ET DELETED Possible Kelihos .eu CnC Domain Generation Algorithm (DGA) Lookup Detected
Sourceet/open
CreatedMarch 14, 2012
UpdatedJuly 26, 2019
Classificationcommand-and-control
alert udp $HOME_NET any -> any 53 (msg:"ET DELETED Possible Kelihos .eu CnC Domain Generation Algorithm (DGA) Lookup Detected"; byte_test:1,!&,0xF8,2; content:"|00 00 07|"; depth:16; content:"|02|eu|00|"; fast_pattern:only; pcre:"/\x00\x07[a-z]{7}\x02eu\x00/"; threshold:type both, count 5, seconds 120, track by_src; classtype:command-and-control; sid:2014371; rev:6; metadata:created_at 2012_03_14, confidence High, signature_severity Unknown, updated_at 2019_07_26;)
Metadata
created at2012_03_14
confidenceHigh
signature severityUnknown
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!