ET MALWARE SecurityDefender exe Download Likely FakeAV Install

7.0.35.0SID: 2013826Rev: 6Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedNovember 5, 2011
UpdatedMay 6, 2024
Classificationtrojan-activity
alert http1 $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE SecurityDefender exe Download Likely FakeAV Install"; flow:established,to_client; http.header; content:"|0D 0A|Content-Disposition|3a| attachment|3B| filename=|22|"; content:"SecurityDefender"; fast_pattern; nocase; within:24; content:".exe"; within:24; classtype:trojan-activity; sid:2013826; rev:6; metadata:created_at 2011_11_05, confidence Medium, signature_severity Major, updated_at 2024_05_06;)

Metadata

created at2011_11_05
confidenceMedium
signature severityMajor
updated at2024_05_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!