🐾 - 🏴‍☠️ Connection to an IP flagged at Cobalt Strike C2

SID: 3304077Rev: 10 views
Sourcepawpatrules
CreatedJune 28, 2022
UpdatedJune 28, 2022
Classificationtrojan-activity
alert ip any any -> 37.120.198.225 any (msg:"🐾 - 🏴‍☠️ Connection to an IP flagged at Cobalt Strike C2"; reference:url,https://thedfirreport.com/2022/05/09/seo-poisoning-a-gootloader-story/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike; metadata:created_at 2022_06_28, updated_at 2022_06_28; sid:3304077; rev:1; classtype:trojan-activity;)

References

urlhttps://thedfirreport.com/2022/05/09/seo-poisoning-a-gootloader-story/
urlhttps://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike

Metadata

created at2022_06_28
updated at2022_06_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!