TROJAN: Beacon C2 Healthcare Trojan Command and Control Traffic
This signature detects the Command and Control traffic for the Beacon C2 Healthcare trojan. The source IP host is infected and should be removed from the network for analysis.
Short Name
TROJAN:BEACON-C2-CNC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
Beacon C2 Command Control Healthcare Traffic Trojan and
Release Date
08/20/2014
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/80,3128,8000,8080,443
False Positive
Unknown