LOADER [PTsecurity] PowerLoader User-Agent

SID: 10017487Rev: 1Enabled2 views

Fileptopen-malware.rules

CreatedJune 23, 2026

UpdatedJune 23, 2026

Classificationtrojan-activity

alert http any any -> any any (msg:"LOADER [PTsecurity] PowerLoader User-Agent"; flow:established, to_server; http.header; content:"User-Agent|3a| PLoad|0d 0a|"; threshold:type limit, track by_src, seconds 180, count 1; reference:url, www.virustotal.com/gui/file/2bd0667301cb43be4f4f413f888b23e871d623e7b1cad25a744a5b21de0253be/detection; reference:url, bi.zone/expertise/blog/fluffy-wolf-ispytal-novinki-na-rossiyskikh-kompaniyakh/; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10017487; rev:1;)

References

url	www.virustotal.com/gui/file/2bd0667301cb43be4f4f413f888b23e871d623e7b1cad25a744a5b21de0253be/detection
url	bi.zone/expertise/blog/fluffy-wolf-ispytal-novinki-na-rossiyskikh-kompaniyakh/
url	rules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!