BeepRAT C2 TCP ClientInfo/ClientPing and ICMP BEEP Keepalive to 207.56.8.166:18848

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•4

Detects network communication associated with BeepRAT malware, specifically targeting hardcoded TCP connections to destination port 18848 and ICMP packets containing the string 'BEEP', which are used for C2 communication and keepalive signals.