alert dns any any -> any any (msg:"🐾 - ☠ DNS request 🌐 --> 🎛 C2 ♞ Agent Tesla"; dns_query; flow:to_server, stateless; content:"mail.flametreebrands.com"; nocase; reference:url,https://any.run/malware-trends/agenttesla; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla; metadata:created_at 2020_08_22, updated_at 2020_08_22; sid:3301342; rev:1; classtype:trojan-activity;)