ET RETIRED W32/Mentory CnC Server Providing File Info Details
Sourceet/open
CreatedJanuary 28, 2012
UpdatedDecember 5, 2024
Classificationcommand-and-control
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET RETIRED W32/Mentory CnC Server Providing File Info Details"; flow:established,to_client; content:"[DBINFO]|0D 0A|Info ="; content:"Version ="; distance:0; content:"[TotalCount]|0D 0A|Count ="; distance:0; content:"[GaruYac"; distance:0; reference:md5,6724bb601611dcc0140960c59c7b3393; classtype:command-and-control; sid:2014167; rev:3; metadata:created_at 2012_01_28, former_category MALWARE, signature_severity Major, updated_at 2024_12_05;)
References
| md5 | 6724bb601611dcc0140960c59c7b3393 |
Metadata
created at2012_01_28
former categoryMALWARE
signature severityMajor
updated at2024_12_05
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!