ET MALWARE HTTP Request to a *.cvredirect.no-ip.net domain - CoinLocker Domain - Suricata Rule 2019789 (et/open)

ET MALWARE HTTP Request to a *.cvredirect.no-ip.net domain - CoinLocker Domain

SID: 2019789Rev: 60 viewsHistory

Sourceet/open

CreatedNovember 24, 2014

UpdatedMarch 3, 2024

Classificationbad-unknown

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE HTTP Request to a *.cvredirect.no-ip.net domain - CoinLocker Domain"; flow:established,to_server; http.host; content:".cvredirect.no-ip.net"; fast_pattern; endswith; reference:url,securelist.com/blog/virus-watch/67699/a-nightmare-on-malware-street; classtype:bad-unknown; sid:2019789; rev:6; metadata:created_at 2014_11_24, signature_severity Major, updated_at 2024_03_03;)

References

url	securelist.com/blog/virus-watch/67699/a-nightmare-on-malware-street

Metadata

created at2014_11_24

signature severityMajor

updated at2024_03_03

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!