Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Jul 13, 2026, 4:10 PM

THL - AdaptixC2 Operator Beacon C2 Traffic to 45.130.148.125 - Firefox 20 UA

SID: 3500061Rev: 1Enabled3 viewsHistory
Filehunters-ledger.rules
CreatedMarch 17, 2026
UpdatedJuly 5, 2026
Classificationtrojan-activity
alert http $HOME_NET any -> 45.130.148.125 any (msg:"THL - AdaptixC2 Operator Beacon C2 Traffic to 45.130.148.125 - Firefox 20 UA"; flow:established,to_server; http.user_agent; content:"Mozilla/5.0 (Windows NT 6.2|3B| rv:20.0) Gecko/20121202 Firefox/20.0"; endswith; http.method; content:"POST"; reference:url,the-hunters-ledger.com/reports/opendirectory-45-130-148-125-20260430/; classtype:trojan-activity; sid:3500061; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!