ET MALWARE Observed Malicious SSL Cert (Brushaloader CnC) 2023-12-4

SID: 2049634Rev: 12 views
History
Sourceet/open
CreatedDecember 11, 2023
UpdatedDecember 11, 2023
Classificationdomain-c2
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE Observed Malicious SSL Cert (Brushaloader CnC) 2023-12-4"; flow:established,to_client; tls.cert_issuer; content:"O=2pO0SfY"; fast_pattern; reference:url,twitter.com/anyrun_app/status/1731656654008000859; reference:md5,e5653b5074bd52cc6d4e95ca6ae5177f; classtype:domain-c2; sid:2049634; rev:1; metadata:created_at 2023_12_11, deployment Perimeter, performance_impact Low, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_12_11; target:dest_ip;)

References

urltwitter.com/anyrun_app/status/1731656654008000859
md5
e5653b5074bd52cc6d4e95ca6ae5177f
Google SearchBrave Search

Metadata

created at2023_12_11
deploymentPerimeter
performance impactLow
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2023_12_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!