ET DELETED APT Cheshire Cat DNS Lookup (apartmentsin-paris.com)

SID: 2021650Rev: 20 views
History
Sourceet/open
CreatedAugust 18, 2015
UpdatedJuly 26, 2019
Classificationtargeted-activity
alert udp $HOME_NET any -> any 53 (msg:"ET DELETED APT Cheshire Cat DNS Lookup (apartmentsin-paris.com)"; content:"|01 00 00 01 00 00 00 00 00 00|"; depth:10; offset:2; content:"|12|apartmentsin-paris|03|com|00|"; nocase; distance:0; fast_pattern; reference:url,kernelmode.info/forum/viewtopic.php?f=16&t=3981; classtype:targeted-activity; sid:2021650; rev:2; metadata:created_at 2015_08_18, signature_severity Unknown, updated_at 2019_07_26;)

References

urlkernelmode.info/forum/viewtopic.php?f=16&t=3981

Metadata

created at2015_08_18
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!