avatar

Ebuka Felix

@ninja
Completionist
0 followers44 downloads2 copies0 likes32 views

4 detections

Detects network connections over common exfiltration ports (80, 443, 53) to external IP addresses originating from executables running out of uncommon, temporary, or public directories. This behavior frequently indicates custom or unrecognized malware binaries conducting data exfiltration or establishing Command and Control (C2) communication.
avatar
Ebuka Felix@ninja
avatar
SecOps Signals
5 months ago
0010
Detects network connections over common exfiltration ports (80, 443, 53) to external IP addresses originating from executables running out of uncommon, temporary, or public directories. This behavior frequently indicates custom or unrecognized malware binaries conducting data exfiltration or establishing Command and Control (C2) communication.
avatar
Ebuka Felix@ninja
avatar
Hunters
5 months ago
008
Detects network connections over common exfiltration ports (80, 443, 53) to external IP addresses originating from executables running out of uncommon, temporary, or public directories. This behavior frequently indicates custom or unrecognized malware binaries conducting data exfiltration or establishing Command and Control (C2) communication.
avatar
Ebuka Felix@ninja
avatar
01 | 🇨🇭 Swiss Cyber Hunters
5 months ago
108
Detects network connections over common exfiltration ports (80, 443, 53) to external IP addresses originating from executables running out of uncommon, temporary, or public directories. This behavior frequently indicates custom or unrecognized malware binaries conducting data exfiltration or establishing Command and Control (C2) communication.
avatar
Ebuka Felix@ninja
avatar
Detection & Hunting Community
5 months ago
106