ET EXPLOIT NTDump.exe Service Started port 139

7.0.35.0SID: 2001053Rev: 8Enabled1 views
Sourceet/open
Fileemerging-exploit.rules
CreatedJuly 30, 2010
UpdatedMarch 7, 2024
Classificationmisc-activity
alert tcp any any -> $HOME_NET 139 (msg:"ET EXPLOIT NTDump.exe Service Started port 139"; flow:established,to_server; content:"|4e 00 74 00 44 00 75 00 6d 00 70 00 53 00 76 00 63 00 2e 00 65 00 78 00 65 00|"; classtype:misc-activity; sid:2001053; rev:8; metadata:created_at 2010_07_30, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_07;)

Metadata

created at2010_07_30
confidenceHigh
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_07

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!