ET MALWARE AnubisNetworks Sinkhole HTTP Response - 195.22.26.192/26

7.0.35.0SID: 2019630Rev: 5Disabled2 views
Sourceet/open
Fileemerging-malware.rules
CreatedNovember 3, 2014
UpdatedApril 18, 2024
Classificationtrojan-activity
alert http 195.22.26.192/26 any -> $HOME_NET any (msg:"ET MALWARE AnubisNetworks Sinkhole HTTP Response - 195.22.26.192/26"; flow:established,to_client; http.server; content:"HTTPServerX"; startswith; fast_pattern; file.data; content:"14|0D 0A|"; within:4; content:"|0D 0A|0|0D 0A 0D 0A|"; distance:0; classtype:trojan-activity; sid:2019630; rev:5; metadata:created_at 2014_11_03, confidence High, signature_severity Major, updated_at 2024_04_18;)

Metadata

created at2014_11_03
confidenceHigh
signature severityMajor
updated at2024_04_18

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!