ET MALWARE Banker.Delf Infection variant 2 - Sending Initial Email to Owner - Suricata Rule 2002978 (et/open)

ET MALWARE Banker.Delf Infection variant 2 - Sending Initial Email to Owner

SID: 2002978Rev: 60 viewsHistory

Sourceet/open

CreatedJuly 30, 2010

UpdatedJuly 26, 2019

Classificationtrojan-activity

alert tcp $HOME_NET any -> $EXTERNAL_NET 25 (msg:"ET MALWARE Banker.Delf Infection variant 2 - Sending Initial Email to Owner"; flow:established,to_server; content:"X-Library|3a| Indy 9"; nocase; content:"Nome Computador|3a| "; nocase; content:"Data|3a| "; nocase; reference:url,www.avira.com/en/threats/section/details/id_vir/1836/tr_banker.delf.df735649.html; classtype:trojan-activity; sid:2002978; rev:6; metadata:created_at 2010_07_30, signature_severity Major, updated_at 2019_07_26;)

References

url	www.avira.com/en/threats/section/details/id_vir/1836/tr_banker.delf.df735649.html

Metadata

created at2010_07_30

signature severityMajor

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!