ET EXPLOIT_KIT Unknown Malvertising EK Landing URI Sruct Aug 22 2014

7.0.35.0SID: 2018989Rev: 3Disabled1 views
Sourceet/open
Fileemerging-exploit_kit.rules
CreatedAugust 23, 2014
UpdatedMarch 18, 2024
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT Unknown Malvertising EK Landing URI Sruct Aug 22 2014"; flow:established,to_server; urilen:16; http.uri; content:"/nhqdxa/eipm.php"; fast_pattern; reference:url,malware-traffic-analysis.net/2014/08/22/index2.html; reference:url,www.malwaresigs.com/2013/10/14/unknown-ek/; classtype:exploit-kit; sid:2018989; rev:3; metadata:created_at 2014_08_23, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_18;)

References

urlmalware-traffic-analysis.net/2014/08/22/index2.html
urlwww.malwaresigs.com/2013/10/14/unknown-ek/

Metadata

created at2014_08_23
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_18

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!