ET MOBILE_MALWARE Android Marcher Trojan Download - Austrian Bank Targeting
Sourceet/open
CreatedNovember 3, 2017
UpdatedAugust 13, 2020
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MOBILE_MALWARE Android Marcher Trojan Download - Austrian Bank Targeting"; flow:to_client,established; flowbits:isset,ET.marcherphish; http.stat_code; content:"200"; http.header; content:"application/vnd.android.package-archive"; fast_pattern; content:"Content-Description|3a 20|File Transfer"; file.data; content:"PK"; depth:2; classtype:trojan-activity; sid:2024953; rev:3; metadata:affected_product Android, attack_target Mobile_Client, created_at 2017_11_03, deployment Perimeter, confidence High, signature_severity Major, tag Android, updated_at 2020_08_13;)
Metadata
affected productAndroid
attack targetMobile_Client
created at2017_11_03
deploymentPerimeter
confidenceHigh
signature severityMajor
tagAndroid
updated at2020_08_13
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!