🐾 - ☠ DNS Request 🌐 > 🏴‍☠️ Lockean Group - Cobalt Strike C2 Domain

SID: 3309909Rev: 10 views
Sourcepawpatrules
CreatedNovember 3, 2021
UpdatedNovember 3, 2021
Classificationtrojan-activity
alert dns any any -> any any (msg:"🐾 - ☠ DNS Request 🌐 > 🏴‍☠️ Lockean Group - Cobalt Strike C2 Domain"; flow:to_server, stateless; dns_query; content:"onlineceoshelp.com"; nocase; reference:url,https://www.cert.ssi.gouv.fr/cti/CERTFR-2021-CTI-008/; reference:url,https://www.cert.ssi.gouv.fr/ioc/CERTFR-2021-IOC-004/; metadata:created_at 2021_11_03, updated_at 2021_11_03; sid:3309909; rev:1; classtype:trojan-activity;)

References

urlhttps://www.cert.ssi.gouv.fr/cti/CERTFR-2021-CTI-008/
urlhttps://www.cert.ssi.gouv.fr/ioc/CERTFR-2021-IOC-004/

Metadata

created at2021_11_03
updated at2021_11_03

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!