TROJAN: Backdoor.Murcy Command and Control Traffic
This signature detects the Command and Control traffic for the Backdoor.Murcy trojan. The source IP host is infected and should be removed from the network for analysis.
References
URL: http://www.commandfive.com/papers/C5_APT_C2InTheFifthDomain.pdf
Short Name
TROJAN:BACKDOOR:MURCY-CNC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
Backdoor.Murcy Command Control Traffic and
Release Date
08/03/2012
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown