ET HUNTING Inbound Powershell Creating .hta File
Sourceet/open
CreatedSeptember 15, 2021
UpdatedSeptember 15, 2021
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET HUNTING Inbound Powershell Creating .hta File"; flow:established,to_client; file.data; content:".hta|22 3b|"; content:"|28|New-Object|20|-COM"; classtype:bad-unknown; sid:2033956; rev:1; metadata:created_at 2021_09_15, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2021_09_15;)
Metadata
created at2021_09_15
confidenceMedium
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2021_09_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!