🐾 - ⚠ Outgoing connection ↗ 🔒 Maze ransomware / groupe TA2101

SID: 3312436Rev: 20 views
Sourcepawpatrules
CreatedJune 28, 2020
UpdatedJune 28, 2020
Classificationtrojan-activity
alert tcp any any -> 92.63.11.151 any (msg:"🐾 - ⚠ Outgoing connection ↗ 🔒 Maze ransomware / groupe TA2101"; flow:to_server, stateless; reference:url,https://www.cert.ssi.gouv.fr/ioc/CERTFR-2020-IOC-001/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.maze; reference:url,https://malpedia.caad.fkie.fraunhofer.de/actor/ta2101; reference:url,https://www.capesandbox.com/analysis/13708/; metadata:created_at 2020_06_28, updated_at 2020_06_28; sid:3312436; rev:2; classtype:trojan-activity;)

References

urlhttps://www.cert.ssi.gouv.fr/ioc/CERTFR-2020-IOC-001/
urlhttps://malpedia.caad.fkie.fraunhofer.de/details/win.maze
urlhttps://malpedia.caad.fkie.fraunhofer.de/actor/ta2101
urlhttps://www.capesandbox.com/analysis/13708/

Metadata

created at2020_06_28
updated at2020_06_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!