THL - XiebroC2 v3.1 TCP C2 Beacon - Known C2 IP Port 4444 - Suricata Rule 3500055 (hunters-ledger)

Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 13, 2026, 4:10 PM

THL - XiebroC2 v3.1 TCP C2 Beacon - Known C2 IP Port 4444

SID: 3500055Rev: 1Enabled15 viewsHistory

Sourcehunters-ledger

Filehunters-ledger.rules

CreatedApril 3, 2026

UpdatedJuly 6, 2026

Classificationtrojan-activity

alert tcp $HOME_NET any -> 193.56.255.154 4444 (msg:"THL - XiebroC2 v3.1 TCP C2 Beacon - Known C2 IP Port 4444"; classtype:trojan-activity; reference:url,the-hunters-ledger.com/hunting-detections/opendirectory-193-56-255-154-20260403-detections/; sid:3500055; rev:1; metadata:affected_product Windows, attack_target Client_Endpoint, created_at 2026_04_03, deployment Perimeter, malware_family XiebroC2, signature_severity Critical, tag C2;)

Detection details are hidden.

References

url	the-hunters-ledger.com/hunting-detections/opendirectory-193-56-255-154-20260403-detections/

Metadata

affected productWindows

attack targetClient_Endpoint

created at2026_04_03

deploymentPerimeter

malware familyXiebroC2

signature severityCritical

tagC2

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!