ET MALWARE PWS Win32/Lmir.BMQ checkin

Query · suricata

dsize:19;
content:"This|27|s|20|Ping|20|Packet|21|";
Raw source ET MALWARE PWS Win32/Lmir.BMQ checkin · Suricata
Esc
Published by Emerging Threats Open ↗, licensed under BSD 3-Clause ↗. Line breaks added for readability; the rule is otherwise unchanged. 
alert icmp any any -> any any (
    msg:"ET MALWARE PWS Win32/Lmir.BMQ checkin";
    dsize:19;
    content:"This|27|s|20|Ping|20|Packet|21|";
    reference:md5,0fe0cf9a2d8c3ccd1c92acbb81ff6343;
    reference:url,www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=PWS%3AWin32%2FLmir.BMQ;
    classtype:command-and-control;
    sid:2017724; rev:3;
    metadata:created_at 2013_11_15, malware_family Win32_Lmir_BMQ, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;
)

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.