🐾 - 🚨 Possible Raspberry Robin Worm 🐛 second stage download 👾)

SID: 3300701Rev: 30 views
Sourcepawpatrules
CreatedMay 18, 2023
UpdatedJune 5, 2023
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET 8080 (msg:"🐾 - 🚨 Possible Raspberry Robin Worm 🐛 second stage download 👾)"; flow:to_server, stateless; http.method; content:"GET"; http.user_agent; content:"Windows Installer"; depth:17; endswith; fast_pattern; reference:url,https://www.senseon.io/resource/resurgent-usb-malware-battling-raspberry-robin/; metadata:created_at 2023_05_18, updated_at 2023_06_05; sid:3300701; rev:3; classtype:trojan-activity;)

References

urlhttps://www.senseon.io/resource/resurgent-usb-malware-battling-raspberry-robin/

Metadata

created at2023_05_18
updated at2023_06_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!