ET MALWARE Delf Checkin via HTTP (up)

7.0.35.0SID: 2007939Rev: 6Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedJuly 30, 2010
UpdatedMarch 16, 2024
Classificationcommand-and-control
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Delf Checkin via HTTP (up)"; flow:established,to_server; http.uri; content:"/up.html?"; fast_pattern; nocase; content:"set="; nocase; content:"&pid="; nocase; content:"&MAC="; nocase; classtype:command-and-control; sid:2007939; rev:6; metadata:created_at 2010_07_30, signature_severity Major, updated_at 2024_03_16;)

Metadata

created at2010_07_30
signature severityMajor
updated at2024_03_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!