ET EXPLOIT_KIT Hostile Gate landing seen with pamdql/Sweet Orange base64
Sourceet/open
CreatedDecember 28, 2012
UpdatedApril 22, 2020
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT Hostile Gate landing seen with pamdql/Sweet Orange base64"; flow:established,to_server; http.uri; content:"KAhFXlx9"; pcre:"/\.php\?[a-z]=.{2}KAhFXlx9.{2}Oj[^&]+$/"; classtype:exploit-kit; sid:2016091; rev:3; metadata:created_at 2012_12_28, signature_severity Major, updated_at 2020_04_22;)
Metadata
created at2012_12_28
signature severityMajor
updated at2020_04_22
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!