ET MALWARE Backdoor.Win32/Dervec.gen Connectivity Check to Google

7.0.35.0SID: 2019129Rev: 13Enabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedJune 12, 2012
UpdatedApril 7, 2024
Classificationtrojan-activity
alert http1 $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE Backdoor.Win32/Dervec.gen Connectivity Check to Google"; flow:established,to_server; http.request_body; content:"|00 00 00 00 00 00 00 00 00 00|"; startswith; http.header; content:"HOST|3a 20|www.google.com|0d 0a|"; startswith; fast_pattern; reference:md5,5eaae2d6a4b5d338b83ea5d97af93672; classtype:trojan-activity; sid:2019129; rev:13; metadata:created_at 2012_06_12, confidence Medium, signature_severity Major, updated_at 2024_04_07;)

References

md5
5eaae2d6a4b5d338b83ea5d97af93672
Google SearchBrave Search

Metadata

created at2012_06_12
confidenceMedium
signature severityMajor
updated at2024_04_07

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!