ET MALWARE Kelihos CnC Server Activity

SID: 2022294Rev: 10 views
History
Sourceet/open
CreatedDecember 22, 2015
UpdatedJuly 26, 2019
Classificationcommand-and-control
alert ip $HOME_NET any -> [206.72.206.74,206.72.206.75,206.72.206.76,206.72.206.77,206.72.206.78,66.45.241.130,66.45.241.131,66.45.241.132,66.45.241.133,66.45.241.134] any (msg:"ET MALWARE Kelihos CnC Server Activity"; threshold:type limit, track by_src, seconds 3600, count 1; flowbits:set,ET.Evil; reference:url,blog.malwaremustdie.org/2015/12/mmd-0046-2015-kelihos-cnc-activity-on.html; classtype:command-and-control; sid:2022294; rev:1; metadata:created_at 2015_12_22, signature_severity Major, updated_at 2019_07_26;)

References

urlblog.malwaremustdie.org/2015/12/mmd-0046-2015-kelihos-cnc-activity-on.html

Metadata

created at2015_12_22
signature severityMajor
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!