🐾 - 💀 Possible Malicious TCP answer from 🦹 Villain C2 with netcat reverse tcp payload
Sourcepawpatrules
CreatedOctober 17, 2023
UpdatedOctober 17, 2023
Classificationtrojan-activity
alert tcp-pkt any any -> any any (msg:"🐾 - 💀 Possible Malicious TCP answer from 🦹 Villain C2 with netcat reverse tcp payload"; flow:to_client, stateless; content:"|65 63 68 6f 20|"; fast_pattern; pcre:"/echo [a-z0-9]{32}/"; content:"|0a|"; endswith; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, attack_target Client_Endpoint, created_at 2023_10_17, updated_at 2023_10_17; sid:3300729; rev:14; classtype:trojan-activity;)
Metadata
affected productWindows_XP_Vista_7_8_10_Server_32_64_Bit
attack targetClient_Endpoint
created at2023_10_17
updated at2023_10_17
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!