ET MALWARE Likely Fake Antivirus Download Antivirus_21.exe

7.0.35.0SID: 2010050Rev: 7Disabled3 views
Sourceet/open
Fileemerging-malware.rules
CreatedJuly 30, 2010
UpdatedMarch 16, 2024
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Likely Fake Antivirus Download Antivirus_21.exe"; flow:established,to_server; http.method; content:"GET"; nocase; http.uri; content:"/download/Antivirus_"; fast_pattern; content:".exe"; pcre:"/download\x2FAntivirus_\d+\x2Eexe/i"; classtype:trojan-activity; sid:2010050; rev:7; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2024_03_16;)

Metadata

created at2010_07_30
confidenceMedium
signature severityMajor
updated at2024_03_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!