Update quasar-rat-c2.yaml
parent
e734668026
commit
7f81d1fc88
|
@ -14,6 +14,7 @@ info:
|
|||
shodan-query: ssl.cert.subject.cn:"Quasar Server CA"
|
||||
censys-query: 'services.tls.certificates.leaf_data.subject.common_name: {"Quasar Server CA"}'
|
||||
tags: c2,ir,osint,malware,quasar,rat
|
||||
|
||||
ssl:
|
||||
- address: "{{Host}}:{{Port}}"
|
||||
matchers:
|
||||
|
@ -21,7 +22,6 @@ ssl:
|
|||
part: issuer_cn
|
||||
words:
|
||||
- "Quasar Server CA"
|
||||
condition: or
|
||||
|
||||
extractors:
|
||||
- type: json
|
||||
|
|
Loading…
Reference in New Issue