🐾 - 🚨 Connection to an IP address flagged at Qakbot C2 - Suricata Rule 3301162 (pawpatrules)

🐾 - 🚨 Connection to an IP address flagged at Qakbot C2

SID: 3301162Rev: 30 views

Sourcepawpatrules

CreatedAugust 24, 2020

UpdatedApril 27, 2024

Classificationtrojan-activity

alert ip any any -> 185.104.29.52 any (msg:"🐾 - 🚨 Connection to an IP address flagged at Qakbot C2"; reference:url,https://bazaar.abuse.ch/sample/a1ea10b25a1dd9165910a6859847f4bc6437f06e4651f8cc31ddf3b9d50be3c2/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot; metadata:created_at 2020_08_24, updated_at 2024_04_27; sid:3301162; rev:3; classtype:trojan-activity;)

References

url	https://bazaar.abuse.ch/sample/a1ea10b25a1dd9165910a6859847f4bc6437f06e4651f8cc31ddf3b9d50be3c2/
url	https://malpedia.caad.fkie.fraunhofer.de/details/win.qakbot

🐾 - 🚨 Connection to an IP address flagged at Qakbot C2

References

Metadata

Comments (0)