ET RETIRED Delf/Troxen/Zema controller delivering clickfraud instructions

SID: 2014217Rev: 40 views
History
Sourceet/open
CreatedFebruary 7, 2012
UpdatedDecember 5, 2024
Classificationtrojan-activity
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET RETIRED Delf/Troxen/Zema controller delivering clickfraud instructions"; flow:established,to_client; content:"|0d 0a 0d 0a|<md5>"; content:"</md5><url>"; distance:16; within:11; classtype:trojan-activity; sid:2014217; rev:4; metadata:created_at 2012_02_07, former_category MALWARE, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_12_05;)

Metadata

created at2012_02_07
former categoryMALWARE
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_12_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!