Skip to content

Instantly share code, notes, and snippets.

@silence-is-best

silence-is-best/gist:8781459aee73f438424b51c589da095a

Last active April 23, 2020 15:30
Show Gist options
  • Save silence-is-best/8781459aee73f438424b51c589da095a to your computer and use it in GitHub Desktop.
Save silence-is-best/8781459aee73f438424b51c589da095a to your computer and use it in GitHub Desktop.
Download ZIP
Nanocore snort suricata
Raw
gistfile1.txt
alert tcp any any -> any any (msg:"NanoCore RAT CnC"; flow:to_server,established; content:"|40 00 00 00 fe 31 80 44 e7 eb 4a 77|"; depth:12; reference:md5,18fe62a701d08affdd58ade2df0d1fb6; classtype:command-and-control; sid:20166322; rev:1; metadata:created_at 2020_4_23;)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment