🐾 - 🚨 Outgoing connection ↗ 🎛 Possible Trickbot ♞ C2

SID: 3315823Rev: 20 views
Sourcepawpatrules
CreatedJuly 2, 2020
UpdatedNovember 16, 2021
Classificationtrojan-activity
alert ip any any -> 95.171.16.42 any (msg:"🐾 - 🚨 Outgoing connection ↗ 🎛 Possible Trickbot ♞ C2"; reference:url,https://bazaar.abuse.ch/sample/730398632d22d8b2a26649e6c44127fa1df8219e0bca29771939d449adb481f9/; reference:url,https://tria.ge/reports/200704-4frl9lq9d2/behavioral1/; reference:url,https://bazaar.abuse.ch/sample/f7068cc038a64f2d45f6a78e1e45f11dd1eadc2ad97c4fc2cbd995439a011785/; reference:url,https://bazaar.abuse.ch/sample/76523edc9cffb188d14ac6682bec7926b25777b412817cc3ce3597dd23a5972e/; reference:url,https://twitter.com/i/web/status/1278225259414671360; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.trickbot; metadata:created_at 2020_07_02, updated_at 2021_11_16; sid:3315823; rev:2; classtype:trojan-activity;)

References

urlhttps://bazaar.abuse.ch/sample/730398632d22d8b2a26649e6c44127fa1df8219e0bca29771939d449adb481f9/
urlhttps://tria.ge/reports/200704-4frl9lq9d2/behavioral1/
urlhttps://bazaar.abuse.ch/sample/f7068cc038a64f2d45f6a78e1e45f11dd1eadc2ad97c4fc2cbd995439a011785/
urlhttps://bazaar.abuse.ch/sample/76523edc9cffb188d14ac6682bec7926b25777b412817cc3ce3597dd23a5972e/
urlhttps://twitter.com/i/web/status/1278225259414671360
urlhttps://malpedia.caad.fkie.fraunhofer.de/details/win.trickbot

Metadata

created at2020_07_02
updated at2021_11_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!