""ET TROJAN Win32/Banbra Banking Trojan Communication""

SID: 2012226

Revision: 2

Class Type: trojan-activity

Metadata: created_at 2011_01_24, updated_at 2011_01_24

Reference:

  • md5

  • 7ce03717d6879444d8e45b7cf6470c67

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: $HTTP_PORTS

Flow: established,to_server

Contents:

  • Value: "para="

  • Value: "titulo="

  • Value: "mensagem="

Within:

PCRE:

Special Options:

  • nocase

  • nocase

  • nocase

source