REMOTE [PTsecurity] PupyRAT TCP ping

SID: 10006390Rev: 533 views
History
Sourceptrules/open
CreatedOctober 9, 2025
UpdatedOctober 9, 2025
Classificationtrojan-activity
alert tcp any any -> any any (msg:"REMOTE [PTsecurity] PupyRAT TCP ping"; flow:established, to_server; dsize:<30; content:"|00 00 00 0d 00 12 51 52 11 51 11 51 10 0d 70 69 6e 67 0a|"; reference:url, https://github.com/n1nj4sec/pupy; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10006390; rev:5;)

References

urlhttps://github.com/n1nj4sec/pupy
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!