ET MOBILE_MALWARE Android.Trojan.Rana.A (whoisdomainpc .com in DNS Lookup)
Sourceet/open
CreatedDecember 9, 2020
UpdatedDecember 9, 2020
Classificationdomain-c2
alert dns $HOME_NET any -> any any (msg:"ET MOBILE_MALWARE Android.Trojan.Rana.A (whoisdomainpc .com in DNS Lookup)"; dns_query; content:"whoisdomainpc.com"; isdataat:!1,relative; reference:url,blog.reversinglabs.com/hubfs/Blog/rana_android_malware/; classtype:domain-c2; sid:2031310; rev:2; metadata:affected_product Android, attack_target Mobile_Client, created_at 2020_12_09, deployment Perimeter, confidence High, signature_severity Critical, tag Android, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_12_09;)
Metadata
affected productAndroid
attack targetMobile_Client
created at2020_12_09
deploymentPerimeter
confidenceHigh
signature severityCritical
tagDescription_Generated_By_Proofpoint_Nexus
updated at2020_12_09
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!