TA4922 Atlas RAT / ValleyRAT HTTP C2 Beaconing to Known Infrastructure

Ibrahim Saud@tektrix

•updated Jun 30, 2026•2•0•1

Detects network activity and DNS queries associated with known TA4922 command-and-control infrastructure, including specific domains and IP addresses. It also employs behavioral analysis to identify beaconing patterns from processes that are not identified as standard web browsers or authorized system/application utilities.