🐾 - 🚨 Suspicious flow to Discord.com - Possible Python Disin Trojan 🐴 C2 connection - Suricata Rule 3300721 (pawpatrules)

🐾 - 🚨 Suspicious flow to Discord.com - Possible Python Disin Trojan 🐴 C2 connection

SID: 3300721Rev: 10 views

Sourcepawpatrules

CreatedJune 21, 2023

UpdatedJune 21, 2023

Classificationtrojan-activity

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Suspicious flow to Discord.com - Possible Python Disin Trojan 🐴 C2 connection"; flow:to_server, stateless; ja3.hash; content:"629273f159de88e0d3860a95d94ac128"; tls_sni; content:"discord.com"; metadata:former_category JA3; reference:url,https://www.virustotal.com/gui/file/d8fa3fe4104b545e8bbc5816e1efafe541d146c451d8ce085bab537f40e36c0f/detection; metadata:created_at 2023_06_21, updated_at 2023_06_21; sid:3300721; rev:1; classtype:trojan-activity;)

References

url	https://www.virustotal.com/gui/file/d8fa3fe4104b545e8bbc5816e1efafe541d146c451d8ce085bab537f40e36c0f/detection

🐾 - 🚨 Suspicious flow to Discord.com - Possible Python Disin Trojan 🐴 C2 connection

References

Metadata

Comments (0)