[Emerging-Sigs] Rule 2017265 FP

James Lay jlay at slave-tothe-box.net
Tue Sep 16 16:11:24 EDT 2014


FYI:

20:08:17  [1:2017265:5] ET CURRENT_EVENTS BlackHole EK Non-standard 
base64 Key [**] [Classification: A Network Trojan was Detected] 
[Priority: 1] {TCP} 64.129.104.158:80 -> x.x.x.x:49924

Hit's on: 
stv.wsj.net/dpm/scripts?key=abfad4b50ef671bedc4759a1589ebe693d406068

James


More information about the Emerging-sigs mailing list