ET MALWARE UAC-0063 Domain in DNS Lookup (net-certificate .services)

SID: 2045831Rev: 12 views
History
Sourceet/open
CreatedMay 23, 2023
UpdatedMay 23, 2023
Classificationtrojan-activity
alert dns $HOME_NET any -> any any (msg:"ET MALWARE UAC-0063 Domain in DNS Lookup (net-certificate .services)"; dns.query; dotprefix; content:".net-certificate.services"; nocase; endswith; reference:url,cert.gov.ua/article/4697016; reference:url,therecord.media/cyber-espionage-ukraine-uac-0063-cert-ua; classtype:trojan-activity; sid:2045831; rev:1; metadata:created_at 2023_05_23, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_05_23;)

Metadata

created at2023_05_23
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2023_05_23

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!