ET WEB_CLIENT Fake Trojan Dropper purporting to be missing application page landing

7.0.35.0SID: 2017301Rev: 5Disabled1 views
Sourceet/open
Fileemerging-web_client.rules
CreatedAugust 8, 2013
UpdatedApril 7, 2024
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT Fake Trojan Dropper purporting to be missing application page landing"; flow:established,to_client; file.data; content:"Unable to find |22|"; content:"|20|Please Click Here to install......"; within:85; classtype:trojan-activity; sid:2017301; rev:5; metadata:created_at 2013_08_08, signature_severity Major, updated_at 2024_04_07;)

Metadata

created at2013_08_08
signature severityMajor
updated at2024_04_07

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!