ET MALWARE Yoyo-DDoS Bot Download and Launch Executable Message From CnC Server
Sourceet/open
Fileemerging-malware.rules
CreatedOctober 7, 2010
UpdatedMarch 6, 2024
Classificationcommand-and-control
alert tcp $EXTERNAL_NET any -> $HOME_NET 1024: (msg:"ET MALWARE Yoyo-DDoS Bot Download and Launch Executable Message From CnC Server"; flow:established,to_client ; dsize:124; content:"|00 00 00 04|ftp|3a|//"; depth:10; reference:url,asert.arbornetworks.com/2010/08/yoyoddos-a-new-family-of-ddos-bots/ ; classtype:command-and-control; sid:2011592; rev:2; metadata:created_at 2010_10_07, signature_severity Major, updated_at 2024_03_06;)
Metadata
created at2010_10_07
signature severityMajor
updated at2024_03_06
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!