More DCRat Sig Submissions

Rule Signatures
1

More DCRat Sigs for submission based on my last submission. These are for the response data this time.

Let me know what you think or if you need anything from me. I am going to go crawl in a hole and survive this cold I am getting.

1 Like
2

Thanks @cosmicgumbo ! We’ll get those in for tomorrow.

1 Like
3

Thanks @cosmicgumbo! Here are the signatures that were released today.

Have a great weekend!

 2043417 - ET MALWARE DCRat Initial Checkin Server Response M5 (malware.rules)
 2043418 - ET MALWARE DCRat Initial Checkin Server Response M6 (malware.rules)
2 Likes