ET MALWARE Win32.BlackControl Retrieving IP Information
Sourceet/open
CreatedNovember 11, 2011
UpdatedFebruary 8, 2024
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Win32.BlackControl Retrieving IP Information"; flow:established,to_server; http.uri; content:"/v2/ip_query_country.php?key="; fast_pattern; content:"&timezone="; http.user_agent; bsize:1; content:"1"; classtype:trojan-activity; sid:2013902; rev:4; metadata:created_at 2011_11_11, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_02_08;)
Metadata
created at2011_11_11
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_02_08
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!