ET MOBILE_MALWARE SymbOS/Yxes.I PropertyFile.jsp CnC Server Communication

7.0.35.0SID: 2012851Rev: 4Disabled1 views
Sourceet/open
Fileemerging-mobile_malware.rules
CreatedMay 26, 2011
UpdatedMarch 15, 2024
Classificationcommand-and-control
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MOBILE_MALWARE SymbOS/Yxes.I PropertyFile.jsp CnC Server Communication"; flow:established,to_server; http.uri; content:"/PropertyFile.jsp?Version="; fast_pattern; nocase; content:"&PhoneType="; nocase; content:"&PhoneImei="; nocase; content:"&PhoneImsi="; nocase; reference:url,www.fortiguard.com/encyclopedia/virus/symbos_yxes.i!worm.html; classtype:command-and-control; sid:2012851; rev:4; metadata:created_at 2011_05_26, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_15;)

References

urlwww.fortiguard.com/encyclopedia/virus/symbos_yxes.i!worm.html

Metadata

created at2011_05_26
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!