""ET TROJAN Philis.J ICMP Sweep (Payload Hello World)""

SID: 2008017

Revision: 4

Class Type: trojan-activity

Metadata: created_at 2010_07_30, updated_at 2017_05_11

Reference:

• Link

Protocol: icmp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: any

Flow:

Contents:

• Value: "Hello,World"

Within:

PCRE:

Special Options:

source