StealC Custom C2 Beacon to Known Exfil IP 23.227.198.199:443
Detects outbound HTTP POST requests to a known StealC malware command-and-control (C2) endpoint. This rule monitors for established TCP connections and HTTP traffic directed towards a specific IP address associated with malicious exfiltration activity.
Suricata
