Signature Detail
Short Name |
TROJAN:ENFAL-LURID-CNC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
Enfal aka Lurid Command and Control Traffic |
Release Date |
2013/01/01 |
Update Number |
2219 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Enfal/Lurid Command and Control Traffic
This signature detects the Command and Control traffic for the Enfal (also known as Lurid). The source IP host is infected and should be removed from the network for analysis.
References