ChinaCopper and General Discussion on PA Threat DB

Reply
L0 Member

ChinaCopper and General Discussion on PA Threat DB

So we get an alert today for ChinaCopper.Gen C&C inbound traffic. In doing research to see what this is, we look at the Threat DB, only to find the description of ChinaCopper.Gen to be: "This signature detects ChinaCopper.Gen Command and Control Traffic. " No other information, and no matter how I search the Internet I only get information on metal copper coming out of China. 

 

Am I missing anything on where to search for what these are? And is anyone else frustrated at the lack of info in the ThreatDB?

Tags (2)
Highlighted
L4 Transporter

Re: ChinaCopper and General Discussion on PA Threat DB

Hi GStach,

 

Sorry for the confusion.

 

ChinaCopper.Gen Command and Control Traffic is not proper name. Should be ChinaChopper.Gen Command and Control Traffic. We already noted and now working to fix.

 

I believe that the following URLs gives detailed infromation about ChinaChopper.Gen Command and Control Traffic

 

https://www.fireeye.com/blog/threat-research/2013/08/breaking-down-the-china-chopper-web-shell-part-...
https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-china-chopper.pdf

 

Best

 

-Koji

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!