alert ftp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Win32.UFRStealer.A issuing MKD command FTP"; flow:to_server,established; content:"MKD UFR_Stealer"; nocase; depth:15; reference:url,www.threatexpert.com/report.aspx?md5=a251ef38f048d695eae52626e57d617d; classtype:trojan-activity; sid:2014111; rev:6; metadata:created_at 2011_04_20, updated_at 2011_04_20;)

Added 2017-08-07 21:07:26 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET 21 (msg:"ET TROJAN Win32.UFRStealer.A issuing MKD command FTP"; flow:to_server,established; content:"MKD UFR_Stealer|0d 0a|"; nocase; depth:17; reference:url,www.threatexpert.com/report.aspx?md5=a251ef38f048d695eae52626e57d617d; classtype:trojan-activity; sid:2014111; rev:4;)

Added 2012-03-01 19:55:07 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET 21 (msg:"ET TROJAN Win32.UFRStealer.A issuing MKD command FTP"; flow:to_server,established; content:"MKD UFR_Stealer|0d 0a|"; nocase; depth:17; reference:url,www.threatexpert.com/report.aspx?md5=a251ef38f048d695eae52626e57d617d; classtype:trojan-activity; sid:2014111; rev:4;)

Added 2012-01-10 14:06:49 UTC