Qealler Loader sig
James_inthe_box Jan 14th, 2019 312 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
- alert tcp $HOME_NET any -> $EXTERNAL_NET !$HTTP_PORTS (msg:"Qealler Loader Checkin"; flow:established,to_server; content:"POST"; http_method; content:"ping"; http_uri; content:"output="; http_client_body; content:"q-qealler-id"; http_header; classtype:trojan-activity; sid:20166281; rev:1; metadata:created_at 2019_01_14;)
RAW Paste Data