ET MALWARE Backdoor.Win32.Assasin.20.C Control Session Start

7.0.35.0SID: 2008675Rev: 6Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedJuly 30, 2010
UpdatedMarch 14, 2024
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET 91 (msg:"ET MALWARE Backdoor.Win32.Assasin.20.C Control Session Start"; flow:established,to_server; flowbits:isnotset,ET.assassin.start; flowbits:set,ET.assassin.start; content:"11000"; depth:5; content:"^"; distance:4; within:5; classtype:trojan-activity; sid:2008675; rev:6; metadata:created_at 2010_07_30, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_14;)

Metadata

created at2010_07_30
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_14

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!