alert dns $HOME_NET any -> any any (msg:"ET MALWARE SystemdMiner CnC Activity"; dns.query; content:"2iuu6o3zbmwynik2.tor2web."; nocase; startswith; reference:md5,9270e6df6486937cae29ae2e87b13373; reference:md5,8b606eefd222ee44bc0fcf305bde6340; classtype:trojan-activity; sid:2030200; rev:3; metadata:affected_product Linux, attack_target Client_Endpoint, created_at 2020_05_21, deployment Perimeter, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_04_12;)