EtherHiding/Amatera Raw-UDP WebRTC C2 to 103.141.13.26:3479
Detects network connection attempts or established connections to a specific remote IP (103.141.13.26) on UDP port 3479. This pattern is often associated with command and control infrastructure or unauthorized data communication.
Microsoft Sentinel (KQL)

