ET MALWARE Possible Upatre DNS Query (jamco .com .pk)

7.0.35.0SID: 2020846Rev: 3Disabled1 views
Sourceet/open
Fileemerging-malware.rules
CreatedApril 7, 2015
UpdatedMarch 26, 2024
Classificationbad-unknown
alert dns $HOME_NET any -> any any (msg:"ET MALWARE Possible Upatre DNS Query (jamco .com .pk)"; dns.query; bsize:12; content:"jamco.com.pk"; fast_pattern; nocase; reference:md5,407cce4873bc8af9077dbb21a8762f37; classtype:bad-unknown; sid:2020846; rev:3; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, created_at 2015_04_07, malware_family Upatre, confidence Medium, signature_severity Critical, tag Exploit_Kit, tag Downloader, tag Upatre, updated_at 2024_03_26;)

References

md5
407cce4873bc8af9077dbb21a8762f37
Google SearchBrave Search

Metadata

affected productWindows_XP_Vista_7_8_10_Server_32_64_Bit
created at2015_04_07
malware familyUpatre
confidenceMedium
signature severityCritical
tagUpatre
updated at2024_03_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!