🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak - Suricata Rule 3318727 (pawpatrules)

🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak

SID: 3318727Rev: 10 views

Sourcepawpatrules

CreatedMarch 7, 2022

UpdatedMarch 7, 2022

Classificationtrojan-activity

alert ip any any -> 194.15.112.173 any (msg:"🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak"; reference:url,https://github.com/TheParmak/conti-leaks-englished/; reference:url,https://malpedia.caad.fkie.fraunhofer.de/details/win.conti; reference:url,https://malpedia.caad.fkie.fraunhofer.de/actor/unc1878; metadata:created_at 2022_03_07, updated_at 2022_03_07; sid:3318727; rev:1; classtype:trojan-activity;)

References

url	https://github.com/TheParmak/conti-leaks-englished/
url	https://malpedia.caad.fkie.fraunhofer.de/details/win.conti
url	https://malpedia.caad.fkie.fraunhofer.de/actor/unc1878

🐾 - 🚨 Outgoing connection to an IP address seen in 🔒 Conti Ransomware Leak

References

Metadata

Comments (0)