ET MALWARE Suspicious lcon http header in response seen with Medfos/Midhos downloader

SID: 2014723Rev: 30 views
History
Sourceet/open
CreatedMay 8, 2012
UpdatedFebruary 16, 2024
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE Suspicious lcon http header in response seen with Medfos/Midhos downloader"; flow:established,to_client; http.header_names; content:"|0d 0a|lcon|0d 0a|"; reference:md5,63491dcc8e897bf442599febe48b824d; classtype:trojan-activity; sid:2014723; rev:3; metadata:created_at 2012_05_08, signature_severity Major, updated_at 2024_02_16;)

References

md5
63491dcc8e897bf442599febe48b824d
Google SearchBrave Search

Metadata

created at2012_05_08
signature severityMajor
updated at2024_02_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!