""ET TROJAN US-CERT TA14-353A Proxy Tool 3""

SID: 2020019

Revision: 2

Class Type: trojan-activity

Metadata: created_at 2014_12_23, updated_at 2021_08_20

Reference:

Protocol: tcp

Source Network: any

Source Port: ![902]

Destination Network: any

Destination Port: any

Flow: established

Contents:

  • Value: "|82 f4 de d4 d3 c2 ca f5 c8 c8 d3 82 fb f4 de d4 d3 c2 ca 94 95 fb d4 d1 c4 cf c8 d4 d3 89 c2 df c2 87 8a cc 87 00|"

Within:

PCRE:

Special Options:

source