ET DELETED Stabuniq Observed C&C POST Target /rss.php

SID: 2016131Rev: 30 views
History
Sourceet/open
CreatedDecember 29, 2012
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Stabuniq Observed C&C POST Target /rss.php"; flow:to_server,established; content:"POST"; http_method; content:"/rss.php"; http_uri; reference:url,www.symantec.com/connect/blogs/trojanstabuniq-found-financial-institution-servers; reference:url,www.symantec.com/security_response/writeup.jsp?docid=2012-121809-2437-99&tabid=2; reference:url,contagiodump.blogspot.com/2012/12/dec-2012-trojanstabuniq-samples.html; classtype:trojan-activity; sid:2016131; rev:3; metadata:created_at 2012_12_29, signature_severity Unknown, updated_at 2019_07_26;)

References

urlwww.symantec.com/connect/blogs/trojanstabuniq-found-financial-institution-servers
urlwww.symantec.com/security_response/writeup.jsp?docid=2012-121809-2437-99&tabid=2
urlcontagiodump.blogspot.com/2012/12/dec-2012-trojanstabuniq-samples.html

Metadata

created at2012_12_29
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!