ET MALWARE Possible Netwire RAT Client HeartBeat C1 (no alert)

SID: 2018281Rev: 52 views
History
Sourceet/open
CreatedMarch 14, 2014
UpdatedApril 18, 2024
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Possible Netwire RAT Client HeartBeat C1 (no alert)"; flow:established,to_server; dsize:5; content:"|01 00 00 00|"; depth:4; flowbits:set,ET.Netwire.HB; flowbits:noalert; reference:md5,154a2366cd3e39e8625f5f737f9da8f1; reference:md5,9475f91a426ac45d1f074373034cbea6; classtype:trojan-activity; sid:2018281; rev:5; metadata:created_at 2014_03_14, performance_impact Significant, confidence Medium, signature_severity Major, updated_at 2024_04_18;)

References

md5
154a2366cd3e39e8625f5f737f9da8f1
Google SearchBrave Search
md5
9475f91a426ac45d1f074373034cbea6
Google SearchBrave Search

Metadata

created at2014_03_14
performance impactSignificant
confidenceMedium
signature severityMajor
updated at2024_04_18

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!