ET DELETED Trojan-Spy.Win32.Zbot.hmcm Checkin
Sourceet/open
CreatedJanuary 26, 2013
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Trojan-Spy.Win32.Zbot.hmcm Checkin"; flow:established,to_server; content:"/b/"; depth:3; http_uri; pcre:"/^\/b\/(eve|opt|req)\/[\-f0-9A-F]{24}$/U"; reference:md5,291b5ce96b3932944a32031d33bc8cfc; classtype:trojan-activity; sid:2018437; rev:4; metadata:created_at 2013_01_26, signature_severity Unknown, updated_at 2019_07_26;)
References
| md5 | 291b5ce96b3932944a32031d33bc8cfc |
Metadata
created at2013_01_26
signature severityUnknown
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!