ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M2
Sourceet/open
CreatedApril 16, 2019
UpdatedAugust 28, 2020
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Outbound POST Request with Base64 ps PowerShell Command Output M2"; flow:established,to_server; http.method; content:"POST"; http.request_body; content:"hhbmRsZXMgIE5QTShLKSAgICBQTShLKSAgICAgIFdTKEspIFZNKE0pICAgQ1BVKH"; fast_pattern; reference:url,attack.mitre.org/techniques/T1057/; reference:url,attack.mitre.org/techniques/T1086/; reference:url,attack.mitre.org/techniques/T1132/; classtype:trojan-activity; sid:2027212; rev:3; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, created_at 2019_04_16, confidence High, signature_severity Major, tag T1086, tag T1057, tag T1132, updated_at 2020_08_28;)
References
Metadata
affected productWindows_XP_Vista_7_8_10_Server_32_64_Bit
created at2019_04_16
confidenceHigh
signature severityMajor
tagT1132
updated at2020_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!