ET MALWARE W2KM_BARTALEX Downloading Payload M2 (set)

SID: 2021531Rev: 30 views
History
Sourceet/open
CreatedJuly 24, 2015
UpdatedMay 29, 2020
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE W2KM_BARTALEX Downloading Payload M2 (set)"; flow:established,to_server; flowbits:set,ET.BARTALEX; flowbits:noalert; http.uri; content:".txt"; http.header; content:"WinHttp.WinHttpRequest"; classtype:trojan-activity; sid:2021531; rev:3; metadata:created_at 2015_07_24, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_05_29;)

Metadata

created at2015_07_24
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2020_05_29

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!