ET DELETED Potential FAKEAV Download a-f0-9 x16 download
Sourceet/open
CreatedMay 11, 2012
UpdatedAugust 20, 2020
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Potential FAKEAV Download a-f0-9 x16 download"; flow:to_server,established; content:"/pr2/"; http_uri; fast_pattern:only; pcre:"/\/[a-f0-9]{16}\/.+?\.(exe|zip)$/U"; classtype:bad-unknown; sid:2014730; rev:9; metadata:created_at 2012_05_11, signature_severity Unknown, updated_at 2020_08_20;)
Metadata
created at2012_05_11
signature severityUnknown
updated at2020_08_20
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!