ET DELETED Unknown Malware CnC response with exe file

SID: 2017414Rev: 30 views
History
Sourceet/open
CreatedSeptember 4, 2013
UpdatedJuly 26, 2019
Classificationcommand-and-control
alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET DELETED Unknown Malware CnC response with exe file"; flow:from_server,established; dsize:>0; byte_jump:2,1,little,post_offset -4; isdataat:!2,relative; content:"!This program cannot be run in DOS mode."; reference:url,contagiodump.blogspot.com.br/2013/09/sandbox-miming-cve-2012-0158-in-mhtml.html; classtype:command-and-control; sid:2017414; rev:3; metadata:created_at 2013_09_04, signature_severity Unknown, updated_at 2019_07_26;)

References

urlcontagiodump.blogspot.com.br/2013/09/sandbox-miming-cve-2012-0158-in-mhtml.html

Metadata

created at2013_09_04
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!