ET RETIRED Delf/Troxen/Zema controller responding to client
Sourceet/open
CreatedFebruary 7, 2012
UpdatedDecember 5, 2024
Classificationtrojan-activity
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET RETIRED Delf/Troxen/Zema controller responding to client"; flow:established,to_client; content:"|0d 0a 0d 0a|wait.<os>"; classtype:trojan-activity; sid:2014216; rev:3; metadata:created_at 2012_02_07, former_category MALWARE, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_12_05;)
Metadata
created at2012_02_07
former categoryMALWARE
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_12_05
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!