alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32/Nubjub.A HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; fast_pattern; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:6;)

Added 2014-08-21 18:10:24 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32/Nubjub.A HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:5;)

Added 2014-06-19 18:11:42 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; reference:url,doc.emergingthreats.net/2009521; classtype:trojan-activity; sid:2009521; rev:4;)

Added 2011-10-12 19:27:37 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; sid:2009521; rev:4;)

Added 2011-09-14 22:40:54 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET"; depth:3; http_method; content:".php"; http_uri; content:"?&mode="; http_uri; content:"&id="; http_uri; content:"&output="; http_uri; content:"&time="; http_uri; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:4;)

Added 2011-02-04 17:28:52 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:2;)

Added 2009-07-09 18:45:36 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2009521; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Unknown; sid:2009521; rev:2;)

Added 2009-07-09 18:45:36 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Unknown Trojan HTTP Check-in "; flow:established,to_server; content:"GET "; depth:4; uricontent:".php"; uricontent:"?&mode="; uricontent:"&id="; uricontent:"&output="; uricontent:"&time="; classtype:trojan-activity; sid:2009521; rev:1;)

Added 2009-07-09 13:37:47 UTC