""ET TROJAN Win32/Ropest.H CnC - INBOUND set""

SID: 2025068

Revision: 1

Class Type: trojan-activity

Metadata: created_at 2014_10_30, updated_at 2014_10_30

Reference:

  • md5

  • a0d843b52e33ba4f1dc72f5a28729806

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: any

Flow: established,from_server

Contents:

  • Value: "|28 00 00 00 00 01 00 00|" Depth: 8

Within:

PCRE:

Special Options:

source