ET MALWARE BitCrypt site accessed via .onion SSL Proxy
Sourceet/open
CreatedApril 18, 2014
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert tcp $EXTERNAL_NET 443 -> $HOME_NET any (msg:"ET MALWARE BitCrypt site accessed via .onion SSL Proxy"; flow:established,from_server; content:"|55 04 03|"; content:"kphijmuo2x5expag."; nocase; distance:2; within:17; classtype:trojan-activity; sid:2018399; rev:2; metadata:created_at 2014_04_18, signature_severity Major, updated_at 2019_07_26;)
Metadata
created at2014_04_18
signature severityMajor
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!