alert dns any any -> any any (msg:"🐾 - ☠ DNS Request 🌐 > 🔒 CryptBot 🤖 Domain"; dns_query; flow:to_server, stateless; content:"knumur76.top"; nocase; reference:url,https://github.com/hpthreatresearch/iocs/blob/main/CryptBot/domains.txt; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.cryptbot; metadata:created_at 2021_08_25, updated_at 2021_10_01; sid:3306332; rev:2; classtype:trojan-activity;)