# hollowpoint.rules — generated 2026-09-15 09:38 UTC — 339 rules — TLP:CLEAR
# source: https://publicmosaic.com/indicators — published for defensive use
# scope: family adaptix — https://publicmosaic.com/c2/adaptix
# rev:2 — alert tcp on address and port; alert tls with tls.cert_fingerprint only where the full
#   certificate SHA-256 is published. REPLACE any rev:1 file (every rule was alert tls) rather than
#   loading it beside this one: a same-sid different-text pair is a duplicate Suricata refuses.
# live set only — archived episodes omitted: 6
# Rules may lag a withdrawal by up to five minutes (edge cache); the hub page is authoritative.
alert tls $HOME_NET any -> 1.14.104.208 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"89e4016a53d764dbbad8d240c8508f3c5d57a74f862856d7a4ce3df56852f700"; reference:url,publicmosaic.com/indicators; sid:9100476; rev:2;)
alert tls $HOME_NET any -> 1.14.234.68 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7bb7c94b881282bcd804d0d52697a177ef6b6a8cbb5261a0589f4fe01fe4daf1"; reference:url,publicmosaic.com/indicators; sid:9101260; rev:2;)
alert tls $HOME_NET any -> 1.69.201.81 9003 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"eba6c9da4ec17017ce1738ff02941abae45a3d09a37491570ee6ca64afba66f1"; reference:url,publicmosaic.com/indicators; sid:9104247; rev:2;)
alert tls $HOME_NET any -> 1.69.201.249 9003 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"eba6c9da4ec17017ce1738ff02941abae45a3d09a37491570ee6ca64afba66f1"; reference:url,publicmosaic.com/indicators; sid:9101195; rev:2;)
alert tls $HOME_NET any -> 1.92.135.168 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a598b57d3b276a021f2c0867654c92b886f4a1e7f3e1d8149ea90a7dc6b48cab"; reference:url,publicmosaic.com/indicators; sid:9102211; rev:2;)
alert tcp $HOME_NET any -> 1.92.135.168 8080 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100688; rev:2;)
alert tls $HOME_NET any -> 2.26.1.177 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c1c304fba349d7da9229440adf4add8b6d5f6dbb2565082983f92df39ce92f39"; reference:url,publicmosaic.com/indicators; sid:9100475; rev:2;)
alert tcp $HOME_NET any -> 2.26.116.156 8080 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100687; rev:2;)
alert tls $HOME_NET any -> 2.26.229.254 4433 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3a13bcab9f738bff6b31937a6c7616f809a74bcbe15031f2a4834e0cf0d4a593"; reference:url,publicmosaic.com/indicators; sid:9100622; rev:2;)
alert tls $HOME_NET any -> 2.56.222.17 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"bf8f8491ba96ef9f594b6a74623bf1d33519a12841c30e87c699d3dca90fd8c0"; reference:url,publicmosaic.com/indicators; sid:9105792; rev:2;)
alert tcp $HOME_NET any -> 3.86.241.241 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100686; rev:2;)
alert tcp $HOME_NET any -> 3.209.60.1 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100679; rev:2;)
alert tcp $HOME_NET any -> 8.136.13.87 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100685; rev:2;)
alert tls $HOME_NET any -> 8.136.13.87 7001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d65b05391566a3d4ee3039cdcaaaa2bfee286eef9e364b39b405ead3eabb2926"; reference:url,publicmosaic.com/indicators; sid:9101261; rev:2;)
alert tls $HOME_NET any -> 8.137.111.232 4433 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9bd353a8df5df3e5f52479fe6579198f4e87a5092a5b586da5ccde6a74ac554d"; reference:url,publicmosaic.com/indicators; sid:9101475; rev:2;)
alert tcp $HOME_NET any -> 13.59.90.25 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100684; rev:2;)
alert tls $HOME_NET any -> 13.212.38.253 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5eb5010cfeca535f9ebaf7ed3c10b8b0350a31c0c1a511f8c529a2de5e0bddd7"; reference:url,publicmosaic.com/indicators; sid:9100621; rev:2;)
alert tls $HOME_NET any -> 13.220.213.63 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d5d09055cd8028006a37424050b137eec1124d187ab82635ba71dd40ce86a452"; reference:url,publicmosaic.com/indicators; sid:9101462; rev:2;)
alert tls $HOME_NET any -> 18.143.169.148 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"63e8f71cc0d01b4119c2d1e2668a4116e1521c4f3e2e886e10e1ad70dde6c00c"; reference:url,publicmosaic.com/indicators; sid:9100615; rev:2;)
alert tls $HOME_NET any -> 20.118.221.53 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"59c7b6503aea0ed8b2e046b74b6fcfaf3821f71f57ce98a18088099680aae5ed"; reference:url,publicmosaic.com/indicators; sid:9106444; rev:2;)
alert tls $HOME_NET any -> 20.118.221.53 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5e9b002658c37ea18c1bb54d51597a124fbe8a4c4cbc1888c593c89fdaaa12ab"; reference:url,publicmosaic.com/indicators; sid:9105544; rev:2;)
alert tls $HOME_NET any -> 20.119.73.195 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b9f161c65ab5abd68dd6e2e1f430fd1256ae3ab982560127774fd6ff42812f52"; reference:url,publicmosaic.com/indicators; sid:9101461; rev:2;)
alert tls $HOME_NET any -> 20.119.73.195 31337 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"788f28fb1e6954cf35f4ab1a76ae3910f232a91df3bded06b39370108b0f16d3"; reference:url,publicmosaic.com/indicators; sid:9101459; rev:2;)
alert tls $HOME_NET any -> 20.157.116.151 8000 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"34689ba0af31ed154c76e03c8496924f99d28537f8b132effcd83618ad022506"; reference:url,publicmosaic.com/indicators; sid:9100690; rev:2;)
alert tls $HOME_NET any -> 20.220.105.236 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e5c9d1aefb6f5a3f570d78972b533fd039c02d93e935ca85a28087d27a99fa63"; reference:url,publicmosaic.com/indicators; sid:9105344; rev:2;)
alert tls $HOME_NET any -> 23.27.52.106 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"da5d45c548948013f3ba44d449df1cf7d74686f0cfc8cbc8bf3f79bb946ffca0"; reference:url,publicmosaic.com/indicators; sid:9100683; rev:2;)
alert tls $HOME_NET any -> 23.27.52.106 28736 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"da5d45c548948013f3ba44d449df1cf7d74686f0cfc8cbc8bf3f79bb946ffca0"; reference:url,publicmosaic.com/indicators; sid:9104246; rev:2;)
alert tls $HOME_NET any -> 23.148.212.254 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"12033c3063b2a5b1fa63959a65362cf7a8b70784d8221b3b879b7b3264479284"; reference:url,publicmosaic.com/indicators; sid:9105293; rev:2;)
alert tls $HOME_NET any -> 23.227.196.18 43655 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"304e36e88bf0c7bbab05a7dead83e03e5687e95b8411de90dc4068875e43cf2e"; reference:url,publicmosaic.com/indicators; sid:9102209; rev:2;)
alert tls $HOME_NET any -> 23.227.199.61 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"03dfb54d538b85b4e662fa5836fb342810e057f9b826b44589a8a372a8e7e537"; reference:url,publicmosaic.com/indicators; sid:9105693; rev:2;)
alert tls $HOME_NET any -> 23.227.199.67 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"be2c76cb20aca3a56fd4e323b8f39e2f2318f6aa40117d9756ec7977059db37a"; reference:url,publicmosaic.com/indicators; sid:9104065; rev:2;)
alert tls $HOME_NET any -> 23.227.199.67 42215 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9102208; rev:2;)
alert tls $HOME_NET any -> 23.227.203.6 42235 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"304e36e88bf0c7bbab05a7dead83e03e5687e95b8411de90dc4068875e43cf2e"; reference:url,publicmosaic.com/indicators; sid:9102207; rev:2;)
alert tls $HOME_NET any -> 23.227.203.71 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1091aad9bb141c29479785b12f45e464c63f2faabd46fc4259484fd4c3dff9ce"; reference:url,publicmosaic.com/indicators; sid:9105694; rev:2;)
alert tls $HOME_NET any -> 23.227.203.190 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5740008dd50535f26547f3de788983cbe8e104f114ddba77ba4b3b43a6b39ecb"; reference:url,publicmosaic.com/indicators; sid:9104146; rev:2;)
alert tls $HOME_NET any -> 23.227.203.190 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103997; rev:2;)
alert tls $HOME_NET any -> 23.227.203.191 10443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2327f227dd47115072e42630b93a93c3ad2bd9e23fcd59b59666072fd3cba70c"; reference:url,publicmosaic.com/indicators; sid:9106451; rev:2;)
alert tls $HOME_NET any -> 23.227.203.191 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3508977c434c34e2fa6cebfe4734c50df952c7545fd2b1fb2ca5fa360edd60f9"; reference:url,publicmosaic.com/indicators; sid:9102206; rev:2;)
alert tls $HOME_NET any -> 23.227.203.246 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5dcbcc488db3d7c82ba59de50f78637b50c277f3a848bbab3c92cb36fc530405"; reference:url,publicmosaic.com/indicators; sid:9103960; rev:2;)
alert tls $HOME_NET any -> 23.227.203.246 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"59695808b0322b0881ab19b2d21da3b15821c0536f74fd7934f2c78f54c5825f"; reference:url,publicmosaic.com/indicators; sid:9102205; rev:2;)
alert tls $HOME_NET any -> 31.56.228.50 4433 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"98fa089be61b170f2d7aeae1b628fa58cf8d2cb2b89966ac6816828a2840113c"; reference:url,publicmosaic.com/indicators; sid:9106646; rev:2;)
alert tls $HOME_NET any -> 31.56.228.50 4443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2181c861f0f6795d68d728117ad836afd1c7e20796b76c6a7420db818c476fdc"; reference:url,publicmosaic.com/indicators; sid:9100620; rev:2;)
alert tls $HOME_NET any -> 31.56.228.50 8888 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2c92ce46a6fefcb5f96c46827280674d340ccdfecdf902eeda269de3c00d6460"; reference:url,publicmosaic.com/indicators; sid:9101512; rev:2;)
alert tls $HOME_NET any -> 31.58.87.123 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e5b22328a6b197024e969d1e13295c0a02cf459440978536a9aafdc3cfe5d11d"; reference:url,publicmosaic.com/indicators; sid:9101460; rev:2;)
alert tls $HOME_NET any -> 31.77.78.18 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c0c1a954a67ddbbab622c8fa00f8e99b454cbe5d92c03a3a692c92757fe75c1e"; reference:url,publicmosaic.com/indicators; sid:9101458; rev:2;)
alert tls $HOME_NET any -> 31.77.78.18 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c0c1a954a67ddbbab622c8fa00f8e99b454cbe5d92c03a3a692c92757fe75c1e"; reference:url,publicmosaic.com/indicators; sid:9101456; rev:2;)
alert tls $HOME_NET any -> 31.77.161.250 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"28c40f62e4e11c6df443308c21331dd8215cae5def8b93fce2bd52fe05bf27bc"; reference:url,publicmosaic.com/indicators; sid:9105109; rev:2;)
alert tls $HOME_NET any -> 31.77.161.250 2911 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"55434eb1583264b3e2eca876aff9b4ebfc7480afe2eb97ae8ad1a41bd7d6a0c6"; reference:url,publicmosaic.com/indicators; sid:9104105; rev:2;)
alert tls $HOME_NET any -> 31.77.161.250 5667 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9a303e64a735143ffc765c6cc9905892695f751678f4b2b15ba75ebd3f5490c7"; reference:url,publicmosaic.com/indicators; sid:9105944; rev:2;)
alert tls $HOME_NET any -> 31.220.93.222 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d4584baf214871605ca530f61dd69126969a270602a095a7619f1397fd07e283"; reference:url,publicmosaic.com/indicators; sid:9100474; rev:2;)
alert tls $HOME_NET any -> 35.179.92.211 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"dddcb6775c8ce877d14e2c9e09731bb7129fb15100929a2ecd3bebd00bdff70c"; reference:url,publicmosaic.com/indicators; sid:9100678; rev:2;)
alert tls $HOME_NET any -> 37.72.168.163 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f22e2129516bc50da447291c705cf8fd47ad26110f54b9f5474dd5d7cf49b39c"; reference:url,publicmosaic.com/indicators; sid:9104144; rev:2;)
alert tls $HOME_NET any -> 37.72.168.163 42554 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9106162; rev:2;)
alert tls $HOME_NET any -> 37.72.168.189 42334 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9106740; rev:2;)
alert tcp $HOME_NET any -> 38.14.248.161 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100682; rev:2;)
alert tls $HOME_NET any -> 38.54.8.74 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a7d3a614a14c509a3d4b7eb7bc90ed02cf6ea3f312d66ff9edb48f134198057a"; reference:url,publicmosaic.com/indicators; sid:9100473; rev:2;)
alert tcp $HOME_NET any -> 38.54.50.36 8080 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9106649; rev:2;)
alert tcp $HOME_NET any -> 38.54.63.135 53 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100677; rev:2;)
alert tls $HOME_NET any -> 38.54.63.135 80 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"43cec44e4918df6b585bb6c3d9ad72f38e6d8861e71f8fe7a873706b27060783"; reference:url,publicmosaic.com/indicators; sid:9100619; rev:2;)
alert tls $HOME_NET any -> 38.54.88.188 65533 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ecb2dd32dbba0c2e61b7e024398bc486d53d56ff09be281e561c842aec4e6985"; reference:url,publicmosaic.com/indicators; sid:9100425; rev:2;)
alert tls $HOME_NET any -> 38.54.97.169 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"567080c8ede967bcb042a54d65179cd376fb651b2d98c95079d892fa53434ffb"; reference:url,publicmosaic.com/indicators; sid:9106565; rev:2;)
alert tls $HOME_NET any -> 38.60.203.203 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3920e7a1e3c0c271c425e519a0e40c35ba218c4ae885c9d2ccaf98450e8f467a"; reference:url,publicmosaic.com/indicators; sid:9101457; rev:2;)
alert tls $HOME_NET any -> 38.60.212.240 80 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2396af38b5604bb98e6ca10873068f940582149d30b2dc47c3eeab85ecbd43a4"; reference:url,publicmosaic.com/indicators; sid:9105801; rev:2;)
alert tls $HOME_NET any -> 38.132.122.141 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"09b63d9c88dd74351d09a452bfa8846128fa45dd72919441e76506a9a0f3214e"; reference:url,publicmosaic.com/indicators; sid:9104068; rev:2;)
alert tls $HOME_NET any -> 38.132.122.141 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103901; rev:2;)
alert tls $HOME_NET any -> 38.132.122.145 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f408f58ef0693af9b5b5971a7983ef840ede77bad81028cd5d95fd35af5bf52c"; reference:url,publicmosaic.com/indicators; sid:9105014; rev:2;)
alert tls $HOME_NET any -> 38.132.122.145 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9104245; rev:2;)
alert tls $HOME_NET any -> 38.132.122.161 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c6dc0ff23814ae8acfb2ec7f4833d664f43ccdf41a8e73d40043758d54aa9e61"; reference:url,publicmosaic.com/indicators; sid:9103952; rev:2;)
alert tls $HOME_NET any -> 38.132.122.161 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9102204; rev:2;)
alert tls $HOME_NET any -> 39.105.16.200 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"57a05de129b30a407780ff40fb5dbfd8a1917ee3c5ca1ef280e8cf6d24097b0a"; reference:url,publicmosaic.com/indicators; sid:9102203; rev:2;)
alert tls $HOME_NET any -> 39.105.16.200 4443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3b3912189d4c9955a186d57cfec7d5efca9d7f48be403dd5719f596a80cdf4e6"; reference:url,publicmosaic.com/indicators; sid:9101455; rev:2;)
alert tls $HOME_NET any -> 41.216.189.62 2096 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ca9b98a5aa776d129cfdc1486c947408ca05acb22359872ab526c7182ab90491"; reference:url,publicmosaic.com/indicators; sid:9100680; rev:2;)
alert tls $HOME_NET any -> 43.133.164.200 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c1eec2b1700605bea6fbaba2e7152fefbc031ebf3e572cd540db80aaad63f4d3"; reference:url,publicmosaic.com/indicators; sid:9100472; rev:2;)
alert tls $HOME_NET any -> 43.135.34.69 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1befcd3a15cbd1524d43e494bb416033da50f9e8ada46ec406c30cbcd2baf001"; reference:url,publicmosaic.com/indicators; sid:9100676; rev:2;)
alert tls $HOME_NET any -> 43.135.34.69 43911 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"57ef4e42062b8b2f6b7e6d986a2ec73752d91c2747a4a5c4243679bd4ad1d4dd"; reference:url,publicmosaic.com/indicators; sid:9102202; rev:2;)
alert tls $HOME_NET any -> 43.140.219.182 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fc7fa97c86da9cb4a6badf161e913574a64d790b7690360861c1af7b6f27cba0"; reference:url,publicmosaic.com/indicators; sid:9100150; rev:2;)
alert tls $HOME_NET any -> 43.143.57.45 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d7eb926e0f116a4f167b7417e61e83863e52bcb4d143f6a555df320d6e954da2"; reference:url,publicmosaic.com/indicators; sid:9102201; rev:2;)
alert tls $HOME_NET any -> 43.156.61.27 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"8b7da3f368575429d068ed8665505308239a25eac788cd0d291c2134cbffd1c3"; reference:url,publicmosaic.com/indicators; sid:9101510; rev:2;)
alert tls $HOME_NET any -> 43.163.111.133 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"16a758b6bd68bebb821805bfa9b03eff5b78416867709b5ba0de1943551540e9"; reference:url,publicmosaic.com/indicators; sid:9100618; rev:2;)
alert tls $HOME_NET any -> 43.198.116.85 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b0dfc4b09a95836e7194750fb27759b00664af4685a43a07f444f07d6e98e0d1"; reference:url,publicmosaic.com/indicators; sid:9106205; rev:2;)
alert tcp $HOME_NET any -> 43.248.173.97 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100675; rev:2;)
alert tcp $HOME_NET any -> 43.248.173.97 8009 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100674; rev:2;)
alert tls $HOME_NET any -> 45.13.239.249 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c02325e07612c06db2ff0c8a3d8454b2f16028af4457d4106489f80de2a918bb"; reference:url,publicmosaic.com/indicators; sid:9106739; rev:2;)
alert tls $HOME_NET any -> 45.38.20.38 8491 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d8eeefec35af1c1c82454887698188be8df57f44d3759826887f49df0cfa7a95"; reference:url,publicmosaic.com/indicators; sid:9102200; rev:2;)
alert tls $HOME_NET any -> 45.61.162.212 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f3eff54da141bab347697bb699c636f0aaa83d8d5f138d1cb71082666e87a0e2"; reference:url,publicmosaic.com/indicators; sid:9100617; rev:2;)
alert tls $HOME_NET any -> 45.76.191.22 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9d2ad995c7157bf2c279bc8534a6452e543ced4c26af0c0cba7d4078e8a6c114"; reference:url,publicmosaic.com/indicators; sid:9105676; rev:2;)
alert tls $HOME_NET any -> 45.76.191.22 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9a957a2556bc0352d1549b5658bf5a87c74fdbad5051552f6929a06f6dc55ed4"; reference:url,publicmosaic.com/indicators; sid:9101511; rev:2;)
alert tls $HOME_NET any -> 45.77.203.212 9443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"13ba5abee9772b3ed9a9ee020ee1c768fe4bff621cd2a8672a8df22fda710690"; reference:url,publicmosaic.com/indicators; sid:9100616; rev:2;)
alert tcp $HOME_NET any -> 45.77.255.102 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9105800; rev:2;)
alert tcp $HOME_NET any -> 45.77.255.102 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100673; rev:2;)
alert tcp $HOME_NET any -> 45.86.60.132 7777 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100696; rev:2;)
alert tcp $HOME_NET any -> 45.86.60.132 8888 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100694; rev:2;)
alert tcp $HOME_NET any -> 45.86.60.132 9999 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100695; rev:2;)
alert tls $HOME_NET any -> 45.125.67.171 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1e829af2f976153dabb5ab8bc35e5a936c575681b8cb7de4e01844530181cded"; reference:url,publicmosaic.com/indicators; sid:9100471; rev:2;)
alert tls $HOME_NET any -> 45.139.226.224 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"72d36f1c13c5f44988b6b6092b36004f6d45f2baa231f97a8494a974feb09f51"; reference:url,publicmosaic.com/indicators; sid:9102199; rev:2;)
alert tls $HOME_NET any -> 45.142.31.82 52125 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b510d26551508e8eec69f1b770dc54f2c8b67a61c525e905c5e92aafa7ffa2c0"; reference:url,publicmosaic.com/indicators; sid:9101590; rev:2;)
alert tls $HOME_NET any -> 45.142.142.252 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"62873998e5506d92ab4a1a3ba488d2f1f064175c0701a30a80d1ea7a4fffb320"; reference:url,publicmosaic.com/indicators; sid:9100672; rev:2;)
alert tls $HOME_NET any -> 45.142.143.152 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f1eb2ca305968ad4abac611a6f53ea7c38d0dfdcf40e3b8aea141d5102cd6f72"; reference:url,publicmosaic.com/indicators; sid:9100669; rev:2;)
alert tcp $HOME_NET any -> 45.147.28.58 8080 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100671; rev:2;)
alert tls $HOME_NET any -> 45.150.38.95 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"50ac23ccb521d5715f3e35e673ce39f35e9a4970209b38e9cd3ecffc26c43e43"; reference:url,publicmosaic.com/indicators; sid:9102198; rev:2;)
alert tls $HOME_NET any -> 45.155.69.153 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"72b8cebc00ec65195a48fe7d4fd639686462f14cb629ab40794f94919453903c"; reference:url,publicmosaic.com/indicators; sid:9101305; rev:2;)
alert tls $HOME_NET any -> 45.155.69.175 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"721d398c58f27e9e0ad31f3fe347c7b7ce16b6122e84fd9cf6f424258e083c5b"; reference:url,publicmosaic.com/indicators; sid:9100670; rev:2;)
alert tls $HOME_NET any -> 45.157.117.186 27487 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"be82b5bf645be835fae4b290674f4404f5ad614e17369dc9485549929df14bc9"; reference:url,publicmosaic.com/indicators; sid:9102197; rev:2;)
alert tcp $HOME_NET any -> 45.195.8.67 4443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100668; rev:2;)
alert tls $HOME_NET any -> 46.21.153.146 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"215d4b8052848438302d8a45f227bd3857eb560ce2a4c86cb8b704d74951396f"; reference:url,publicmosaic.com/indicators; sid:9104145; rev:2;)
alert tls $HOME_NET any -> 46.21.153.148 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4889172836ce68562081c1a7b72b8855649578cfefcdc045bcdb835248a3f959"; reference:url,publicmosaic.com/indicators; sid:9103964; rev:2;)
alert tls $HOME_NET any -> 46.21.153.148 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103996; rev:2;)
alert tls $HOME_NET any -> 47.99.196.178 7001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6957f69ea437d37651b486d77ada3bac79b105c0148a71c4b366b5868e310c9d"; reference:url,publicmosaic.com/indicators; sid:9101259; rev:2;)
alert tcp $HOME_NET any -> 47.236.202.216 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9106648; rev:2;)
alert tls $HOME_NET any -> 52.22.15.69 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fb9ee97dc8dff1c25d9b238f6fbd5e5d2e569c1a77637fa02d1e6d9e8c3012dd"; reference:url,publicmosaic.com/indicators; sid:9100782; rev:2;)
alert tls $HOME_NET any -> 54.173.174.159 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f76377c291a730fdbc1d853058d2cdbf274a95cf6478f580e861ab7551a413b7"; reference:url,publicmosaic.com/indicators; sid:9106644; rev:2;)
alert tcp $HOME_NET any -> 64.95.10.70 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100666; rev:2;)
alert tls $HOME_NET any -> 64.176.199.134 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6148d1645de00d483f0975c8f3bc14b56ed45ab08b52222bb2854b4db663326b"; reference:url,publicmosaic.com/indicators; sid:9101532; rev:2;)
alert tcp $HOME_NET any -> 64.176.233.59 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9106647; rev:2;)
alert tls $HOME_NET any -> 64.225.28.168 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"01204de12235a4e2c6326d55232df794c7aa361598ae1392106812593094576e"; reference:url,publicmosaic.com/indicators; sid:9102196; rev:2;)
alert tls $HOME_NET any -> 65.21.102.4 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2fb895201389ced3144f1cdb4433570aa790d2dfeb24aee44992d83bab778e04"; reference:url,publicmosaic.com/indicators; sid:9100614; rev:2;)
alert tls $HOME_NET any -> 65.49.220.29 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"433de31c7b84066b86d73b536612dc9e9a9b95dd5be2a8a53879240811bbd1bc"; reference:url,publicmosaic.com/indicators; sid:9105687; rev:2;)
alert tls $HOME_NET any -> 65.49.220.29 8128 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"433de31c7b84066b86d73b536612dc9e9a9b95dd5be2a8a53879240811bbd1bc"; reference:url,publicmosaic.com/indicators; sid:9100689; rev:2;)
alert tcp $HOME_NET any -> 66.78.40.230 4444 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100665; rev:2;)
alert tls $HOME_NET any -> 66.179.30.218 65432 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b9ed6c118650b4b7ca8f673f11d6deaf95e1ef6de7b3cec5bf7e8d0a00c1bb2b"; reference:url,publicmosaic.com/indicators; sid:9105535; rev:2;)
alert tls $HOME_NET any -> 68.178.202.150 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ff453ebab63262a5cce46ea65e9b250220bc9fa74888be8e3ada3b7822ba55e9"; reference:url,publicmosaic.com/indicators; sid:9102195; rev:2;)
alert tls $HOME_NET any -> 68.178.205.17 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ff453ebab63262a5cce46ea65e9b250220bc9fa74888be8e3ada3b7822ba55e9"; reference:url,publicmosaic.com/indicators; sid:9100470; rev:2;)
alert tls $HOME_NET any -> 69.48.229.91 9443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4eec5aee3924ac4c34310c943a50adb52f157601872d8974c40c59d9a254b1a0"; reference:url,publicmosaic.com/indicators; sid:9106356; rev:2;)
alert tls $HOME_NET any -> 69.48.229.91 65500 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2c92ce46a6fefcb5f96c46827280674d340ccdfecdf902eeda269de3c00d6460"; reference:url,publicmosaic.com/indicators; sid:9106084; rev:2;)
alert tls $HOME_NET any -> 79.133.46.132 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0fc8bd97100948f76a42072cf68838ad7ccae567fb47419ca7217a9a83f2c69f"; reference:url,publicmosaic.com/indicators; sid:9104048; rev:2;)
alert tls $HOME_NET any -> 79.135.160.20 8000 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"342d54bd2ea7e6ebdbf409f4a1de6815a48045dc600e8667a52ed02d9d58b611"; reference:url,publicmosaic.com/indicators; sid:9100613; rev:2;)
alert tls $HOME_NET any -> 79.135.160.20 9999 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fbfb20a7568570029a479b0e829d874019e7221322d4febb57ee6b7e5ed3ea08"; reference:url,publicmosaic.com/indicators; sid:9102193; rev:2;)
alert tls $HOME_NET any -> 80.78.22.202 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"01aa87fee54745537460edf1d2042035b0988fa660f9067904b0db3904057a75"; reference:url,publicmosaic.com/indicators; sid:9105799; rev:2;)
alert tls $HOME_NET any -> 80.78.27.42 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b5eb6a8ee67b7ffd0a6f4ba064b70e5396e445bda5060558bf0b83ed27d0b196"; reference:url,publicmosaic.com/indicators; sid:9100663; rev:2;)
alert tls $HOME_NET any -> 82.29.71.130 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2b0e0fceac6e9262a199eb93c31e41277133f8fad1ed881a7c236b57cf297c56"; reference:url,publicmosaic.com/indicators; sid:9105798; rev:2;)
alert tls $HOME_NET any -> 82.115.16.4 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"546468c9b051f3824e02ae2c68faf8efa3c3f859d2c796d09b8308d9c758b055"; reference:url,publicmosaic.com/indicators; sid:9106204; rev:2;)
alert tcp $HOME_NET any -> 84.46.251.62 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100662; rev:2;)
alert tls $HOME_NET any -> 84.46.251.62 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fd7d09e4ee86ce4be363f480cb80679897bbf3d51ecd74ab877641737b3b2203"; reference:url,publicmosaic.com/indicators; sid:9100468; rev:2;)
alert tls $HOME_NET any -> 85.155.186.2 3821 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5d07b7222ff73ed7bce7b6707b4d2c3d2c6a8e82382323abafa9e1c519948777"; reference:url,publicmosaic.com/indicators; sid:9102192; rev:2;)
alert tls $HOME_NET any -> 85.209.90.132 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"286704b0728c8fa6bb02f4b622ab07b1b0b8ba3aba9854d3526da4bcf55803ca"; reference:url,publicmosaic.com/indicators; sid:9100469; rev:2;)
alert tls $HOME_NET any -> 87.232.84.18 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d9921903ec8abbc70101a107ee6faba8babe61dd83a88cf3a5983d1afbe7d9d7"; reference:url,publicmosaic.com/indicators; sid:9100612; rev:2;)
alert tls $HOME_NET any -> 89.44.9.164 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"28a3f82abe970277f07e3df989e274d900a7c4867ecedd27d0617f7f00c009f6"; reference:url,publicmosaic.com/indicators; sid:9101304; rev:2;)
alert tls $HOME_NET any -> 89.110.91.35 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b388279394049d37620f27b0abe16bc9080abca406f0d551fca3b188787b49e3"; reference:url,publicmosaic.com/indicators; sid:9104188; rev:2;)
alert tls $HOME_NET any -> 89.110.91.35 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4df76b811ae27d1c5cfaedd717cef48d4ff9071167d913b7b415f487dc935a2f"; reference:url,publicmosaic.com/indicators; sid:9102191; rev:2;)
alert tls $HOME_NET any -> 91.92.241.184 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b0a202cb6efdd0d25d7081bf6adc697d80c0d0c91f29b1db0ebd87837812bc1a"; reference:url,publicmosaic.com/indicators; sid:9105791; rev:2;)
alert tls $HOME_NET any -> 91.92.241.187 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b0a202cb6efdd0d25d7081bf6adc697d80c0d0c91f29b1db0ebd87837812bc1a"; reference:url,publicmosaic.com/indicators; sid:9105790; rev:2;)
alert tls $HOME_NET any -> 91.92.243.115 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"460bcde32bc67082373c9ad32d09e9c67337590d66b8b72301fa58fd0f6d94d1"; reference:url,publicmosaic.com/indicators; sid:9100661; rev:2;)
alert tls $HOME_NET any -> 91.202.233.214 44123 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b26544aef6f662fa9ffe4c755ebf69aae459a65b676681b07b33234144c66196"; reference:url,publicmosaic.com/indicators; sid:9103605; rev:2;)
alert tls $HOME_NET any -> 91.215.85.212 45423 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9544f24363e1f629f8a295144aaa64a118a0ede72a939f84c994bf7322892124"; reference:url,publicmosaic.com/indicators; sid:9102190; rev:2;)
alert tcp $HOME_NET any -> 91.221.191.167 6443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100660; rev:2;)
alert tcp $HOME_NET any -> 94.26.248.76 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9104169; rev:2;)
alert tls $HOME_NET any -> 94.26.248.76 50050 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3244265bd53b2e9ad250fa566e5cc356229d03eee3f7f30d416f463bdaebf5a5"; reference:url,publicmosaic.com/indicators; sid:9102189; rev:2;)
alert tls $HOME_NET any -> 94.102.49.164 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b5bccddecb4b6c2698ec0418d70264de99678e60a02ed07013a38e1516e49298"; reference:url,publicmosaic.com/indicators; sid:9105141; rev:2;)
alert tcp $HOME_NET any -> 94.102.49.164 8443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101572; rev:2;)
alert tls $HOME_NET any -> 101.33.202.134 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d98e8c33630938fe85a2b8a40947a3fa3c31861532c956a61a26575ac8103352"; reference:url,publicmosaic.com/indicators; sid:9104069; rev:2;)
alert tls $HOME_NET any -> 101.33.202.134 9989 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d8b7e9e089cc0fc66e988aaaf5cbfcb273cc0d1b9a0adf023210dbfdb0d26cf2"; reference:url,publicmosaic.com/indicators; sid:9102188; rev:2;)
alert tcp $HOME_NET any -> 101.36.123.12 8080 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100659; rev:2;)
alert tls $HOME_NET any -> 101.36.123.12 34321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d3239b5d9d37e2833b6ea3d2f9d1f7d447d603f5e2bab8bd448a66f0e431357f"; reference:url,publicmosaic.com/indicators; sid:9102187; rev:2;)
alert tcp $HOME_NET any -> 101.42.136.73 4433 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101529; rev:2;)
alert tls $HOME_NET any -> 101.201.109.2 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ff08aca05fc74ddae8b7b8cd90681408805e81787950b8728d29ec7434ad65ea"; reference:url,publicmosaic.com/indicators; sid:9104176; rev:2;)
alert tls $HOME_NET any -> 103.27.110.141 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"8083f4282941fa81b64c655a6964f0221492b5f0a94c54fb2d109042d1db0333"; reference:url,publicmosaic.com/indicators; sid:9100611; rev:2;)
alert tls $HOME_NET any -> 103.51.145.75 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"00187a032b0dc1e1f2013661022cee0b15d2aebad4e6a729b27a6ce85b5a3a42"; reference:url,publicmosaic.com/indicators; sid:9102186; rev:2;)
alert tls $HOME_NET any -> 103.51.145.75 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"62a3917f779e7d6212a3079b60f198a29115be28cdf2ba6564af81dbe2f71483"; reference:url,publicmosaic.com/indicators; sid:9100610; rev:2;)
alert tls $HOME_NET any -> 103.53.80.201 3312 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a990bf6ccce683630dec25aa61eb621945f671da7899764be2275661d3f7a496"; reference:url,publicmosaic.com/indicators; sid:9102185; rev:2;)
alert tcp $HOME_NET any -> 103.53.80.201 8443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101564; rev:2;)
alert tls $HOME_NET any -> 103.79.76.207 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3fb1291d7f2f186a16e06f910efb2d31016782f718b2c17860224b078fbfdafc"; reference:url,publicmosaic.com/indicators; sid:9104996; rev:2;)
alert tcp $HOME_NET any -> 103.79.186.140 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101303; rev:2;)
alert tls $HOME_NET any -> 103.116.52.203 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2948758e8f514365774b9bdc3f9a7e86bbb7a38bd301efb0b6436226a675ebab"; reference:url,publicmosaic.com/indicators; sid:9101193; rev:2;)
alert tls $HOME_NET any -> 103.139.202.6 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4c50d02eab611087c78b92094ae64b9c55f419f43881b2d0880fa193951f5620"; reference:url,publicmosaic.com/indicators; sid:9105797; rev:2;)
alert tls $HOME_NET any -> 103.140.154.7 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e1c568c00ad849b4a51cce758b1495b735f89126ea4bf994432a9f4de2cee557"; reference:url,publicmosaic.com/indicators; sid:9101563; rev:2;)
alert tls $HOME_NET any -> 103.244.227.157 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"387ec23348067e215d99608b5eb87fb5e6e24c98672090ca04240ff335412d2e"; reference:url,publicmosaic.com/indicators; sid:9106445; rev:2;)
alert tls $HOME_NET any -> 103.253.212.216 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"aeb920ea6ebad2a37e1e3491aac86206b02d8df5ecff27a3b11fe50f77793279"; reference:url,publicmosaic.com/indicators; sid:9106443; rev:2;)
alert tcp $HOME_NET any -> 104.129.12.12 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9103963; rev:2;)
alert tls $HOME_NET any -> 104.131.25.122 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5b25a2767c5522c964955d01be599b9873430dfad1081876f943995b27cfdc9f"; reference:url,publicmosaic.com/indicators; sid:9100609; rev:2;)
alert tls $HOME_NET any -> 104.207.93.167 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d2bed7167d49cfd55a9ad3d9478066c7ae95a9f08426319490e1c6fc7dc95242"; reference:url,publicmosaic.com/indicators; sid:9101565; rev:2;)
alert tcp $HOME_NET any -> 104.244.88.55 8081 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100658; rev:2;)
alert tls $HOME_NET any -> 104.244.89.232 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"61f9bf62394c8a9447f6fbc71b3fa94d297a3c99478be8c55cd2692cb039ea2f"; reference:url,publicmosaic.com/indicators; sid:9100467; rev:2;)
alert tls $HOME_NET any -> 106.53.107.131 30943 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7bb7c94b881282bcd804d0d52697a177ef6b6a8cbb5261a0589f4fe01fe4daf1"; reference:url,publicmosaic.com/indicators; sid:9103426; rev:2;)
alert tcp $HOME_NET any -> 107.152.42.223 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100657; rev:2;)
alert tls $HOME_NET any -> 107.152.42.223 34321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9534c7cee195aff527bf7abba1d94172df45c4a27542e96f5e041bf8055de381"; reference:url,publicmosaic.com/indicators; sid:9103371; rev:2;)
alert tcp $HOME_NET any -> 107.170.50.250 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100656; rev:2;)
alert tcp $HOME_NET any -> 107.172.90.117 4321 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100655; rev:2;)
alert tls $HOME_NET any -> 107.172.140.187 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"45cf5ab9ac981e6677e2fca4ade763842cb3e44ae547dbe23f061c32ae75d5de"; reference:url,publicmosaic.com/indicators; sid:9100608; rev:2;)
alert tls $HOME_NET any -> 107.173.160.185 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ba5406db3a6f183c2e9397c337094f1fd4e890f3161b2db36cf8abcad9d411b9"; reference:url,publicmosaic.com/indicators; sid:9100466; rev:2;)
alert tls $HOME_NET any -> 107.175.87.234 65321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"091f3fd89c76933c7ead52476f63a93a1341ca1829aeae02ccf5be240a0538c0"; reference:url,publicmosaic.com/indicators; sid:9102184; rev:2;)
alert tcp $HOME_NET any -> 109.71.253.60 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9105796; rev:2;)
alert tls $HOME_NET any -> 109.123.245.205 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7c3325b73801b3b35f84ef71990a1aec768841bbfdaa60e3b339ba84098a21e0"; reference:url,publicmosaic.com/indicators; sid:9104995; rev:2;)
alert tcp $HOME_NET any -> 109.123.245.205 4433 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9106822; rev:2;)
alert tls $HOME_NET any -> 109.237.64.48 44704 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b5224e70a742c909548f1b68cd4a8940574be7d4f557f31463c5a5e8dd9985cf"; reference:url,publicmosaic.com/indicators; sid:9104498; rev:2;)
alert tls $HOME_NET any -> 110.41.76.236 5678 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4aaff9d0e258538fc722e121064d4e5ef50f570cfa29243b825103420c26de10"; reference:url,publicmosaic.com/indicators; sid:9103370; rev:2;)
alert tls $HOME_NET any -> 113.44.168.133 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"bee4e90f14244974a24f1ed9e1161e9e3ad88578692d71e017876994c60ba44a"; reference:url,publicmosaic.com/indicators; sid:9100607; rev:2;)
alert tcp $HOME_NET any -> 115.190.247.97 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100654; rev:2;)
alert tls $HOME_NET any -> 115.190.247.97 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0a298704fa65580136c0c738c681725f44c7ce4658005e94ddcf31d1912e5e60"; reference:url,publicmosaic.com/indicators; sid:9104047; rev:2;)
alert tls $HOME_NET any -> 119.28.212.86 44321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b9438277f002116ec8278c0d5f5bd2f8fec5fe3833a8f768dfe1e0dba996c05d"; reference:url,publicmosaic.com/indicators; sid:9102183; rev:2;)
alert tls $HOME_NET any -> 119.45.93.117 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5e02bbdbd098874812f987e6c1b96e11f01a8d57a4a3e10a9f625fa097d11122"; reference:url,publicmosaic.com/indicators; sid:9101258; rev:2;)
alert tls $HOME_NET any -> 119.45.105.71 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b083bad4967a9af4814c0b0f14c539a04b4978b85b1b8ecdd02ed8f4cc634d9c"; reference:url,publicmosaic.com/indicators; sid:9105292; rev:2;)
alert tls $HOME_NET any -> 119.91.246.156 8989 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3888138f6de064adf3f617d7a5edd7bc9646fd2c866af1b4d6e96b178a9f33d6"; reference:url,publicmosaic.com/indicators; sid:9103369; rev:2;)
alert tcp $HOME_NET any -> 121.127.33.141 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100653; rev:2;)
alert tls $HOME_NET any -> 121.127.253.146 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"643ac62b3a1f4adca9cad24d1e353e2b642e4f3d14dde9fd5b70fdd2bf0bf052"; reference:url,publicmosaic.com/indicators; sid:9100427; rev:2;)
alert tcp $HOME_NET any -> 121.127.253.146 4444 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100652; rev:2;)
alert tls $HOME_NET any -> 130.185.82.117 5641 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f8cd8ae9d7126eac80c8cc9a2347eb1dacc4545f6c6cf092abe471055b6efd04"; reference:url,publicmosaic.com/indicators; sid:9102182; rev:2;)
alert tls $HOME_NET any -> 131.143.251.246 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"132fc0f27c5462af77eada17a5a86623d750970f0f3c646e79958a2a095baa3b"; reference:url,publicmosaic.com/indicators; sid:9100606; rev:2;)
alert tls $HOME_NET any -> 132.226.72.148 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5252b8ea24a3c410e2869a79b74e689f9948643aedf2e6cd7313b0d1def1ba27"; reference:url,publicmosaic.com/indicators; sid:9100465; rev:2;)
alert tls $HOME_NET any -> 134.122.132.3 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100464; rev:2;)
alert tls $HOME_NET any -> 134.122.132.28 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100458; rev:2;)
alert tls $HOME_NET any -> 134.122.132.35 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100460; rev:2;)
alert tls $HOME_NET any -> 137.175.107.110 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ae5b97bc603751eb4beb6b6d7c27f859c5d814735916c0bea2df4fe4e450db72"; reference:url,publicmosaic.com/indicators; sid:9104244; rev:2;)
alert tls $HOME_NET any -> 138.16.179.204 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"864ffaab4e249036dcd3c1345ee88c41d98092e657501a0d8472cb9698eea5f9"; reference:url,publicmosaic.com/indicators; sid:9100605; rev:2;)
alert tls $HOME_NET any -> 138.124.113.131 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2518d4bd3e3d9f2f21fd3dcae65e395a651a37d7b81260cb8b37a7bc2c4c7bd4"; reference:url,publicmosaic.com/indicators; sid:9100651; rev:2;)
alert tls $HOME_NET any -> 138.124.113.131 4211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2518d4bd3e3d9f2f21fd3dcae65e395a651a37d7b81260cb8b37a7bc2c4c7bd4"; reference:url,publicmosaic.com/indicators; sid:9103368; rev:2;)
alert tls $HOME_NET any -> 138.226.236.52 13212 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a8b7c5ca3ff96da6afe6e61daa86b25cb2f07e0a5a9fbeb546a3b4d2d7d69a8e"; reference:url,publicmosaic.com/indicators; sid:9104497; rev:2;)
alert tls $HOME_NET any -> 139.84.152.226 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"02cba045703501c064ee46b40a1635a5596fb8600f64827c527d95542a398992"; reference:url,publicmosaic.com/indicators; sid:9100801; rev:2;)
alert tls $HOME_NET any -> 139.162.113.221 64321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7c79be82d1f87ddea9dd8e0016943edd5543f7c4dd6e5ba3ab0a22f1c335d596"; reference:url,publicmosaic.com/indicators; sid:9103367; rev:2;)
alert tls $HOME_NET any -> 139.199.160.80 32408 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3888138f6de064adf3f617d7a5edd7bc9646fd2c866af1b4d6e96b178a9f33d6"; reference:url,publicmosaic.com/indicators; sid:9103366; rev:2;)
alert tcp $HOME_NET any -> 141.94.95.38 4444 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100650; rev:2;)
alert tls $HOME_NET any -> 143.14.9.56 7443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"434969e5370dd0287adf26ca0f947ff5538e66a7c94ec43c652d89d3e28a706c"; reference:url,publicmosaic.com/indicators; sid:9101257; rev:2;)
alert tls $HOME_NET any -> 143.246.217.103 25729 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7f427a70756e9529c9ade42e2f58ebb66a3fd9bebb8862fc3d8131ea0c49eaa3"; reference:url,publicmosaic.com/indicators; sid:9106564; rev:2;)
alert tls $HOME_NET any -> 144.31.51.6 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"453af7bc194e6845dbcc37cc6b98436e06c1b7c0fc8fb5de0224014bd6c55101"; reference:url,publicmosaic.com/indicators; sid:9103995; rev:2;)
alert tls $HOME_NET any -> 144.124.234.128 49999 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1306871b1dba51e873498ee8b8d03444cf9fd9ae76114bbd782e4bbdbcb979fb"; reference:url,publicmosaic.com/indicators; sid:9103365; rev:2;)
alert tls $HOME_NET any -> 144.172.65.54 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"df12fde46b32ba28370960da9ca5eb4e19e0464ea413a61f8942cfbffde5bdca"; reference:url,publicmosaic.com/indicators; sid:9106563; rev:2;)
alert tls $HOME_NET any -> 144.172.118.114 51956 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0a16c2485b61a2cbd3ca1d65bb881a6a5dbbc63a969736754c70c39fc9d0e925"; reference:url,publicmosaic.com/indicators; sid:9106203; rev:2;)
alert tls $HOME_NET any -> 146.70.87.64 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103364; rev:2;)
alert tls $HOME_NET any -> 146.70.87.96 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2492351c160e5c1f3e03d93bfacf5a3d987f578efe6b3453d308817e20673edf"; reference:url,publicmosaic.com/indicators; sid:9105688; rev:2;)
alert tls $HOME_NET any -> 146.70.87.96 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103363; rev:2;)
alert tls $HOME_NET any -> 146.70.87.173 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c2c15101b0048c195cc78d29e4c698c74c05ec55e63ab733446e51d478798cb4"; reference:url,publicmosaic.com/indicators; sid:9106645; rev:2;)
alert tls $HOME_NET any -> 146.70.87.218 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c4145c0920040c4970463e17682912fd31b022121e3af42d7173b7ee534d7321"; reference:url,publicmosaic.com/indicators; sid:9105689; rev:2;)
alert tls $HOME_NET any -> 146.70.87.237 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"8829c6ec250e512262444c635f0947ffe6c7b7e74e86082ca2b4f8ec879ac80f"; reference:url,publicmosaic.com/indicators; sid:9106192; rev:2;)
alert tls $HOME_NET any -> 146.70.87.237 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103362; rev:2;)
alert tls $HOME_NET any -> 148.251.135.156 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a33ab35e8f002efaf7bd08401b035d9e74c2592692906eb4065b2cbcae8ccf59"; reference:url,publicmosaic.com/indicators; sid:9100649; rev:2;)
alert tls $HOME_NET any -> 149.50.135.215 49152 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f363c55ffc1530a12e45263934dddd7a779472937d29880543b7836f456e3567"; reference:url,publicmosaic.com/indicators; sid:9100463; rev:2;)
alert tls $HOME_NET any -> 149.104.28.204 3656 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3003df3ed778b33750e7a8ba1827e4b94688615766cf7df8de271f66503e4b4f"; reference:url,publicmosaic.com/indicators; sid:9104496; rev:2;)
alert tcp $HOME_NET any -> 149.104.28.204 9879 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100648; rev:2;)
alert tls $HOME_NET any -> 149.104.71.157 8000 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3d09feccdd6f558cc63beafe4fcdd515d56f1f221563f43a40c3a12c5dfa2198"; reference:url,publicmosaic.com/indicators; sid:9100644; rev:2;)
alert tls $HOME_NET any -> 149.104.71.157 9443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0a8a16097019d0b3ba75508dab91ffcbc4e27e2a3f04c50a84025a738b6443e9"; reference:url,publicmosaic.com/indicators; sid:9100647; rev:2;)
alert tls $HOME_NET any -> 149.202.227.107 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4df1befb045ec1aeda258abb8e10c3509a74c6eec0005eddb7d5f9d2e4bfb05b"; reference:url,publicmosaic.com/indicators; sid:9100462; rev:2;)
alert tls $HOME_NET any -> 149.202.227.107 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ce8454cebc9dc243ab31676e608f9fb420fb9a4c13172dd7b7e68c4205ef62fe"; reference:url,publicmosaic.com/indicators; sid:9100604; rev:2;)
alert tcp $HOME_NET any -> 151.236.20.3 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100646; rev:2;)
alert tls $HOME_NET any -> 151.236.20.3 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5e766519ccb4fc05b7a80543474c81b3366742dd2b9c8a0351a790e0796e2efe"; reference:url,publicmosaic.com/indicators; sid:9100461; rev:2;)
alert tls $HOME_NET any -> 152.42.174.192 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"eca65821089eeec29de25292bba6df135793686a9b68512ce450873eaa747e04"; reference:url,publicmosaic.com/indicators; sid:9100645; rev:2;)
alert tls $HOME_NET any -> 153.142.13.183 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3ef2183b5ec755d964dde0f71797c3610b36556f5e46e5ad3a0d19756dbcdd58"; reference:url,publicmosaic.com/indicators; sid:9101256; rev:2;)
alert tcp $HOME_NET any -> 154.37.218.235 8443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9105343; rev:2;)
alert tls $HOME_NET any -> 154.219.107.7 1443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a7e1d34f51fa93ab5fad68f30b1830178b4364393cb2d04ffcf520ed83d5794b"; reference:url,publicmosaic.com/indicators; sid:9100603; rev:2;)
alert tls $HOME_NET any -> 154.219.115.123 60001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"52e86169a6ca864d0ee5c9d87a53f7bec26ed048ca48aaf226ea8a476c91684f"; reference:url,publicmosaic.com/indicators; sid:9101509; rev:2;)
alert tls $HOME_NET any -> 155.117.155.141 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b8466a53c646b3cea2fc730fa527639c5711a6e62de9a3f0770e2fa420210b19"; reference:url,publicmosaic.com/indicators; sid:9101454; rev:2;)
alert tls $HOME_NET any -> 155.138.215.87 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"58e2bbeb8ee14fba1ac67cdcd1bf881ca8781e382f625dcdf2a4198ba9259df3"; reference:url,publicmosaic.com/indicators; sid:9103361; rev:2;)
alert tls $HOME_NET any -> 158.158.17.236 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ecd899384970aeead477859267c00bdb56d67544ea9412127b0204520b983043"; reference:url,publicmosaic.com/indicators; sid:9106736; rev:2;)
alert tcp $HOME_NET any -> 162.14.124.25 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100643; rev:2;)
alert tls $HOME_NET any -> 162.14.124.25 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e580e149b5b2307ec5ca3b694c95bbdd02b696e3fab1b7ced19ad1e7c1bc7bb1"; reference:url,publicmosaic.com/indicators; sid:9100459; rev:2;)
alert tls $HOME_NET any -> 162.35.172.146 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3f5aced2a1197db1c0411fd637a6df10103baf6516f204b904956dafd3f5f9e4"; reference:url,publicmosaic.com/indicators; sid:9105690; rev:2;)
alert tls $HOME_NET any -> 162.35.172.146 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d85fb7f18ed565ec3dde76e00e58642319b62f800baa2f2efeb00fa7eed0c072"; reference:url,publicmosaic.com/indicators; sid:9105788; rev:2;)
alert tls $HOME_NET any -> 164.68.123.50 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"bfb8f9a46992f6828544a1d1ac5ac3ecdf0eb403623fbad7e338b569386ee22b"; reference:url,publicmosaic.com/indicators; sid:9100457; rev:2;)
alert tls $HOME_NET any -> 164.90.205.13 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5b12cc346e4d17e93dee3bb02f1a0f783cc063618232070c5638b7d8f78fb01f"; reference:url,publicmosaic.com/indicators; sid:9101255; rev:2;)
alert tls $HOME_NET any -> 164.160.187.69 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"dc388403ae9bdf9cb436f4d1e04a6c9082991ad183edb0a710e54513ee315d80"; reference:url,publicmosaic.com/indicators; sid:9101453; rev:2;)
alert tcp $HOME_NET any -> 164.160.187.69 8081 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101452; rev:2;)
alert tcp $HOME_NET any -> 167.17.47.121 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9105795; rev:2;)
alert tls $HOME_NET any -> 167.17.47.121 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7365f39c07502a31f84b9e3b72359576db983df0180349f3d28e736a510cfc1f"; reference:url,publicmosaic.com/indicators; sid:9105787; rev:2;)
alert tls $HOME_NET any -> 167.254.241.29 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1c95129415df45b5dec5276a78fa0a2084a7f4d4d6f1d2bf6ee18bad75ea9c98"; reference:url,publicmosaic.com/indicators; sid:9100796; rev:2;)
alert tls $HOME_NET any -> 168.144.89.48 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4e92c1942c3c09c5e2d7f99ed4ce454665c5f7d437789688632f26dad02c1680"; reference:url,publicmosaic.com/indicators; sid:9100602; rev:2;)
alert tls $HOME_NET any -> 168.144.89.48 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4e92c1942c3c09c5e2d7f99ed4ce454665c5f7d437789688632f26dad02c1680"; reference:url,publicmosaic.com/indicators; sid:9100454; rev:2;)
alert tcp $HOME_NET any -> 169.40.135.36 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100642; rev:2;)
alert tls $HOME_NET any -> 169.40.135.36 8888 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2e71cbaeb0efde3b25b08d5d2355b836b031a093407fc4b1a6b938e85f23f36b"; reference:url,publicmosaic.com/indicators; sid:9101254; rev:2;)
alert tls $HOME_NET any -> 169.40.135.227 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6ad311f8d0a73e05208fdc825c6a13f498193d992be31bdd337d4f308ae0de81"; reference:url,publicmosaic.com/indicators; sid:9100601; rev:2;)
alert tcp $HOME_NET any -> 170.62.130.234 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100641; rev:2;)
alert tls $HOME_NET any -> 171.113.113.19 8001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ba712ac8027edcf33cc64a9b0a0522fabe40227d2ca78ac379cc7eb594d977b8"; reference:url,publicmosaic.com/indicators; sid:9105291; rev:2;)
alert tls $HOME_NET any -> 171.113.115.5 8001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ba712ac8027edcf33cc64a9b0a0522fabe40227d2ca78ac379cc7eb594d977b8"; reference:url,publicmosaic.com/indicators; sid:9106202; rev:2;)
alert tls $HOME_NET any -> 173.199.70.174 80 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"620710d952c181e3e4a5476b01f6625f21516b7bdcb072f40dd0ea6961641850"; reference:url,publicmosaic.com/indicators; sid:9100693; rev:2;)
alert tls $HOME_NET any -> 178.16.52.22 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"68932e254d6e12e74c19a2afd861566b989afc207afab4c1429aa16b9572f92c"; reference:url,publicmosaic.com/indicators; sid:9100600; rev:2;)
alert tls $HOME_NET any -> 178.104.186.90 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ad0d04810204c8182d0847d8436f0e6efb8ab4ad7dab43fda05a35f7e2c1382a"; reference:url,publicmosaic.com/indicators; sid:9100599; rev:2;)
alert tls $HOME_NET any -> 178.104.186.90 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ad0d04810204c8182d0847d8436f0e6efb8ab4ad7dab43fda05a35f7e2c1382a"; reference:url,publicmosaic.com/indicators; sid:9106447; rev:2;)
alert tcp $HOME_NET any -> 180.184.29.135 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100640; rev:2;)
alert tls $HOME_NET any -> 181.41.201.103 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4c91579c55a44911d757085d011c78d84b0e3b0e2d68a72b57a892b9a291309d"; reference:url,publicmosaic.com/indicators; sid:9100456; rev:2;)
alert tls $HOME_NET any -> 182.61.6.24 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1d6e454f41ed8a930151263b6beeecb6823e33d7dbfc88ea2770b256f89e49e0"; reference:url,publicmosaic.com/indicators; sid:9100639; rev:2;)
alert tls $HOME_NET any -> 182.92.227.226 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"03e959ad76c97983cb8eb9c8f1367798dc6c194469e326dcbf70e84c41aba971"; reference:url,publicmosaic.com/indicators; sid:9101253; rev:2;)
alert tls $HOME_NET any -> 182.255.45.114 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"329fda88e01ab35b161a16123e703c8e53afff9e39c5efdc5f76d8cde3fc944f"; reference:url,publicmosaic.com/indicators; sid:9100638; rev:2;)
alert tls $HOME_NET any -> 182.255.45.114 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100455; rev:2;)
alert tls $HOME_NET any -> 185.9.17.227 4443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d5697a83e5b99cd02559a6d2b62e9b24bbb9b1cf4b80065d7410c9ccf46017a9"; reference:url,publicmosaic.com/indicators; sid:9101500; rev:2;)
alert tls $HOME_NET any -> 185.9.17.227 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d5697a83e5b99cd02559a6d2b62e9b24bbb9b1cf4b80065d7410c9ccf46017a9"; reference:url,publicmosaic.com/indicators; sid:9101501; rev:2;)
alert tls $HOME_NET any -> 185.33.86.141 29292 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0e09ae8ed67191133e1048e363054ef36fc089aa2f26b8db820c937410251145"; reference:url,publicmosaic.com/indicators; sid:9103360; rev:2;)
alert tls $HOME_NET any -> 185.147.83.59 48321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"662bfe92990276874b38a55961777b78e6bad7f31ebd87825b64e66f35cd3e4b"; reference:url,publicmosaic.com/indicators; sid:9103359; rev:2;)
alert tls $HOME_NET any -> 185.193.127.10 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0cbce5d34d388b2289bc84e55f0264231057f0bd681970b0bb33421ac10d2db3"; reference:url,publicmosaic.com/indicators; sid:9100598; rev:2;)
alert tls $HOME_NET any -> 185.199.197.93 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0ee3292ea7a8a99466c2444bd75871ee1381adcb5a52952978d13a6931ea79d3"; reference:url,publicmosaic.com/indicators; sid:9100597; rev:2;)
alert tcp $HOME_NET any -> 185.199.198.82 10443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100634; rev:2;)
alert tls $HOME_NET any -> 185.207.154.11 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100637; rev:2;)
alert tls $HOME_NET any -> 185.207.154.11 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100453; rev:2;)
alert tls $HOME_NET any -> 185.213.20.250 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"039e810e79668c1e5dcfdb4677249b6b82267a717df031868a0fb188d912c2de"; reference:url,publicmosaic.com/indicators; sid:9100452; rev:2;)
alert tcp $HOME_NET any -> 185.213.20.250 5000 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100636; rev:2;)
alert tls $HOME_NET any -> 185.227.152.231 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b902ebe6b057b2b251c7a5d04809ae88b0660db72dbf3c5830c4ad5a99740c6d"; reference:url,publicmosaic.com/indicators; sid:9104104; rev:2;)
alert tls $HOME_NET any -> 185.242.245.120 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"738f2c43746d31eb7bae4ea29e4d4f019b9086a8249185419682ecc65d0ba597"; reference:url,publicmosaic.com/indicators; sid:9100635; rev:2;)
alert tls $HOME_NET any -> 186.244.227.27 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6b7ab216a08a6ef854a983399222cf1a5f2580bf024c20aaf6914d9243761a3c"; reference:url,publicmosaic.com/indicators; sid:9100451; rev:2;)
alert tls $HOME_NET any -> 186.244.227.52 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6b7ab216a08a6ef854a983399222cf1a5f2580bf024c20aaf6914d9243761a3c"; reference:url,publicmosaic.com/indicators; sid:9100449; rev:2;)
alert tls $HOME_NET any -> 186.244.227.104 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6b7ab216a08a6ef854a983399222cf1a5f2580bf024c20aaf6914d9243761a3c"; reference:url,publicmosaic.com/indicators; sid:9100450; rev:2;)
alert tls $HOME_NET any -> 188.166.244.201 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7942e59619f61bcd32072eb52dfbf99aa402c1c2b89d4e6c5512b5696d55e657"; reference:url,publicmosaic.com/indicators; sid:9100596; rev:2;)
alert tls $HOME_NET any -> 188.166.244.201 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"92a899eb87b7ad255c934ab518e9d587c779460d677ecf215c232ae70e6781c1"; reference:url,publicmosaic.com/indicators; sid:9100448; rev:2;)
alert tcp $HOME_NET any -> 192.3.139.18 8443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100633; rev:2;)
alert tls $HOME_NET any -> 192.3.139.18 15221 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"649a78c13fe1d2f5d905ed4e178a8d994138829868f5260fed7eed3e66e8d954"; reference:url,publicmosaic.com/indicators; sid:9103358; rev:2;)
alert tcp $HOME_NET any -> 192.162.199.185 31337 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100632; rev:2;)
alert tls $HOME_NET any -> 192.169.176.54 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ff453ebab63262a5cce46ea65e9b250220bc9fa74888be8e3ada3b7822ba55e9"; reference:url,publicmosaic.com/indicators; sid:9100447; rev:2;)
alert tls $HOME_NET any -> 192.253.226.10 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2623eab9853231c1de8f513309e6a31c4485815a6cb0f67fba707a1e7dc5e9ea"; reference:url,publicmosaic.com/indicators; sid:9105096; rev:2;)
alert tls $HOME_NET any -> 193.32.162.108 4432 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b01bc7bc5692d0dd410de1c39589046d703bccb981a68658bbec8385001c8721"; reference:url,publicmosaic.com/indicators; sid:9103357; rev:2;)
alert tls $HOME_NET any -> 193.42.24.165 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6c3a8c914e550eef17a4b7069b5b3d5102acaad07c922aafc02ebcfc263b8984"; reference:url,publicmosaic.com/indicators; sid:9100781; rev:2;)
alert tls $HOME_NET any -> 193.111.117.26 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6248ec2daa7c752e429ca0945000e3e577fa8b8db8a3d3555b43ec6933e07889"; reference:url,publicmosaic.com/indicators; sid:9105938; rev:2;)
alert tls $HOME_NET any -> 193.112.169.214 30727 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"380197285f0e1f1df6336a0e4eaa7648c9f7d4b467b0d36c0cd3def0ba5030a9"; reference:url,publicmosaic.com/indicators; sid:9103356; rev:2;)
alert tls $HOME_NET any -> 193.112.176.26 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7c6eb2eac8bfbffc0354e6808fb89df23435713a325db5d5f554925a020f7a06"; reference:url,publicmosaic.com/indicators; sid:9105794; rev:2;)
alert tls $HOME_NET any -> 193.112.254.32 8989 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"380197285f0e1f1df6336a0e4eaa7648c9f7d4b467b0d36c0cd3def0ba5030a9"; reference:url,publicmosaic.com/indicators; sid:9103355; rev:2;)
alert tls $HOME_NET any -> 193.135.137.240 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e457d4966b593ad9beac49cfed6094abfeeac8e4ed5c5af34d8f0697501f6b67"; reference:url,publicmosaic.com/indicators; sid:9101252; rev:2;)
alert tls $HOME_NET any -> 193.233.49.79 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"31e6c4df9ac08edc4c2edb508a7ebd11aa8f26119037e90ebc5b56d2ed1086fc"; reference:url,publicmosaic.com/indicators; sid:9105937; rev:2;)
alert tls $HOME_NET any -> 193.233.220.65 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"cb1d3d9374c01590f54ba5cbdac72a2d4b0741c1f62b45de90080f452bfab336"; reference:url,publicmosaic.com/indicators; sid:9100079; rev:2;)
alert tls $HOME_NET any -> 193.239.237.120 50091 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"62747ae52569dc7bba712d71325ff2841d4929665b82862956289f77117d78b5"; reference:url,publicmosaic.com/indicators; sid:9105936; rev:2;)
alert tcp $HOME_NET any -> 194.36.178.53 443 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101302; rev:2;)
alert tls $HOME_NET any -> 194.36.178.53 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5b63c9eed87e3abc3acfb17dbf27674221a11f3064c2fde68de35ba5eacbf2c3"; reference:url,publicmosaic.com/indicators; sid:9100446; rev:2;)
alert tcp $HOME_NET any -> 194.68.26.160 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100631; rev:2;)
alert tls $HOME_NET any -> 194.182.87.116 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ea52c6003627bbd718988d119d0071c6b28171206cfcd7532a1fccfa88249668"; reference:url,publicmosaic.com/indicators; sid:9100445; rev:2;)
alert tcp $HOME_NET any -> 194.182.87.116 4433 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100630; rev:2;)
alert tls $HOME_NET any -> 195.88.191.40 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5ae71bafb5f6ab8781dd94cf48f8f4d8d5b7ea0cb9b610b1067218eb7b6e8857"; reference:url,publicmosaic.com/indicators; sid:9106643; rev:2;)
alert tls $HOME_NET any -> 195.242.118.106 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3c47c8a09b96d3d7a81ada1fee6cc745fe6e39430c62762ccb981afc4ccb8315"; reference:url,publicmosaic.com/indicators; sid:9100444; rev:2;)
alert tls $HOME_NET any -> 195.242.118.106 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"92cfdac94562cef547989cfdeedd6c9b936cb3fedae04714c1419b9ccbe10e44"; reference:url,publicmosaic.com/indicators; sid:9100629; rev:2;)
alert tls $HOME_NET any -> 198.13.47.210 4432 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"15be9e6179d84dd48a419945a51c178aa88a3fdc609661f2de2634908372e23b"; reference:url,publicmosaic.com/indicators; sid:9105337; rev:2;)
alert tls $HOME_NET any -> 198.13.51.245 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e580e149b5b2307ec5ca3b694c95bbdd02b696e3fab1b7ced19ad1e7c1bc7bb1"; reference:url,publicmosaic.com/indicators; sid:9101881; rev:2;)
alert tcp $HOME_NET any -> 202.61.130.163 8888 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9101451; rev:2;)
alert tls $HOME_NET any -> 202.73.4.82 44321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3544fa380fb1499585c383d2617cf613604ca97ed4d51fc7ae02f97e5bc85e15"; reference:url,publicmosaic.com/indicators; sid:9103354; rev:2;)
alert tls $HOME_NET any -> 202.95.8.92 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100443; rev:2;)
alert tls $HOME_NET any -> 202.95.8.97 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100442; rev:2;)
alert tls $HOME_NET any -> 202.95.8.98 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100438; rev:2;)
alert tls $HOME_NET any -> 202.95.17.188 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"cde406af5bae8bdee4ee186f77bd3a6cf688bdc316c12cec6e256255e0b96321"; reference:url,publicmosaic.com/indicators; sid:9100439; rev:2;)
alert tcp $HOME_NET any -> 202.182.101.229 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100628; rev:2;)
alert tcp $HOME_NET any -> 202.182.101.229 5001 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100625; rev:2;)
alert tls $HOME_NET any -> 203.88.118.26 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"88b02ba91d39b083bb0d2ca70d074a25833da269e7b2cc4bca40bad7389b3083"; reference:url,publicmosaic.com/indicators; sid:9104243; rev:2;)
alert tcp $HOME_NET any -> 203.88.118.26 8822 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9105793; rev:2;)
alert tcp $HOME_NET any -> 205.234.170.231 80 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9106809; rev:2;)
alert tls $HOME_NET any -> 205.234.170.231 8444 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"aee37e9ae8c801381cce56ac548acd45e8b6e1559aa46df4973617dca2a71b19"; reference:url,publicmosaic.com/indicators; sid:9100627; rev:2;)
alert tls $HOME_NET any -> 206.81.21.156 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e1d16aca4c140a79f18f272d7800a7151c68162295075a626820b86bf553772c"; reference:url,publicmosaic.com/indicators; sid:9100595; rev:2;)
alert tls $HOME_NET any -> 206.81.21.156 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"de1f95f7dfddbeb19b7c3a2fcec4169f53fc83d7e899217bc8465b7a2b7d0d8c"; reference:url,publicmosaic.com/indicators; sid:9100441; rev:2;)
alert tls $HOME_NET any -> 207.56.26.118 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5f6e1c65143615f14174c1e5786fafd7571f8b54fd6684d68f217d528f2f2d09"; reference:url,publicmosaic.com/indicators; sid:9103353; rev:2;)
alert tls $HOME_NET any -> 207.57.123.129 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"07849910402fdf9cf51be702d266c020172d1275047c5ae17f0a7ad89185c0f7"; reference:url,publicmosaic.com/indicators; sid:9100594; rev:2;)
alert tls $HOME_NET any -> 207.57.123.129 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"64111f4a4a9eef52cfc7d745d93732166c001c12f2560319b1a019350c462ab6"; reference:url,publicmosaic.com/indicators; sid:9104495; rev:2;)
alert tls $HOME_NET any -> 207.148.122.131 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0b6a6c3661565591defc516f7292b264b965e1bac86cc78b8f94dbb2c51bca0d"; reference:url,publicmosaic.com/indicators; sid:9100626; rev:2;)
alert tls $HOME_NET any -> 209.99.188.193 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"41f782a33467143ac6ddd941152c99a98172e55df119a65771b3bf42bd39d311"; reference:url,publicmosaic.com/indicators; sid:9100593; rev:2;)
alert tls $HOME_NET any -> 209.99.188.193 4323 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"87fcc3e3a0d9a22d4405fbe267f30e326e47ab92b395403f8bab2706bc4aa7a5"; reference:url,publicmosaic.com/indicators; sid:9103352; rev:2;)
alert tcp $HOME_NET any -> 209.99.188.193 4431 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100623; rev:2;)
alert tls $HOME_NET any -> 209.99.188.193 43222 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"87fcc3e3a0d9a22d4405fbe267f30e326e47ab92b395403f8bab2706bc4aa7a5"; reference:url,publicmosaic.com/indicators; sid:9103351; rev:2;)
alert tls $HOME_NET any -> 212.47.241.124 55555 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6407f02fa6f21ed8651c1cb5c470ac02d19f5b16a573f3bbcc89652c04fdf7c1"; reference:url,publicmosaic.com/indicators; sid:9100440; rev:2;)
alert tls $HOME_NET any -> 213.199.53.152 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2b1a381b6ce13c62bdcbe0edcb9d24f809337d43bda7ce260a14c5181494549b"; reference:url,publicmosaic.com/indicators; sid:9101562; rev:2;)
alert tls $HOME_NET any -> 213.209.159.36 1879 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5a6a4d936003e1b1fd9c882f1eafe4b3fbb8f5dec7913e9517a6dd4fd9fa9f8d"; reference:url,publicmosaic.com/indicators; sid:9105290; rev:2;)
alert tcp $HOME_NET any -> 221.226.128.227 30002 (msg:"HOLLOWPOINT C2 adaptix"; reference:url,publicmosaic.com/indicators; sid:9100624; rev:2;)