""ET TROJAN Win32/Cutwail.BE Checkin 1""

SID: 2014271

Revision: 3

Class Type: trojan-activity

Metadata: created_at 2012_02_22, updated_at 2014_04_28

Reference:

  • md5

  • 45ab3554f3d60d07fc5228faff7784e1

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: established,from_client

Contents:

  • Value: "|16 03 00 00 37 01 00 00 33 03 00|" Depth: 11

Within:

PCRE:

Special Options:

source