MYRA RAT C2 Beacon TCP Port 4444 to 192.168.54.1

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•3

Detects network beaconing activity associated with the MYRA RAT. The rule identifies TCP connections to the hardcoded C2 IP address 192.168.54.1 on port 4444, where multiple connections are observed from the same host over a 10-minute window, suggesting automated heartbeat/beaconing behavior.