Delete network/c2/nanocore-rat-trojan.yaml

network/c2/nanocore-rat-trojan.yaml

@@ -1,28 +0,0 @@
-id: nanocore-rat-trojan
-
-info:
-  name: NanoCore Rat Trojan - Detect
-  author: pussycat0x
-  severity: info
-  description: |
-    The NanoCore remote access Trojan (RAT) was first discovered in 2013 when it was being sold in underground forums..
-  reference:
-    - https://github.com/montysecurity/C2-Tracker/blob/main/tracker.py
-  metadata:
-    max-request: 1
-    shodan-query: product:'NanoCore RAT Trojan'
-  tags: network,c2,ir,osint,cti,nanocore,rat
-
-tcp:
-  - inputs:
-      - data: "\n"
-
-    host:
-      - "{{Hostname}}"
-    port: 54984
-    read-size: 1024
-
-    matchers:
-      - type: word
-        words:
-          - "X"