Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 5, 2026, 4:07 AM

THL - AdaptixC2 Operator-Added jQuery URI with Firefox 20 UA

SID: 1900055Rev: 1Enabled5 viewsHistory
Filehunters-ledger.rules
CreatedJune 25, 2026
UpdatedJune 25, 2026
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"THL - AdaptixC2 Operator-Added jQuery URI with Firefox 20 UA"; flow:established,to_server; http.user_agent; content:"Mozilla/5.0 (Windows NT 6.2|3B| rv:20.0) Gecko/20121202 Firefox/20.0"; endswith; http.method; content:"POST"; http.uri; content:"/jquery-3.3.1.min.js"; nocase; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:1900055; rev:1;)

References

urlthe-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!