Delete network/c2/gh0st-rat-trojan.yaml

patch-1
pussycat0x 2024-04-01 22:58:29 +05:30 committed by GitHub
parent dbb585a67e
commit 05b34ce2c4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 29 deletions

View File

@ -1,29 +0,0 @@
id: gh0st-rat-trojan
info:
name: Gh0st RAT Trojan - Detect
author: pussycat0x
severity: info
description: |
Gh0st RAT is a Trojan horse for the Windows platform that the operators of GhostNet used to hack into many sensitive computer networks
reference:
- https://github.com/montysecurity/C2-Tracker/blob/main/tracker.py
metadata:
verified: true
max-request: 1
shodan-query: product:'Gh0st RAT Trojan'
tags: network,c2,ir,osint,cti,gh0st,rat
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 443
read-size: 1024
matchers:
- type: word
words:
- "X"