James_inthe_box

Proyecto RAT snort suricata

Oct 4th, 2019
848
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.28 KB | None | 0 0
  1. alert tcp any any -> any !$HTTP_PORTS (msg:"Proyecto RAT Initial Request"; flow:to_server,established; content:"0|7c|New"; within:8; classtype:trojan-activity; sid:20166306; rev:1; reference:url,app.any.run/tasks/f7b276c3-28b6-4d12-a327-de353ed88e66/; metadata:created_at 2019_10_4;)
Advertisement
Add Comment
Please, Sign In to add comment