""ET TROJAN Win32.Genome.boescz Checkin""

SID: 2018033

Revision: 3

Class Type: trojan-activity

Metadata: created_at 2014_01_29, former_category MALWARE, updated_at 2022_03_17

Reference:

• Link

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: [25,587]

Flow: to_server,established

Contents:

• Value: "|0d 0a|Subject|3a 20|TenInfect"

• Value: "|0d 0a 0d 0a|TenInfect"

Within:

PCRE:

Special Options:

source