alert tcp any any -> any any (msg:"🐾 - ☣ Download request 🌐 Dridex trojan ♞"; flow:to_server, stateless; content:"GET"; content:"/plkdmc.exe"; content:"asdjgkfwsas.com"; fast_pattern; reference:url,https://urlhaus.abuse.ch/url/408271/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.dridex; metadata:created_at 2020_07_06, updated_at 2020_07_06; sid:3306785; rev:1; classtype:trojan-activity;)