alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Keylogger Infection Report via POST"; flow:established,to_server; http.request_body; content:"texto=|25 30 44 25 30 41 25 30 44 25 30 41|Computer"; content:"|25 30 44 25 30 41|IP|25 32 45 25 32 45 25 32 45 25 32 45 25 32 45|"; fast_pattern; distance:0; classtype:trojan-activity; sid:2008521; rev:4; metadata:created_at 2010_07_30, confidence High, signature_severity Major, updated_at 2024_04_10;)