""ET TROJAN Win32.Cerberus RAT Client pong""

SID: 2013773

Revision: 2

Class Type: trojan-activity

Metadata: created_at 2011_10_14, updated_at 2011_10_14

Reference:

  • md5

  • 76e084e9420bfaa31c0f0bf000f1c301

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: from_client,established

Contents:

  • Value: "wZ2pla" Depth: 6

Within:

PCRE:

Special Options:

source