""ET TROJAN Downloader.Win32.Tesch.A Bot Command Checkin 2""

SID: 2018620

Revision: 5

Class Type: trojan-activity

Metadata: created_at 2014_07_01, former_category MALWARE, updated_at 2022_03_18

Reference:

  • md5

  • 872763d48730506af7eee0bf22c2f47b

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 443

Flow: established,to_server

Contents:

  • Value: "|01 00 30 01 01 00|" Depth: 6

Within:

PCRE:

Special Options:

  • fast_pattern

source