Rule Category

MALWARE-OTHER --

Alert Message

MALWARE-OTHER Win.Trojan.AZORult malicious executable download attempt

Rule Explanation

This event is generated when victim computer tries to download malicious AZORult malware Impact: A Network Trojan was detected Details: Ease of Attack:

What To Look For

When Snort sees a common obfuscation technique associated with this malware it will alert.

Known Usage

No public information

False Positives

No known false positives

Contributors

Cisco Talos Intelligence Group

Rule Groups

No rule groups

CVE

None

Additional Links

Rule Vulnerability

No information provided

CVE Additional Information

This product uses data from the NVD API but is not endorsed or certified by the NVD.

None

MITRE ATT&CK Framework

Tactic: Defense Evasion

Technique: Obfuscated Files or Information

For reference, see the MITRE ATT&CK vulnerability types here: https://attack.mitre.org