alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP Adware pricepeep Adware.Shopper.297"; flow:established,to_server; http.method; content:"GET"; nocase; http.uri; content:"/logger/software/hit/"; fast_pattern; nocase; content:"/?v."; nocase; reference:url,virustotal.com/en/file/1ea487b1507305f17a2cd2ab0dbcfac523419dbc27cde38e27cb5c4a8d3c9caf/analysis/; reference:url,lists.clean-mx.com/pipermail/viruswatch/20121222/037085.html; reference:md5,0564e603f9ed646553933cb0d271f906; classtype:pup-activity; sid:2016917; rev:5; metadata:attack_target Client_Endpoint, created_at 2013_05_23, deployment Perimeter, signature_severity Minor, updated_at 2024_03_17, mitre_tactic_id TA0040, mitre_tactic_name Impact, mitre_technique_id T1496, mitre_technique_name Resource_Hijacking;)