[Snort-sigs] Yumato

lists at ...3397... lists at ...3397...
Tue Aug 5 14:06:35 EDT 2014


On 08/05/2014 01:01 PM, James Lay wrote:
> On 2014-08-05 08:51, usuarionuevo nuevo nuevo wrote:
>> Hi, I'm new on this list,
>>
>> Anyone knows something about this snort signature: ET TROJAN
>> Dropper-497 (Yumato) Initial Checkin
>>
>> What does this alert means?
>>
>>  Thx
>>
>>  usuarionuevo
> 
> Per the sig ref:
> 
> http://doc.emergingthreats.net/bin/view/Main/TrojanDropper497
> 
> James

That's an old signature too, got a PCAP you can share?

Cheers,
Nathan




More information about the Snort-sigs mailing list