ET EXPLOIT_KIT Archie EK T2 SWF Exploit Struct Nov 20 2014
Sourceet/open
CreatedNovember 21, 2014
UpdatedAugust 20, 2020
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET !80 (msg:"ET EXPLOIT_KIT Archie EK T2 SWF Exploit Struct Nov 20 2014"; flow:established,to_server; urilen:69; content:".swf"; http_uri; offset:65; depth:4; pcre:"/^\/[a-f0-9]{64}\.swf$/U"; pcre:"/^Host\x3a\s*?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\x3a/Hmi"; classtype:exploit-kit; sid:2019770; rev:6; metadata:created_at 2014_11_21, confidence High, signature_severity Major, updated_at 2020_08_20;)
Metadata
created at2014_11_21
confidenceHigh
signature severityMajor
updated at2020_08_20
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!