ET MALWARE DNS Query for Suspicious cvredirect.no-ip.net Domain - CoinLocker Domain - Suricata Rule 2019788 (et/open)

ET MALWARE DNS Query for Suspicious cvredirect.no-ip.net Domain - CoinLocker Domain

SID: 2019788Rev: 70 viewsHistory

Sourceet/open

CreatedNovember 24, 2014

UpdatedApril 10, 2024

Classificationmisc-activity

alert dns $HOME_NET any -> any any (msg:"ET MALWARE DNS Query for Suspicious cvredirect.no-ip.net Domain - CoinLocker Domain"; dns.query; content:"cvredirect.no-ip.net"; depth:20; fast_pattern; endswith; nocase; reference:url,securelist.com/blog/virus-watch/67699/a-nightmare-on-malware-street; classtype:misc-activity; sid:2019788; rev:7; metadata:created_at 2014_11_24, deprecation_reason Relevance, confidence Medium, signature_severity Major, updated_at 2024_04_10, reviewed_at 2024_04_10;)

References

url	securelist.com/blog/virus-watch/67699/a-nightmare-on-malware-street

Metadata

created at2014_11_24

deprecation reasonRelevance

confidenceMedium

signature severityMajor

updated at2024_04_10

reviewed at2024_04_10

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!