🐾 - 🔒 TLS connection to (sni) - temp.sh - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak

SID: 3300598Rev: 80 views
History
Sourcepawpatrules
CreatedMarch 4, 2022
UpdatedSeptember 16, 2025
Classificationbad-unknown
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - temp.sh - File Sharing solution 🗃 - Possible Leak 🚱 - seen in 🔒 Conti Ransomware Leak"; flow:to_server, stateless; tls_sni; content:"temp.sh"; nocase; pcre:"/(^|\.)temp\.sh$/"; metadata:created_at 2022_03_04, updated_at 2025_09_16; sid:3300598; rev:8; classtype:bad-unknown;)

Metadata

created at2022_03_04
updated at2025_09_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!