DarkMe RAT C2 traffic to thatawful[.]boutique / 67.43.50.11 on TCP 7712
Detects network activity associated with the DarkMe RAT, including DNS lookups for its known C2 domain 'thatawful.boutique' and outbound TCP connections to a hardcoded non-standard port (7712) at a known malicious C2 IP address.
Suricata
