ET DELETED Possible IE/SilverLight GoonEK Payload Download
Sourceet/open
CreatedJanuary 22, 2014
UpdatedJune 23, 2021
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Possible IE/SilverLight GoonEK Payload Download"; flow:to_server,established; content:".mp3?rnd="; fast_pattern:only; http_uri; pcre:"/\/\d+\.mp3\x3frnd\x3d\d+$/U"; classtype:exploit-kit; sid:2017998; rev:9; metadata:created_at 2014_01_22, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_06_23;)
Metadata
created at2014_01_22
signature severityUnknown
tagDescription_Generated_By_Proofpoint_Nexus
updated at2021_06_23
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!