ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND

alert tcp $HOME_NET any -> $EXTERNAL_NET any (
    msg:"ET MALWARE Windows route Microsoft Windows DOS prompt command exit OUTBOUND";
    flow:established,to_server;
    content:"Route Table";
    content:"Active Routes|3a|"; fast_pattern;
    content:"Network Destination";
    content:"Netmask";
    content:"Gateway";
    content:"Interface";
    content:"Metric";
    reference:md5,a22af4fc7fe011069704a15296634ca6;
    classtype:trojan-activity;
    sid:2019082; rev:3;
    metadata:created_at 2014_08_28, signature_severity Major, updated_at 2020_08_19, reviewed_at 2024_03_20;
)