Think you have a false positive on this rule?

Sid 1-48449

Message

MALWARE-CNC Win.Trojan.Exaramel outbound cnc connection

Summary

This event is generated when Win.Trojan.Exaramel is detected on a network.

Impact

A Network Trojan was detected

Detailed information

Affected systems

Ease of attack

False positives

False negatives

Corrective action

Contributors

  • Cisco's Talos Intelligence Group

Additional References

  • www.virustotal.com/#/file/2f12fd3fb35f8690eea80dd48de98660c55df7f5c26b49d0cc82aaf3635b0c7a