alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; http_uri; content:"User-Agent|3a 20|Tesla"; http_header; fast_pattern; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:4; metadata:created_at 2013_05_28, former_category MALWARE, updated_at 2020_11_05;)

Added 2020-11-05 18:35:55 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; http_uri; content:"User-Agent|3a 20|Tesla"; http_header; fast_pattern; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:4; metadata:created_at 2013_05_28, former_category MALWARE, updated_at 2020_03_09;)

Added 2020-08-05 19:09:06 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; http_uri; content:"User-Agent|3a 20|Tesla"; http_header; fast_pattern; metadata: former_category MALWARE; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:4; metadata:created_at 2013_05_28, updated_at 2020_03_09;)

Added 2020-03-09 21:02:07 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; content:"User-Agent|3a| Tesla"; http_header; fast_pattern:only; metadata: former_category MALWARE; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:2; metadata:created_at 2013_05_28, updated_at 2019_10_07;)

Added 2019-10-07 19:58:33 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; content:"User-Agent|3a| Tesla"; http_header; fast_pattern:only; metadata: former_category MALWARE; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:2; metadata:created_at 2013_05_28, updated_at 2013_05_28;)

Added 2019-09-26 19:57:24 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; content:"User-Agent|3a| Tesla"; http_header; fast_pattern:only; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:2; metadata:created_at 2013_05_28, updated_at 2013_05_28;)

Added 2018-09-13 19:47:03 UTC

Added 2018-09-13 17:57:41 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET"; http_method; content:".php?T="; content:"User-Agent|3a| Tesla"; http_header; fast_pattern:only; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:2; metadata:created_at 2013_05_28, updated_at 2013_05_28;)

Added 2017-08-07 21:10:46 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Variant.Kazy.174106 Checkin"; flow:established,to_server; content:"GET "; nocase; depth:4; pcre:"/^[^\r\n]+?\.php\?T=/R"; content:"User-Agent|3a| Tesla"; fast_pattern:only; reference:md5,ff7a263e89ff01415294470e1e52c010; classtype:trojan-activity; sid:2016939; rev:1;)

Added 2013-05-28 21:46:41 UTC