#alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:6; metadata:created_at 2014_11_08, former_category MALWARE, updated_at 2022_04_22;)

Added 2022-05-19 19:06:30 UTC

#alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_08, former_category MALWARE, updated_at 2022_04_22;)

Added 2022-04-22 18:59:04 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_08, former_category MALWARE, updated_at 2020_08_03;)

Added 2021-09-21 19:59:40 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_07, former_category MALWARE, updated_at 2020_08_03;)

Added 2020-08-05 19:10:28 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; metadata: former_category MALWARE; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_07, updated_at 2020_08_03;)

Added 2020-08-03 18:23:38 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; metadata: former_category MALWARE; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_07, updated_at 2016_12_29;)

Added 2019-09-26 19:57:50 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_07, updated_at 2016_12_29;)

Added 2018-09-13 19:49:46 UTC

Added 2018-09-13 17:59:16 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5; metadata:created_at 2014_11_07, updated_at 2016_12_29;)

Added 2017-08-07 21:13:59 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; content:!"Host|3a| cleanerapp.net"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:5;)

Added 2016-12-30 12:30:58 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; content:!"gigwise.com|0d 0a|"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:4;)

Added 2016-12-27 17:25:22 UTC

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Possible Archie EK Payload Checkin GET"; flow:established,to_server; content:"GET"; http_method; content:"/log?log="; depth:9; http_uri; content:!"Referer|3a|"; http_header; reference:md5,41c0cdde6be5166606008b2d02f3a128; classtype:trojan-activity; sid:2019680; rev:3;)

Added 2014-11-07 19:08:10 UTC