ET MOBILE_MALWARE Android Marcher Trojan Download - Austrian Bank Targeting
Sourceet/open
Fileemerging-mobile_malware.rules
CreatedNovember 3, 2017
UpdatedMay 2, 2024
Classificationtrojan-activity
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MOBILE_MALWARE Android Marcher Trojan Download - Austrian Bank Targeting"; flow:established,to_client ; flowbits:isset,ET.marcherphish ; http.stat_code; content:"200"; http.header; header_lowercase; content:"application/vnd.android.package-archive"; fast_pattern; content:"content-description|3a 20|File|20|Transfer"; file.data; content:"PK"; startswith; classtype:trojan-activity; sid:2024953; rev:6; metadata:affected_product Android, attack_target Mobile_Client, created_at 2017_11_03, deployment Perimeter, confidence High, signature_severity Major, tag Android, updated_at 2024_05_02;)
Metadata
affected productAndroid
attack targetMobile_Client
created at2017_11_03
deploymentPerimeter
confidenceHigh
signature severityMajor
tagAndroid
updated at2024_05_02
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!