#alert udp $HOME_NET any -> $EXTERNAL_NET 6892 (msg:"ET TROJAN W32/Cerber.Ransomware CnC? Checkin M4"; dsize:14; pcre:"/^[a-f0-9]{14}$/"; threshold: type both, track by_src, count 1, seconds 60; reference:md5,1f41be13d5d19e1a5c76b6d7256a8df4; reference:md5,6707e861e377409bd1037452c7c5fa74; classtype:trojan-activity; sid:2023695; rev:2; metadata:attack_target Client_Endpoint, created_at 2017_01_05, deployment Perimeter, former_category MALWARE, malware_family Cerber, signature_severity Major, tag Ransomware, tag Ransomware_Cerber, updated_at 2017_01_05, mitre_tactic_id TA0040, mitre_tactic_name Impact, mitre_technique_id T1486, mitre_technique_name Data_Encrypted_for_Impact;)

Added 2021-10-04 19:24:50 UTC


#alert udp $HOME_NET any -> $EXTERNAL_NET 6892 (msg:"ET TROJAN W32/Cerber.Ransomware CnC? Checkin M4"; dsize:14; pcre:"/^[a-f0-9]{14}$/"; threshold: type both, track by_src, count 1, seconds 60; reference:md5,1f41be13d5d19e1a5c76b6d7256a8df4; reference:md5,6707e861e377409bd1037452c7c5fa74; classtype:trojan-activity; sid:2023695; rev:2; metadata:created_at 2017_01_05, former_category MALWARE, malware_family Cerber, tag Ransomware_Cerber, updated_at 2017_01_05;)

Added 2020-08-05 19:13:00 UTC


#alert udp $HOME_NET any -> $EXTERNAL_NET 6892 (msg:"ET TROJAN W32/Cerber.Ransomware CnC? Checkin M4"; dsize:14; pcre:"/^[a-f0-9]{14}$/"; threshold: type both, track by_src, count 1, seconds 60; metadata: former_category MALWARE; reference:md5,1f41be13d5d19e1a5c76b6d7256a8df4; reference:md5,6707e861e377409bd1037452c7c5fa74; classtype:trojan-activity; sid:2023695; rev:2; metadata:tag Ransomware_Cerber, created_at 2017_01_05, malware_family Cerber, updated_at 2017_01_05;)

Added 2019-09-19 19:26:44 UTC


#alert udp $HOME_NET any -> $EXTERNAL_NET 6892 (msg:"ET TROJAN W32/Cerber.Ransomware CnC? Checkin M4"; dsize:14; pcre:"/^[a-f0-9]{14}$/"; threshold: type both, track by_src, count 1, seconds 60; reference:md5,1f41be13d5d19e1a5c76b6d7256a8df4; reference:md5,6707e861e377409bd1037452c7c5fa74; classtype:trojan-activity; sid:2023695; rev:2; metadata:tag Ransomware_Cerber, created_at 2017_01_05, malware_family Cerber, updated_at 2017_01_05;)

Added 2017-08-07 21:18:54 UTC


#alert udp $HOME_NET any -> $EXTERNAL_NET 6892 (msg:"ET TROJAN W32/Cerber.Ransomware CnC? Checkin M4"; dsize:14; pcre:"/^[a-f0-9]{14}$/"; threshold: type both, track by_src, count 1, seconds 60; reference:md5,1f41be13d5d19e1a5c76b6d7256a8df4; reference:md5,6707e861e377409bd1037452c7c5fa74; classtype:trojan-activity; sid:2023695; rev:2;)

Added 2017-01-05 17:13:04 UTC


Topic revision: r1 - 2021-10-04 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats