ET EXPLOIT_KIT CritX/SafePack/FlashPack Jar Download Jul 01 2013

SID: 2017092Rev: 40 viewsHistory

Sourceet/open

CreatedJuly 2, 2013

UpdatedMarch 3, 2024

Classificationexploit-kit

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET EXPLOIT_KIT CritX/SafePack/FlashPack Jar Download Jul 01 2013"; flow:established,to_client; http.header; content:"j51"; nocase; content:".jar"; fast_pattern; pcre:"/^Content-Disposition\x3a[^\r\n]+?=\s*?(?P<q>[\x22\x27]?)j51[a-f0-9]{21}\.jar(?P=q)\r?$/m"; reference:url,www.malwaresigs.com/2013/06/14/slight-change-in-flashpack-uri/; classtype:exploit-kit; sid:2017092; rev:4; metadata:created_at 2013_07_02, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_03;)

References

url	www.malwaresigs.com/2013/06/14/slight-change-in-flashpack-uri/

Metadata

created at2013_07_02

signature severityMajor

tagDescription_Generated_By_Proofpoint_Nexus

updated at2024_03_03

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!