ET EXPLOIT_KIT Archie EK T2 SWF Exploit Struct Nov 20 2014
Sourceet/open
Fileemerging-exploit_kit.rules
CreatedNovember 21, 2014
UpdatedMarch 17, 2024
Classificationexploit-kit
alert http $HOME_NET any -> $EXTERNAL_NET !80 (msg:"ET EXPLOIT_KIT Archie EK T2 SWF Exploit Struct Nov 20 2014"; flow:established,to_server ; urilen:69; http.uri; content:".swf"; fast_pattern; endswith; pcre:"/^\/[a-f0-9]{64}\.swf$/"; http.host; pcre:"/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/" ; classtype:exploit-kit; sid:2019770; rev:7; metadata:created_at 2014_11_21, confidence High, signature_severity Major, updated_at 2024_03_17;)
Metadata
created at2014_11_21
confidenceHigh
signature severityMajor
updated at2024_03_17
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!