Update quasar-rat-c2.yaml

patch-1
pussycat0x 2023-11-07 11:09:44 +05:30 committed by GitHub
parent e734668026
commit 7f81d1fc88
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -14,6 +14,7 @@ info:
shodan-query: ssl.cert.subject.cn:"Quasar Server CA"
censys-query: 'services.tls.certificates.leaf_data.subject.common_name: {"Quasar Server CA"}'
tags: c2,ir,osint,malware,quasar,rat
ssl:
- address: "{{Host}}:{{Port}}"
matchers:
@ -21,7 +22,6 @@ ssl:
part: issuer_cn
words:
- "Quasar Server CA"
condition: or
extractors:
- type: json