Re: Yumato

["lists () packetmail net" <lists () packetmail net>]

On 08/05/2014 01:01 PM, James Lay wrote:
> On 2014-08-05 08:51, usuarionuevo nuevo nuevo wrote:
> > Hi, I'm new on this list,
> >
> > Anyone knows something about this snort signature: ET TROJAN
> > Dropper-497 (Yumato) Initial Checkin
> >
> > What does this alert means?
> >
> >  Thx
> >
> >  usuarionuevo
>
> Per the sig ref:
>
> http://doc.emergingthreats.net/bin/view/Main/TrojanDropper497
>
> James

That's an old signature too, got a PCAP you can share?

Cheers,
Nathan

------------------------------------------------------------------------------
Infragistics Professional
Build stunning WinForms apps today!
Reboot your WinForms applications with our WinForms controls. 
Build a bridge from your legacy apps to the future.
http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!