ET MALWARE Syrian.Slideshow Sending Information via SMTP

7.0.3 5.0SID: 2019975Rev: 1Disabled1 views

Fileemerging-malware.rules

CreatedDecember 18, 2014

UpdatedJuly 26, 2019

Classificationtrojan-activity

alert tcp $HOME_NET any -> $EXTERNAL_NET [25,587] (msg:"ET MALWARE Syrian.Slideshow Sending Information via SMTP"; flow:established,to_server; content:"Subject|3a 20|repo|0d 0a|"; content:"filename=|22|mxtd|22|"; reference:md5,f8bfb82aa92ea6a8e4e0b378781b3859; reference:url,citizenlab.org/2014/12/malware-attack-targeting-syrian-isis-critics; classtype:trojan-activity; sid:2019975; rev:1; metadata:created_at 2014_12_18, signature_severity Major, updated_at 2019_07_26;)

References

md5	f8bfb82aa92ea6a8e4e0b378781b3859 Google Search Brave Search
url	citizenlab.org/2014/12/malware-attack-targeting-syrian-isis-critics

ET MALWARE Syrian.Slideshow Sending Information via SMTP

References

Metadata

Comments (0)