alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Telegram for Windows 🪟"; flow:to_server, stateless; ja3.hash; content:"57fbe0aefee44901190849b0e877a5e1"; fast_pattern; tls_sni; content:"td.telegram.org"; nocase; reference:url,https://telegram.org/; metadata:created_at 2023_06_23, updated_at 2023_06_23; sid:3300226; rev:1; classtype:policy-violation;)