Lucid Stealer C2 Communication

Kaung Khant Ko@kaungkhantko

•updated Jun 9, 2026•0•0•3

Detects outbound network traffic to a hardcoded Command and Control (C2) IP address and port associated with a specific build of Lucid Stealer malware. This rule identifies potential C2 communication by monitoring network connections for a known malicious IP and port combination.