alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32/Nubjub.A HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; fast_pattern; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:6; metadata:created_at 2010_07_30, updated_at 2010_07_30;)
Added 2017-08-07 21:02:39 UTC
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32/Nubjub.A HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; fast_pattern; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:6;)
Added 2014-08-21 18:10:24 UTC
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32/Nubjub.A HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:5;)
Added 2014-06-19 18:11:42 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:4;)
Added 2011-10-12 19:27:37 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; sid:2009521; rev:4;)
Added 2011-09-14 22:40:54 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:4;)
Added 2011-02-04 17:28:52 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:2;)
Added 2009-07-09 18:45:36 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:2;)
Added 2009-07-09 18:45:36 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; sid:2009521; rev:1;)
Added 2009-07-09 13:37:47 UTC