alert tcp any any -> any any (msg:"🐾 - ☣ Download request 🌐 Zloader ♞"; flow:to_server, stateless; content:"GET"; content:"/files/june29.dll"; fast_pattern; content:"205.185.125.104"; reference:url,https://twitter.com/abuse_ch/status/1277627432774897665; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.zloader; metadata:created_at 2020_07_02, updated_at 2020_07_02; sid:3321238; rev:1; classtype:trojan-activity;)