ET MALWARE ATTACKER IRCBot - PRIVMSG Response - ipconfig command output - Suricata Rule 2017292 (et/open)

ET MALWARE ATTACKER IRCBot - PRIVMSG Response - ipconfig command output

7.0.3 5.0SID: 2017292Rev: 5Enabled5 views

Fileemerging-malware.rules

CreatedAugust 7, 2013

UpdatedMarch 6, 2024

Classificationtrojan-activity

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE ATTACKER IRCBot - PRIVMSG Response - ipconfig command output"; flow:established,to_server; content:"PRIVMSG "; content:"Windows IP"; within:200; classtype:trojan-activity; sid:2017292; rev:5; metadata:created_at 2013_08_07, signature_severity Major, updated_at 2024_03_06;)

Metadata

created at2013_08_07

signature severityMajor

updated at2024_03_06

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!