LOADER [PTsecurity] PrivateLoader FB set priloader_2st_client_pkt

SID: 10012029Rev: 1Enabled29 views
Fileptopen-malware.rules
CreatedOctober 9, 2025
UpdatedOctober 9, 2025
Classificationtrojan-activity
alert tcp any any -> any any (msg:"LOADER [PTsecurity] PrivateLoader FB set priloader_2st_client_pkt"; flow:established, to_server; stream_size:client, =, 29; stream_size:server, =, 9; content:"|10 00 00 00|"; depth:4; flowbits:set, priloader_2st_client_pkt; flowbits:noalert; reference:url, https://tria.ge/240924-seflzatcpg/behavioral2; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10012029; rev:1;)

References

urlhttps://tria.ge/240924-seflzatcpg/behavioral2
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!