ET MALWARE Infostealer.Boleteiro checking stolen boleto payment information

SID: 2019243Rev: 60 views
History
Sourceet/open
CreatedSeptember 25, 2014
UpdatedSeptember 25, 2020
Classificationcommand-and-control
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Infostealer.Boleteiro checking stolen boleto payment information"; flow:to_server,established; http.uri; content:"Vencimento="; fast_pattern; content:"&Valor="; content:"&Sacado="; content:"&URL="; content:"&Browser=Chrome"; reference:md5,3cffb955c08f6c1546bfeae37a215787; reference:url,symantec.com/security_response/writeup.jsp?docid=2014-091718-2034-99&tabid=2; classtype:command-and-control; sid:2019243; rev:6; metadata:created_at 2014_09_25, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_09_25;)

References

md5
3cffb955c08f6c1546bfeae37a215787
Google SearchBrave Search
urlsymantec.com/security_response/writeup.jsp?docid=2014-091718-2034-99&tabid=2

Metadata

created at2014_09_25
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2020_09_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!