alert tcp $EXTERNAL_NET 1024: -> $HOME_NET any (msg:"ET TROJAN Turkojan C&C nxt Command (nxt)"; flow:established,from_server; dsize:3; content:"nxt"; depth:3; classtype:trojan-activity; sid:2008029; rev:2;)
Added 2008-06-24 23:26:43 UTC
alert tcp $EXTERNAL_NET 1024: -> $HOME_NET any (msg:"ET TROJAN Turkojan C&C nxt Command (nxt)"; flow:established,from_server; dsize:3; content:"nxt"; depth:3; classtype:trojan-activity; sid:2008029; rev:2;)
Added 2008-06-24 23:26:43 UTC
alert tcp $EXTERNAL_NET 1024: -> $HOME_NET any (msg:"ET TROJAN Turkojan C&C nxt Command (nxt)"; flow:established,from_server; dsize:3; content:"nxt"; depth:3; classtype:trojan-activity; sid:2008029; rev:2;)
Added 2008-06-24 23:24:11 UTC
alert tcp $EXTERNAL_NET 1024: -> $HOME_NET any (msg:"ET TROJAN Turkojan C&C nxt Command (nxt)"; flow:established,from_server; dsize:3; content:"nxt"; depth:3; classtype:trojan-activity; sid:2008029; rev:2;)
Added 2008-06-24 23:24:11 UTC
alert tcp $EXTERNAL_NET 1024: -> $HOME_NET 1024: (msg:"ET TROJAN Turkojan C&C nxt Command (nxt)"; flow:established,from_server; dsize:3; content:"nxt"; depth:3; classtype:trojan-activity; sid:2008029; rev:1;)
Added 2008-03-19 09:34:06 UTC