ET MALWARE Possible Zeus .ru CnC Domain Generation Algorithm (DGA) Lookup Detected

SID: 2014376Rev: 511 views
History
Sourceet/open
CreatedMarch 14, 2012
UpdatedDecember 16, 2025
Classificationcommand-and-control
alert udp $HOME_NET any -> any 53 (msg:"ET MALWARE Possible Zeus .ru CnC Domain Generation Algorithm (DGA) Lookup Detected"; byte_test:1,!&,0xF8,2; content:"|02|ru|00|"; fast_pattern; pcre:"/[^a-z0-9\-\.][a-z]{32,48}\x02ru\x00\x00/"; classtype:command-and-control; sid:2014376; rev:5; metadata:created_at 2012_03_14, deprecation_reason False_Positive, confidence High, signature_severity Major, updated_at 2025_12_16;)

Metadata

created at2012_03_14
deprecation reasonFalse_Positive
confidenceHigh
signature severityMajor
updated at2025_12_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!