ET MALWARE BitCrypt site accessed via .onion SSL Proxy

7.0.35.0SID: 2018399Rev: 3Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedApril 18, 2014
UpdatedMarch 6, 2024
Classificationtrojan-activity
alert tcp $EXTERNAL_NET 443 -> $HOME_NET any (msg:"ET MALWARE BitCrypt site accessed via .onion SSL Proxy"; flow:established,to_client; content:"|55 04 03|"; content:"kphijmuo2x5expag."; nocase; distance:2; within:17; classtype:trojan-activity; sid:2018399; rev:3; metadata:created_at 2014_04_18, signature_severity Major, updated_at 2024_03_06;)

Metadata

created at2014_04_18
signature severityMajor
updated at2024_03_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!