# MALWARE - classtype:misc-activity

**URL:** <https://community.emergingthreats.net/t/malware-classtype-misc-activity/1151>\
**Category:** Rule Signatures\
**Created:** [November 23, 2023, 10:06am UTC](https://community.emergingthreats.net/t/malware-classtype-misc-activity/1151 "2023-11-23T10:06:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jane0sint](https://sea2.discourse-cdn.com/flex016/user_avatar/community.emergingthreats.net/jane0sint/32/398_2.png) [@Jane0sint](https://community.emergingthreats.net/u/Jane0sint)\
**Post date:** [November 23, 2023, 10:06am UTC](https://community.emergingthreats.net/t/malware-classtype-misc-activity/1151/1 "2023-11-23T10:06:51Z")

</div>

Hey, I noticed a discrepancy between the class and the message:

```auto
ETPRO MALWARE Agent Tesla Exfil via SMTP
classtype:misc-activity; 
sid:2855245; 
former_category MALWARE, 
malware_family AgentTesla, 
confidence High, 
signature_severity Critical,

```

Best regards.  
Jane.

---

<div class="post-metadata">

**Author:** ![jtaylor](https://sea2.discourse-cdn.com/flex016/user_avatar/community.emergingthreats.net/jtaylor/32/12_2.png) [@jtaylor](https://community.emergingthreats.net/u/jtaylor)\
**Post date:** [November 27, 2023, 1:08pm UTC](https://community.emergingthreats.net/t/malware-classtype-misc-activity/1151/2 "2023-11-27T13:08:49Z")

</div>

Thank you! We will have an updated version out with todays release.

JT