ET MALWARE ELF/muBoT IRC Activity 7 (bindshell)
Sourceet/open
CreatedNovember 26, 2015
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE ELF/muBoT IRC Activity 7 (bindshell)"; flow:established,from_server; content:"|0a c2 84 c2 9f|muBoT|c2 84 c2 9f|REMOTE|c2 84 c2 9f|SHELL"; reference:url,blog.malwaremustdie.org/2015/11/mmd-0044-2015-source-code-disclosure.html; classtype:trojan-activity; sid:2022190; rev:1; metadata:affected_product Linux, created_at 2015_11_26, malware_family ELF_muBoT, signature_severity Major, updated_at 2019_07_26;)
Metadata
affected productLinux
created at2015_11_26
malware familyELF_muBoT
signature severityMajor
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!