ET MALWARE zgRAT / PureLogs CnC Backdoor Client GZIP Traffic
Sourceet/open
Fileemerging-malware.rules
CreatedApril 16, 2025
UpdatedApril 16, 2025
Classificationtrojan-activity
alert tcp $HOME_NET any -> any any (msg:"ET MALWARE zgRAT / PureLogs CnC Backdoor Client GZIP Traffic"; reference:url,app.any.run/tasks/8c40a9d2-dc92-48ba-b75e-616f1a230000 ; classtype:trojan-activity; sid:2061634; rev:1; metadata:attack_target Client_Endpoint, tls_state plaintext, created_at 2025_04_16, deployment Perimeter, malware_family PureLogs, confidence High, signature_severity Major, updated_at 2025_04_16;)
Detection details are hidden.
Metadata
attack targetClient_Endpoint
tls stateplaintext
created at2025_04_16
deploymentPerimeter
malware familyPureLogs
confidenceHigh
signature severityMajor
updated at2025_04_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!