alert tcp any any -> $HOME_NET [139,445] (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; reference:url,xinn.org/Snort-rctrlx.html; reference:url,doc.emergingthreats.net/2010782; classtype:suspicious-filename-detect; sid:2010782; rev:2;)

Added 2011-10-12 19:30:36 UTC


alert tcp any any -> $HOME_NET [139,445] (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; classtype:suspicious-filename-detect; reference:url,xinn.org/Snort-rctrlx.html; reference:url,doc.emergingthreats.net/2010782; sid:2010782; rev:2;)

Added 2011-09-14 22:43:45 UTC


alert tcp any any -> $HOME_NET [139,445] (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; classtype:suspicious-filename-detect; reference:url,xinn.org/Snort-rctrlx.html; reference:url,doc.emergingthreats.net/2010782; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_SecTools; sid:2010782; rev:2;)

Added 2011-02-04 17:30:26 UTC


alert tcp any any -> $HOME_NET [139,445] (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; reference:url,xinn.org/Snort-rctrlx.html;classtype:suspicious-filename-detect; reference:url,doc.emergingthreats.net/2010782; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_SecTools; sid:2010782; rev:2;)

Added 2010-02-08 10:47:13 UTC


alert tcp any any -> $HOME_NET [139,445] (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; reference:url,xinn.org/Snort-rctrlx.html;classtype:suspicious-filename-detect; reference:url,doc.emergingthreats.net/2010782; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_SecTools; sid:2010782; rev:2;)

Added 2010-02-08 10:47:13 UTC


alert tcp any any -> $HOME_NET 139:445 (msg:"ET POLICY RemoteControlX? rctrlx service created"; flow:to_server,established; content:"|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"; reference:url,xinn.org/Snort-rctrlx.html;classtype:suspicious-filename-detect; reference:url,doc.emergingthreats.net/2010782; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_SecTools; sid:2010782; rev:2;)

Added 2010-02-08 10:25:55 UTC


Topic revision: r1 - 2011-10-12 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats