ET MALWARE RouteX CnC Domain (c13a856f4a879a89e9a638207efd6c94 .biz) in DNS Lookup
Sourceet/open
CreatedNovember 6, 2017
UpdatedJuly 22, 2022
Classificationcommand-and-control
alert dns $HOME_NET any -> any any (msg:"ET MALWARE RouteX CnC Domain (c13a856f4a879a89e9a638207efd6c94 .biz) in DNS Lookup"; dns.query; content:"c13a856f4a879a89e9a638207efd6c94.biz"; fast_pattern; nocase; bsize:36; reference:url,forkbomb.us/press-releases/2017/09/08/routex-press-release.html; classtype:command-and-control; sid:2024963; rev:5; metadata:affected_product Linux, attack_target Networking_Equipment, created_at 2017_11_06, deployment Internal, performance_impact Moderate, confidence High, signature_severity Major, updated_at 2022_07_22;)
Metadata
affected productLinux
attack targetNetworking_Equipment
created at2017_11_06
deploymentInternal
performance impactModerate
confidenceHigh
signature severityMajor
updated at2022_07_22
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!