Ousaban C2 XOR-Encoded HTTP POST Body (Custom Encoding Scheme)
This rule detects outgoing HTTP POST requests that contain a payload matching the signature of Ousaban malware's custom XOR-encoded command-and-control (C2) traffic, characterized by a specific hexadecimal structure.
Suricata
