BACKDOOR [PTsecurity] Trojan.Backdoor Echo Heartbeat

SID: 10011181Rev: 2Enabled32 views
Fileptopen-malware.rules
CreatedOctober 9, 2025
UpdatedOctober 9, 2025
Classificationtrojan-activity
alert tcp any any -> any any (msg:"BACKDOOR [PTsecurity] Trojan.Backdoor Echo Heartbeat"; flow:established, to_server; stream_size:client, =, 17; stream_size:server, <, 3; content:"|0000 78e3 0000 4f95 0000 0004 6563 686f|"; depth:16; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10011181; rev:2;)

References

urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!