ET MALWARE OSX/WireLurker DNS Query Domain www.comeinbaby.com

7.0.35.0SID: 2019667Rev: 8Enabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedNovember 7, 2014
UpdatedApril 13, 2024
Classificationtrojan-activity
alert dns $HOME_NET any -> any any (msg:"ET MALWARE OSX/WireLurker DNS Query Domain www.comeinbaby.com"; dns.query; content:"comeinbaby.com"; startswith; fast_pattern; nocase; endswith; reference:url,www.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/reports/Unit_42/unit42-wirelurker.pdf; classtype:trojan-activity; sid:2019667; rev:8; metadata:created_at 2014_11_07, malware_family OSX_WireLurker, confidence High, signature_severity Major, updated_at 2024_04_13;)

References

urlwww.paloaltonetworks.com/content/dam/paloaltonetworks-com/en_US/assets/pdf/reports/Unit_42/unit42-wirelurker.pdf

Metadata

created at2014_11_07
malware familyOSX_WireLurker
confidenceHigh
signature severityMajor
updated at2024_04_13

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!