ET DELETED Trojan-Spy.Win32.Zbot.hmcm Checkin

SID: 2018437Rev: 40 views
History
Sourceet/open
CreatedJanuary 26, 2013
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Trojan-Spy.Win32.Zbot.hmcm Checkin"; flow:established,to_server; content:"/b/"; depth:3; http_uri; pcre:"/^\/b\/(eve|opt|req)\/[\-f0-9A-F]{24}$/U"; reference:md5,291b5ce96b3932944a32031d33bc8cfc; classtype:trojan-activity; sid:2018437; rev:4; metadata:created_at 2013_01_26, signature_severity Unknown, updated_at 2019_07_26;)

References

md5
291b5ce96b3932944a32031d33bc8cfc

Metadata

created at2013_01_26
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!