🐾 - 🚨 Outgoing connection ↗ 🎛 C2 - 🔒 Maze ransomware (Exfiltration de données) - Suricata Rule 3312411 (pawpatrules)

🐾 - 🚨 Outgoing connection ↗ 🎛 C2 - 🔒 Maze ransomware (Exfiltration de données)

SID: 3312411Rev: 10 views

Sourcepawpatrules

CreatedJuly 25, 2020

UpdatedJuly 25, 2020

Classificationtrojan-activity

alert tcp any any -> 217.12.218.99 any (msg:"🐾 - 🚨 Outgoing connection ↗ 🎛 C2 - 🔒 Maze ransomware (Exfiltration de données)"; flow:to_server, stateless; reference:url,https://labs.sentinelone.com/enter-the-maze-demystifying-an-affiliate-involved-in-maze-snow/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.maze; sid:3312411; metadata:created_at 2020_07_25, updated_at 2020_07_25; rev:1; classtype:trojan-activity;)

References

url	https://labs.sentinelone.com/enter-the-maze-demystifying-an-affiliate-involved-in-maze-snow/
url	https://malpedia.caad.fkie.fraunhofer.de/details/win.maze

🐾 - 🚨 Outgoing connection ↗ 🎛 C2 - 🔒 Maze ransomware (Exfiltration de données)

References

Metadata

Comments (0)