at 2022_03_17, former_category MOBILE_MALWARE, updated_at 2022_03_17;)

Mar 17, 2022, 12:00 PM

Mar 17, 2022, 12:00 PM

Mar 17, 2022, 12:00 PM

Mar 17, 2022, 12:00 PM

May 30, 2025, 5:56 PM