ET DELETED Possible Fast Flux Trojan Rogue Antivirus

SID: 2012332Rev: 31 views
History
Sourceet/open
CreatedFebruary 22, 2011
UpdatedJuly 26, 2019
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET DELETED Possible Fast Flux Trojan Rogue Antivirus"; flow:established,to_server; content:"GET"; nocase; http_method; content:"/SecurIns_194.exe"; http_uri; nocase; reference:url,www.malwareurl.com/listing.php?domain=microantivirus5.com; classtype:bad-unknown; sid:2012332; rev:3; metadata:created_at 2011_02_22, signature_severity Unknown, updated_at 2019_07_26;)

References

urlwww.malwareurl.com/listing.php?domain=microantivirus5.com

Metadata

created at2011_02_22
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!