ET MALWARE Kelihos CnC Server Activity
Sourceet/open
Fileemerging-malware.rules
CreatedDecember 22, 2015
UpdatedMarch 14, 2024
Classificationcommand-and-control
alert ip $HOME_NET any -> [206.72.206.74,206.72.206.75,206.72.206.76,206.72.206.77,206.72.206.78,66.45.241.130,66.45.241.131,66.45.241.132,66.45.241.133,66.45.241.134] any (msg:"ET MALWARE Kelihos CnC Server Activity"; flowbits:set,ET.Evil ; threshold:type limit, track by_src, seconds 3600, count 1 ; reference:url,blog.malwaremustdie.org/2015/12/mmd-0046-2015-kelihos-cnc-activity-on.html ; classtype:command-and-control; sid:2022294; rev:2; metadata:created_at 2015_12_22, signature_severity Major, updated_at 2024_03_14;)
Metadata
created at2015_12_22
signature severityMajor
updated at2024_03_14
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!