ET DELETED Georgian Targeted Attack - Server Response

SID: 2015852Rev: 60 views
History
Sourceet/open
CreatedNovember 1, 2012
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED Georgian Targeted Attack - Server Response"; flow:established,from_server; flowbits:isset,ET.cyberEspionageGeorgia; file_data; content:"<html><head><META HTTP-EQUIV=|22|Pragma|22| CONTENT=|22|no-cache|22|></head><body>TV"; content:"VGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1vZGU"; within:360; reference:md5,d4af87ba30c59d816673df165511e466; reference:url,dea.gov.ge/uploads/CERT%20DOCS/Cyber%20Espionage.pdf; classtype:trojan-activity; sid:2015852; rev:6; metadata:created_at 2012_11_01, signature_severity Unknown, updated_at 2019_07_26;)

References

md5
d4af87ba30c59d816673df165511e466
Google SearchBrave Search
urldea.gov.ge/uploads/CERT%20DOCS/Cyber%20Espionage.pdf

Metadata

created at2012_11_01
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!