alert tcp any any -> 171.22.30.147 80 (msg:"MalSilo MALWARE (andromeda) C&C Detected"; flow:established,to_server; reference:url,malsilo.gitlab.io/feeds/dumps/master-feed.json; classtype:command-and-control; sid:5000005; rev:1; metadata:tag peexe32, tag pegui, tag assembly, created_at 2022_12_01, malware_family andromeda, updated_at 2022_12_01;)