ProRAM C2 origin binding via HTTP redirect to hardcoded IP 20.187.77.65
Detects HTTP 301 redirection responses from a hardcoded IP address to an external domain associated with ProRAM command-and-control infrastructure.
Suricata
Detects HTTP 301 redirection responses from a hardcoded IP address to an external domain associated with ProRAM command-and-control infrastructure.
Already have an account?