TROJAN: China Chopper Webshell Command and Control Traffic

This signature detects the Command and Control traffic for the Win.Backdoor.Chopper Webshell Trojan. The source IP host is infected and should be removed from the network for analysis.

Short Name
TROJAN:BACKDOOR:CHINACHOPPERCNC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
China Chopper Command Control Traffic Webshell and
Release Date
08/24/2015
Supported Platforms

srx-branch-12.3

srx-branch-19.3

vsrx3bsd-19.2

vsrx3bsd-19.4

srx-branch-19.4

vsrx-19.4

srx-19.4

vsrx-12.3

srx-12.3

vsrx-19.2

srx-19.3

vmx-19.4

mx-12.3

mx-19.4

mx-19.3

vmx-19.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?