DCRAT C2 Beacon to a0700877.xsph.ru (GTA VI Lure Campaign)

Adarsh Pandey@Pandeyadarsh

•updated today•0•0•0

Detects DNS queries, HTTP requests, TLS SNI requests, and direct IP traffic associated with DCRAT command and control infrastructure using the domain a0700877.xsph.ru or IP 141.8.197.42 during a GTA VI lure campaign.