🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak - Suricata Rule 3317248 (pawpatrules)

🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak

SID: 3317248Rev: 10 views

Sourcepawpatrules

CreatedMarch 7, 2022

UpdatedMarch 7, 2022

Classificationtrojan-activity

alert ip any any -> 104.161.32.44 any (msg:"🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak"; reference:url,https://github.com/TheParmak/conti-leaks-englished/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.conti; reference:url,https://malpedia.caad.fkie.fraunhofer.de/actor/unc1878; metadata:created_at 2022_03_07, updated_at 2022_03_07; sid:3317248; rev:1; classtype:trojan-activity;)

References

url	https://github.com/TheParmak/conti-leaks-englished/
url	https://malpedia.caad.fkie.fraunhofer.de/details/win.conti
url	https://malpedia.caad.fkie.fraunhofer.de/actor/unc1878

🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak

References

Metadata

Comments (0)