""ET TROJAN OSX/Mami Possible DNS Query to Evil DNS Server""

SID: 2025200

Revision: 2

Class Type: trojan-activity

Metadata: affected_product Mac_OSX, attack_target Client_Endpoint, created_at 2018_01_16, deployment Perimeter, malware_family Mami, performance_impact Moderate, signature_severity Major, updated_at 2018_01_16

Reference:

• Link

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: [82.163.143.135,82.163.142.137]

Destination Port: 53

Flow:

Contents:

Within:

PCRE:

Special Options:

source