""ET TROJAN Possible Godzilla Loader Base64 Filename""

SID: 2022594

Revision: 2

Class Type: trojan-activity

Metadata: created_at 2016_03_05, updated_at 2016_05_24

Reference:

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: $HTTP_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow: from_server,established

Contents:

• Value: "200"

• Value: "|47 4f 44 5a 49 4c 4c 41|"

• Value: "<div style=|22|display|3a|none|22| id=|22|" Depth: 30

• Value: "