alert tcp any any -> any any (msg:"🐾 - ☣ Download request 🌐 Dridex trojan ♞"; flow:to_server, stateless; content:"GET"; content:"/lvkahex.exe"; reference:url,https://bazaar.abuse.ch/sample/73849ce478a894f10589cc31aece7dcb8a39c1c43a4a5c401b2dae86b53bb9c7/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.dridex; metadata:created_at 2020_07_14, updated_at 2020_07_14; sid:3306800; rev:1; classtype:trojan-activity;)