ET MALWARE DNS query for Morto RDP worm related domain jifr.info

SID: 2013495Rev: 60 views
History
Sourceet/open
CreatedAugust 30, 2011
UpdatedMay 8, 2024
Classificationbad-unknown
alert dns $HOME_NET any -> any any (msg:"ET MALWARE DNS query for Morto RDP worm related domain jifr.info"; dns.query; content:"jifr.info"; depth:9; fast_pattern; endswith; reference:url,contagiodump.blogspot.com/2011/08/aug-28-morto-tsclient-rdp-worm-with.html; classtype:bad-unknown; sid:2013495; rev:6; metadata:created_at 2011_08_30, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_05_08;)

References

urlcontagiodump.blogspot.com/2011/08/aug-28-morto-tsclient-rdp-worm-with.html

Metadata

created at2011_08_30
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_05_08

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!