BeepRAT C2 Beacon to Known Infrastructure (spasss.org / 207.56.8.166:18848)
Detects network and DNS indicators associated with BeepRAT, including connections to known C2 IP addresses on port 18848, resolution of known C2 domains, and suspicious DNS queries to 'doh.pub' from known loader processes (tcc.exe, HFY.exe).
SentinelOne
