ET MALWARE Backdoor Win32/IRCbot.FJ Cnc connection dns lookup

7.0.35.0SID: 2013187Rev: 3Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedJuly 5, 2011
UpdatedMarch 26, 2024
Classificationcommand-and-control
alert dns $HOME_NET any -> any any (msg:"ET MALWARE Backdoor Win32/IRCbot.FJ Cnc connection dns lookup"; dns.query; bsize:17; content:"minerva.cdmon.org"; fast_pattern; nocase; reference:url,www.bfk.de/bfk_dnslogger_en.html?query=minerva.cdmon.org; reference:url,www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3aWin32%2fIRCbot.FJ; reference:url,www.exposedbotnets.com/2011/02/minervacdmonorgbotnet-hosted-in.html; reference:md5,13e43c44681ba9acb8fd42217bd3dbd2; classtype:command-and-control; sid:2013187; rev:3; metadata:created_at 2011_07_05, malware_family Win32_IRCbot_FJ, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_26;)

References

urlwww.bfk.de/bfk_dnslogger_en.html?query=minerva.cdmon.org
urlwww.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Backdoor%3aWin32%2fIRCbot.FJ
urlwww.exposedbotnets.com/2011/02/minervacdmonorgbotnet-hosted-in.html
md5
13e43c44681ba9acb8fd42217bd3dbd2
Google SearchBrave Search

Metadata

created at2011_07_05
malware familyWin32_IRCbot_FJ
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!