🐾 - 🚨 PCHunter - Suspicious Windows 🪟 administration toolkit 🧰 - liked by Lockbit group 👿 - Suricata Rule 3300098 (pawpatrules)

🐾 - 🚨 PCHunter - Suspicious Windows 🪟 administration toolkit 🧰 - liked by Lockbit group 👿

SID: 3300098Rev: 11 views

Sourcepawpatrules

CreatedSeptember 18, 2022

UpdatedSeptember 18, 2022

Classificationpolicy-violation

alert http any any -> any any (msg:"🐾 - 🚨 PCHunter - Suspicious Windows 🪟 administration toolkit 🧰 - liked by Lockbit group 👿"; flow:to_server, stateless; http.user_agent; content:"PCHunter"; reference:url,https://www.majorgeeks.com/files/details/pc_hunter.html; reference:url,https://www.trendmicro.com/en_us/research/21/h/lockbit-resurfaces-with-version-2-0-ransomware-detections-in-chi.html; reference:url,https://unit42.paloaltonetworks.com/lockbit-2-ransomware/; metadata:created_at 2022_09_18, updated_at 2022_09_18; sid:3300098; rev:1; classtype:policy-violation;)

References

url	https://www.majorgeeks.com/files/details/pc_hunter.html
url	https://www.trendmicro.com/en_us/research/21/h/lockbit-resurfaces-with-version-2-0-ransomware-detections-in-chi.html
url	https://unit42.paloaltonetworks.com/lockbit-2-ransomware/

🐾 - 🚨 PCHunter - Suspicious Windows 🪟 administration toolkit 🧰 - liked by Lockbit group 👿

References

Metadata

Comments (0)