THL HijackLoader-Penguish-Rugmi AsyncRAT SSL JA3 Fingerprint 07af4aa9e4d215a5ee63f9a0a277fbe3 (RAT C2 Fleet Indicator)

SID: 3500150Rev: 1Enabled5 views
Filehunters-ledger.rules
CreatedJuly 13, 2026
UpdatedJuly 13, 2026
Classificationtrojan-activity
alert tls $HOME_NET any -> any any (msg:"THL HijackLoader-Penguish-Rugmi AsyncRAT SSL JA3 Fingerprint 07af4aa9e4d215a5ee63f9a0a277fbe3 (RAT C2 Fleet Indicator)"; flow:established,to_server; ja3.hash; content:"07af4aa9e4d215a5ee63f9a0a277fbe3"; endswith; threshold:type limit,track by_src,count 3,seconds 300; classtype:trojan-activity; sid:3500150; rev:1; metadata:author The_Hunters_Ledger, date 2026-05-06, reference https://the-hunters-ledger.com/hunting-detections/opendirectory-62-60-237-100-20260506-detections/;)

Metadata

authorThe_Hunters_Ledger
date2026-05-06
referencehttps://the-hunters-ledger.com/hunting-detections/opendirectory-62-60-237-100-20260506-detections/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!