James_inthe_box

Snort sig

Oct 20th, 2018
610
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.30 KB | None | 0 0
  1. alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"4RR0B4R Loader User-Agent"; flow:established,to_server; content:"User-Agent|3a| 4RR0B4R 4 X0T4 D4 TU4 M4E"; http_header; reference:md5,9f9c729044dcd245dc3f306ec749c53a; classtype:trojan-activity; sid:20166263; rev:1; metadata:created_at 2018_10_20;)
Advertisement
Add Comment
Please, Sign In to add comment