ET MALWARE Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam

alert smtp $HOME_NET any -> $EXTERNAL_NET any (
    msg:"ET MALWARE Win32/Phorpiex Template 5 Active - Outbound Malicious Email Spam";
    flow:established,to_server;
    content:"one|20|of|20|your|20|passwords|20|is|3a|";
    content:"infected|20|with|20|my|20|private|20|malware"; distance:0;
    content:"I|20|RECORDED|20|YOU|20 28|through|20|your|20|webcam"; distance:0; fast_pattern;
    content:"bitcoin|20|wallet|20|is|3a|";
    threshold:type limit, count 1, seconds 60, track by_src;
    classtype:trojan-activity;
    sid:2027769; rev:1;
    metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2019_07_31, deployment Perimeter, malware_family Phorpiex, performance_impact Low, confidence High, signature_severity Major, tag SpamBot, updated_at 2019_07_31;
)