SPYWARE [PTsecurity] njRAT response

SID: 10008411Rev: 230 views
History
Sourceptrules/open
CreatedOctober 9, 2025
UpdatedNovember 21, 2025
Classificationtrojan-activity
alert tcp $EXTERNAL_NET any -> $HOME_NET any (msg:"SPYWARE [PTsecurity] njRAT response"; flow:established, to_client; dsize:23; content:"Server|20|Prent|20 3c|please|3e 0d 0a|"; depth:23; fast_pattern; reference:url, https://app.any.run/tasks/35f20b0a-10b1-4355-a562-076d8ab6db94; reference:url, rules.ptsecurity.com; classtype:trojan-activity; sid:10008411; rev:2;)

References

urlhttps://app.any.run/tasks/35f20b0a-10b1-4355-a562-076d8ab6db94
urlrules.ptsecurity.com

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!