ET MALWARE Linux/AES.DDoS Sending Real/Fake CPU&BW Info

SID: 2019177Rev: 30 views
History
Sourceet/open
CreatedSeptember 15, 2014
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Linux/AES.DDoS Sending Real/Fake CPU&BW Info"; flow:established,to_server; content:"INFO|3a|"; depth:5; pcre:"/^\d/R"; content:"|25 7c|"; distance:0; threshold:type both, count 1, seconds 30, track by_src; reference:md5,d8059b555dde05e184c0b16bbff523f1; classtype:trojan-activity; sid:2019177; rev:3; metadata:created_at 2014_09_15, signature_severity Major, updated_at 2019_07_26;)

References

md5
d8059b555dde05e184c0b16bbff523f1

Metadata

created at2014_09_15
signature severityMajor
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!