ET MALWARE Possible Office Doc with Embedded VBA containing Reverse Meterpreter Shell

7.0.35.0SID: 2020170Rev: 3Enabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedJanuary 13, 2015
UpdatedMarch 14, 2024
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE Possible Office Doc with Embedded VBA containing Reverse Meterpreter Shell"; flow:established,to_client; flowbits:isset,et.DocVBAProject; file.data; content:"windows/meterpreter/reverse_"; nocase; reference:url,github.com/enigma0x3/Generate-Macro/blob/master/Generate-Macro.ps1; classtype:trojan-activity; sid:2020170; rev:3; metadata:created_at 2015_01_13, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_14;)

References

urlgithub.com/enigma0x3/Generate-Macro/blob/master/Generate-Macro.ps1

Metadata

created at2015_01_13
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_14

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!