ET DELETED Possible Malware Related Numerical .co Domain Lookup

SID: 2012144Rev: 30 viewsHistory

Sourceet/open

CreatedJanuary 5, 2011

UpdatedJuly 26, 2019

Classificationbad-unknown

alert udp $HOME_NET any -> any 53 (msg:"ET DELETED Possible Malware Related Numerical .co Domain Lookup"; content:"|01 00 00 01 00 00 00 00 00 00|"; depth:10; offset:2; content:"|02|co|00|"; fast_pattern; nocase; distance:0; pcre:"/\x00[0-9]{4,7}\x02co\x00/i"; reference:url,sign.kaffenews.com/?p=104; reference:url,www.isc.sans.org/diary.html?storyid=10165; classtype:bad-unknown; sid:2012144; rev:3; metadata:created_at 2011_01_05, signature_severity Unknown, updated_at 2019_07_26;)

References

url	sign.kaffenews.com/?p=104
url	www.isc.sans.org/diary.html?storyid=10165

Metadata

created at2011_01_05

signature severityUnknown

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!