# hollowpoint.rules — generated 2026-09-15 09:38 UTC — 523 rules — TLP:CLEAR
# source: https://publicmosaic.com/indicators — published for defensive use
# scope: family sliver — https://publicmosaic.com/c2/sliver
# rev:2 — alert tcp on address and port; alert tls with tls.cert_fingerprint only where the full
#   certificate SHA-256 is published. REPLACE any rev:1 file (every rule was alert tls) rather than
#   loading it beside this one: a same-sid different-text pair is a duplicate Suricata refuses.
# live set only — archived episodes omitted: 217
# Rules may lag a withdrawal by up to five minutes (edge cache); the hub page is authoritative.
alert tls $HOME_NET any -> 1.13.165.181 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5c48ed46502227edaa74dd3bd96c2bc568e80eb16bd4adbe212f8c3dc88ea0b0"; reference:url,publicmosaic.com/indicators; sid:9103720; rev:2;)
alert tls $HOME_NET any -> 1.14.73.118 34091 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1469697b4db2de18d2aea69f1e3f3979a7943702c83332f136ab43a299fd256"; reference:url,publicmosaic.com/indicators; sid:9104692; rev:2;)
alert tls $HOME_NET any -> 2.27.62.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f7e5bd2ae729253996a5470ce150b7b7499c463db54bb77e8caed626575983f8"; reference:url,publicmosaic.com/indicators; sid:9100073; rev:2;)
alert tls $HOME_NET any -> 2.56.118.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bdb86209a000c38ddbfe0cfcf3763b4a9f66b146af212a378d6e587b544bfd89"; reference:url,publicmosaic.com/indicators; sid:9105002; rev:2;)
alert tls $HOME_NET any -> 2.58.197.179 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4b364819133a785f465de5298b1aba031623aaa2c500ec07b2b52b57d54042bb"; reference:url,publicmosaic.com/indicators; sid:9100411; rev:2;)
alert tls $HOME_NET any -> 3.21.191.242 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f7577aa5210643bc9a26da3e9eb1c731a9586a3a83142ab19f0fed9b7e1c196f"; reference:url,publicmosaic.com/indicators; sid:9101915; rev:2;)
alert tls $HOME_NET any -> 3.39.249.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c828620a0146c0a400664411620ef3c68102294cb6b9c8df35ec80f8529389c3"; reference:url,publicmosaic.com/indicators; sid:9103719; rev:2;)
alert tls $HOME_NET any -> 4.154.203.165 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"40258b5ce1b9197fd0d48c1f2450dd3e554237487a1d4fd924c71680223668c1"; reference:url,publicmosaic.com/indicators; sid:9104239; rev:2;)
alert tls $HOME_NET any -> 4.154.203.165 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"614240bb1a61dc1dcf4d902132e5055019b95a94803c774f6bce39c5a446e8be"; reference:url,publicmosaic.com/indicators; sid:9105001; rev:2;)
alert tls $HOME_NET any -> 5.175.189.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"90ecc40371875c02acad9fb5add083d7e18e7b884e1ffc90967e908739d5064c"; reference:url,publicmosaic.com/indicators; sid:9100042; rev:2;)
alert tls $HOME_NET any -> 8.141.117.9 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ce274088c3d60dcf2148d48a5510c86b977b953b71afeb1672b1e00e90fbd4cd"; reference:url,publicmosaic.com/indicators; sid:9106749; rev:2;)
alert tls $HOME_NET any -> 8.211.194.92 41076 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"95f72643009c1d4c8d2fe29be7702620f5e252a54f76dff855c52c2712003e68"; reference:url,publicmosaic.com/indicators; sid:9100038; rev:2;)
alert tls $HOME_NET any -> 8.219.149.222 8080 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"98c0a69bfd1583449e3dd71bbb451ff0ae9b9d5b57104a8b4512eda9416322cb"; reference:url,publicmosaic.com/indicators; sid:9101916; rev:2;)
alert tls $HOME_NET any -> 8.219.149.222 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"82f36ce027070c7d0c70144461ae17f5f4fce10b0f25b03669d6ee20c99a0dba"; reference:url,publicmosaic.com/indicators; sid:9104466; rev:2;)
alert tls $HOME_NET any -> 8.219.149.222 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"82f36ce027070c7d0c70144461ae17f5f4fce10b0f25b03669d6ee20c99a0dba"; reference:url,publicmosaic.com/indicators; sid:9104465; rev:2;)
alert tls $HOME_NET any -> 8.219.149.222 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7413f48ab9a204cdd2e79cb84746c02f1907a85a0701cf8281218f2e90e90685"; reference:url,publicmosaic.com/indicators; sid:9100410; rev:2;)
alert tls $HOME_NET any -> 9.223.178.81 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"09098b56efce1ca0ea0770c709134223f38854fdff7d5fc294c843a86108a920"; reference:url,publicmosaic.com/indicators; sid:9101917; rev:2;)
alert tls $HOME_NET any -> 13.158.165.149 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05bfcaf1f44f7ad6224cabe78670a3ee78c11e5692ef94b1f6bfa56d36e8404f"; reference:url,publicmosaic.com/indicators; sid:9101918; rev:2;)
alert tls $HOME_NET any -> 13.231.5.121 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a5fe246decb3c11cbd0719aef0c1b160fd18d3640e6dcaa17466a2417980022a"; reference:url,publicmosaic.com/indicators; sid:9100702; rev:2;)
alert tls $HOME_NET any -> 14.103.50.128 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad726caaf8a84af3fca8ec22515bebce3ca5a99bf7865084ebf17659d96a6023"; reference:url,publicmosaic.com/indicators; sid:9101300; rev:2;)
alert tls $HOME_NET any -> 15.204.66.40 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d0578ddc0dcfae2ed5471918784563f8e88ff811de72cce9ff082a299a1cbed0"; reference:url,publicmosaic.com/indicators; sid:9103718; rev:2;)
alert tls $HOME_NET any -> 15.204.173.19 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"707de2f2ff6627b6fc9f62bd0580ed4ab33f591ca1261b2654030b14477e1357"; reference:url,publicmosaic.com/indicators; sid:9103717; rev:2;)
alert tls $HOME_NET any -> 15.204.248.160 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"324b17f2061ff8de7ae11c23871997c6789f0748ec90ed3c19f6c469d9fd89a8"; reference:url,publicmosaic.com/indicators; sid:9100409; rev:2;)
alert tls $HOME_NET any -> 15.235.37.196 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b1e7e12d8294288b4d148ad79f17018b61ff3688ff5006c719d378ae321c7acf"; reference:url,publicmosaic.com/indicators; sid:9101919; rev:2;)
alert tls $HOME_NET any -> 15.235.166.83 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"eff1a70f5ca124946a6cde82c9b9526647c64c2ac1af0df9a0fb60c7e7ff8ada"; reference:url,publicmosaic.com/indicators; sid:9103716; rev:2;)
alert tls $HOME_NET any -> 18.136.148.19 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0b5d7b8f19913a6aef5747f8c5afd932ab864b58c01da182938faf5900011a0e"; reference:url,publicmosaic.com/indicators; sid:9100785; rev:2;)
alert tls $HOME_NET any -> 18.136.148.19 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bc02ffd29497187c20ccc3fc89442b3034c39d8850ec0ef0bf4fd9b1a0c30fd6"; reference:url,publicmosaic.com/indicators; sid:9100786; rev:2;)
alert tls $HOME_NET any -> 18.139.162.58 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b83fe08f44d393495ed9cdf51e0640f5b1d85727353eb7809b567f76e9914c13"; reference:url,publicmosaic.com/indicators; sid:9100813; rev:2;)
alert tls $HOME_NET any -> 18.141.182.223 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"384bd8719c6436599e2c9359ed029793ee6344a6c49b88dbb0cb510ab212560b"; reference:url,publicmosaic.com/indicators; sid:9101920; rev:2;)
alert tls $HOME_NET any -> 20.62.126.164 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92c86d3721e7bc274f8d68cd69827fc49ecfc06336108ef8d0cd70cc5b6d50fd"; reference:url,publicmosaic.com/indicators; sid:9101921; rev:2;)
alert tls $HOME_NET any -> 20.118.243.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e710ba12ede9d6d42fd771951ca4f71e18e40a3a751b80c7b14badd5d31f2cd"; reference:url,publicmosaic.com/indicators; sid:9100398; rev:2;)
alert tls $HOME_NET any -> 20.127.244.233 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"255a6f7225512f11a9820fdc5b799d5ed84c5f2e792e4490275c57be107fca72"; reference:url,publicmosaic.com/indicators; sid:9100400; rev:2;)
alert tls $HOME_NET any -> 20.205.136.20 65350 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7bf4bd9b6413be38247241fb2b8f3a8b25d0466983f48300982f3399b1c61fa9"; reference:url,publicmosaic.com/indicators; sid:9106211; rev:2;)
alert tls $HOME_NET any -> 23.27.24.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23e245201ce240f543c5a51eac686178ffba1baf74c05297e9a12f09d45ade34"; reference:url,publicmosaic.com/indicators; sid:9101751; rev:2;)
alert tls $HOME_NET any -> 23.94.145.203 18080 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"24862feeb4940bafb0d423ded8860ce81ff5382594f7df97d7acd3cc912a7f27"; reference:url,publicmosaic.com/indicators; sid:9100062; rev:2;)
alert tls $HOME_NET any -> 23.94.206.113 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e06deb4fb0bcf1c557fc6d369729cff8775cffdfa4a2c8e2473984b3422a0009"; reference:url,publicmosaic.com/indicators; sid:9106006; rev:2;)
alert tls $HOME_NET any -> 23.94.252.82 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1b6451e2be2bc944ace8edb01fc997ddf936aa997ae09acd7c92e1423c49be1e"; reference:url,publicmosaic.com/indicators; sid:9100742; rev:2;)
alert tls $HOME_NET any -> 23.95.230.28 4444 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b9c34eb1d6b4a51e89102387b041c22073d0970be01a06fd48a8c241804ea7bb"; reference:url,publicmosaic.com/indicators; sid:9100741; rev:2;)
alert tls $HOME_NET any -> 23.95.230.28 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e512d0f003385b9ad48e6c6c9b055c41abdaf006326cad0ec4367053c236470"; reference:url,publicmosaic.com/indicators; sid:9100061; rev:2;)
alert tls $HOME_NET any -> 23.254.130.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8721e0566bd13b47cf689c308788b6c09966ec3f9f5ab14879c6916a1dbe0270"; reference:url,publicmosaic.com/indicators; sid:9105103; rev:2;)
alert tls $HOME_NET any -> 23.254.240.220 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8721e0566bd13b47cf689c308788b6c09966ec3f9f5ab14879c6916a1dbe0270"; reference:url,publicmosaic.com/indicators; sid:9100063; rev:2;)
alert tls $HOME_NET any -> 24.144.82.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"56617bd8278bbbf7378642d21e1e7529c7c721fbe00c130f7811f05471585f81"; reference:url,publicmosaic.com/indicators; sid:9100408; rev:2;)
alert tls $HOME_NET any -> 31.6.1.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"526ebba44bb6e76b2a2bd889a16e401bb2a685f621855b44ac57749f23b87784"; reference:url,publicmosaic.com/indicators; sid:9100784; rev:2;)
alert tls $HOME_NET any -> 31.76.111.38 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"951197838d59e56408025a4d26914bed91814c73b0e6af76b9a20d9847e2866c"; reference:url,publicmosaic.com/indicators; sid:9100777; rev:2;)
alert tls $HOME_NET any -> 31.76.111.38 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ca77ee74a73805540f462ab2e231eafc4300d77b6e774843760b374b495272b3"; reference:url,publicmosaic.com/indicators; sid:9100056; rev:2;)
alert tls $HOME_NET any -> 31.76.111.243 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"951197838d59e56408025a4d26914bed91814c73b0e6af76b9a20d9847e2866c"; reference:url,publicmosaic.com/indicators; sid:9101704; rev:2;)
alert tls $HOME_NET any -> 31.76.111.243 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ca77ee74a73805540f462ab2e231eafc4300d77b6e774843760b374b495272b3"; reference:url,publicmosaic.com/indicators; sid:9101650; rev:2;)
alert tls $HOME_NET any -> 31.77.220.141 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7c3c93d32334cf7056efb108a8f96b94b5c5420a5b854ce4923b6752be5d01e9"; reference:url,publicmosaic.com/indicators; sid:9106195; rev:2;)
alert tls $HOME_NET any -> 31.77.220.141 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"732c14027a9d8436bb870f3dffd5206af0264683a78b7b8e9a7b802cc40acb00"; reference:url,publicmosaic.com/indicators; sid:9106005; rev:2;)
alert tls $HOME_NET any -> 31.220.74.13 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c11917994ca842322f4b999b3e1b1e328ceff514aa5b6c9cf88787d47e61bc63"; reference:url,publicmosaic.com/indicators; sid:9103715; rev:2;)
alert tls $HOME_NET any -> 34.53.161.27 35382 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"44fa6a07e4316ced77141b3ea3610eb64a9b8d43ba3f7564011b828fce83380f"; reference:url,publicmosaic.com/indicators; sid:9100054; rev:2;)
alert tls $HOME_NET any -> 34.122.21.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b03f443dbbc0f6cf6cce392413c040ebb96c8734ac8a08369d370a91293dc3a"; reference:url,publicmosaic.com/indicators; sid:9100396; rev:2;)
alert tls $HOME_NET any -> 34.175.95.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d27e8956cbf257a7e52316e455d60d53609742404d5f98b0c0d1c1d74b09d836"; reference:url,publicmosaic.com/indicators; sid:9100399; rev:2;)
alert tls $HOME_NET any -> 34.242.163.197 31333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7c3b8ebe9efcc0da14ee9e1360c3b59c3e30306412f373c6d545a16143e68072"; reference:url,publicmosaic.com/indicators; sid:9105203; rev:2;)
alert tls $HOME_NET any -> 35.212.172.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bccb86077af460f783d73f77c68f71c77dbdcdda128093f362616711ef94509c"; reference:url,publicmosaic.com/indicators; sid:9100407; rev:2;)
alert tls $HOME_NET any -> 35.229.230.203 21 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ae678f17b451c07afc106103c6e90fc93f9e6122e42d05563564769b9c6ae16"; reference:url,publicmosaic.com/indicators; sid:9100055; rev:2;)
alert tls $HOME_NET any -> 35.240.178.188 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9604c6724d1f0ba1c38ba48d2bf48167339a1bc7ffde6177a41d494fc90fb391"; reference:url,publicmosaic.com/indicators; sid:9100718; rev:2;)
alert tls $HOME_NET any -> 35.240.178.188 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6a8f31031eb8e91f03536f8fd8e3004236a735a718526fae8e1fee7cda8bd709"; reference:url,publicmosaic.com/indicators; sid:9100397; rev:2;)
alert tls $HOME_NET any -> 36.150.237.12 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"786824e9824b912b81484392e42c7a746525aac96aeb5a7a2bbfe79be9e67ab6"; reference:url,publicmosaic.com/indicators; sid:9100406; rev:2;)
alert tls $HOME_NET any -> 37.114.41.131 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"220a4d73cbef1e8abba8eeb43dfa11d4b1fc1f46062eecd163ffc33715e3eaca"; reference:url,publicmosaic.com/indicators; sid:9100405; rev:2;)
alert tls $HOME_NET any -> 38.47.122.77 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1071e16e7aaf1efb3e1f484fe41cc5b389aba30448d72a4bdef0af92cdc90df0"; reference:url,publicmosaic.com/indicators; sid:9100404; rev:2;)
alert tls $HOME_NET any -> 38.60.220.112 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f6e82441c228e618f3f6da47b7beb6b0dec17838b14d41b358e5f1b0bffcda71"; reference:url,publicmosaic.com/indicators; sid:9101703; rev:2;)
alert tls $HOME_NET any -> 38.60.220.112 58741 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7dde61824bcee402ff5b7dd682a2a615577b00e1abb49fb1a443576580b57adb"; reference:url,publicmosaic.com/indicators; sid:9103714; rev:2;)
alert tls $HOME_NET any -> 38.60.241.251 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"451a3ae1a19400db51a4eb8cbbea15682ec351f0d165549ae6332843e600382a"; reference:url,publicmosaic.com/indicators; sid:9100740; rev:2;)
alert tls $HOME_NET any -> 38.76.205.40 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c8ab7a0cd506e68088e888f3fab03c209aed006b96eb3df556702126f15bb91f"; reference:url,publicmosaic.com/indicators; sid:9104687; rev:2;)
alert tls $HOME_NET any -> 38.76.215.245 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"721bbae3a4dfbc6c128cac360e9a36073d38649c8a2177d8299bec21cb4d029a"; reference:url,publicmosaic.com/indicators; sid:9101749; rev:2;)
alert tls $HOME_NET any -> 38.127.216.221 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9601892d64acb7496d0330979802edd6acfa6bcfb55df4ca7a85da579d32c249"; reference:url,publicmosaic.com/indicators; sid:9100830; rev:2;)
alert tls $HOME_NET any -> 38.147.164.81 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"30161e690dc095979bdcf3f60c88b3dd04b01b089c66764b66493a5657e6154d"; reference:url,publicmosaic.com/indicators; sid:9100403; rev:2;)
alert tls $HOME_NET any -> 39.107.53.141 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"30cef81dc47c66c3f07feed36449968eb610d773449a38b766212f8035e24ff2"; reference:url,publicmosaic.com/indicators; sid:9104074; rev:2;)
alert tls $HOME_NET any -> 40.90.235.75 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fccdbd5251090212fa31a40f6ad27ab1eed63a21ce87f758a6f649a5a673709e"; reference:url,publicmosaic.com/indicators; sid:9105000; rev:2;)
alert tls $HOME_NET any -> 42.112.213.93 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"053eb2b23c40183ba31793a0cade1490c662c06a17c7aa283beb4dd033909577"; reference:url,publicmosaic.com/indicators; sid:9100402; rev:2;)
alert tls $HOME_NET any -> 42.193.120.28 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6586095354d2662ccb19332ddf10b48d924d174970c6fd2aa54d2bbd422496c2"; reference:url,publicmosaic.com/indicators; sid:9100401; rev:2;)
alert tls $HOME_NET any -> 43.130.69.135 20214 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c79ccd6591c5f90354bfc4000255c5f6c7f17c4889414bb6949fcc9d042f09d0"; reference:url,publicmosaic.com/indicators; sid:9103130; rev:2;)
alert tls $HOME_NET any -> 43.130.127.89 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0424b5fbf834f142be52c5d5e19d9d8a7f9b17f14df2d40f06026380f3da0e51"; reference:url,publicmosaic.com/indicators; sid:9100395; rev:2;)
alert tls $HOME_NET any -> 43.131.50.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"36f273f7edc494897330cdf318088c81d22375e74e6ec7151f07399fbf25bbbd"; reference:url,publicmosaic.com/indicators; sid:9100698; rev:2;)
alert tls $HOME_NET any -> 43.134.169.103 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fef947905e4d8816008fb3095c18f245f6b7cd466d7720667e20c67ae29b66fc"; reference:url,publicmosaic.com/indicators; sid:9104200; rev:2;)
alert tls $HOME_NET any -> 43.134.169.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b05320dbc33317a8e0c44b2f9c133a906a42b42202175e4973eabfc50b48d682"; reference:url,publicmosaic.com/indicators; sid:9100437; rev:2;)
alert tls $HOME_NET any -> 43.136.93.81 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b81cd330745d48b2b907b35812060d2a72f22ec5877eb7c2a71f650eb14036eb"; reference:url,publicmosaic.com/indicators; sid:9106133; rev:2;)
alert tls $HOME_NET any -> 43.136.132.144 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"44910293403197211239c812e5d38a65e4c260ad8e9316225ab64ff75ff1d7ab"; reference:url,publicmosaic.com/indicators; sid:9100776; rev:2;)
alert tls $HOME_NET any -> 43.136.132.144 58443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c157317b48f031845787877215a50708e839e0459e424a115eafa2a3d08b15e9"; reference:url,publicmosaic.com/indicators; sid:9100053; rev:2;)
alert tls $HOME_NET any -> 43.155.215.231 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ba62914971a0a901cce8a75fbea4c80007e388910a2dfd3e6a76bb90be7ccbdf"; reference:url,publicmosaic.com/indicators; sid:9103976; rev:2;)
alert tls $HOME_NET any -> 43.155.215.231 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f14c884caa1d77baf17a6bfda05b1d1dd2867dbb9058714f13bd19c0d71d6b36"; reference:url,publicmosaic.com/indicators; sid:9103713; rev:2;)
alert tls $HOME_NET any -> 43.156.107.94 8887 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"184b21dedc7e9a3cf98a26f0cf47fece9a0067ac9397238e6e0a4e0cc99bb52f"; reference:url,publicmosaic.com/indicators; sid:9100052; rev:2;)
alert tls $HOME_NET any -> 43.156.184.213 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c7e956c59e1c8c2a944b957f2a3eba8ac66dfa53cf4689350685bc1a3e68ebdd"; reference:url,publicmosaic.com/indicators; sid:9101583; rev:2;)
alert tls $HOME_NET any -> 43.157.204.73 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9c9f75b9e849e602d355ac9743b24c9acd5f58c5c5f22e152859df2809b70567"; reference:url,publicmosaic.com/indicators; sid:9104464; rev:2;)
alert tls $HOME_NET any -> 43.157.204.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"48c700cb03fc4616c6e5d7632993939b63a5f79be5d5a2405af23fee41f07e6d"; reference:url,publicmosaic.com/indicators; sid:9103712; rev:2;)
alert tls $HOME_NET any -> 43.157.204.73 51837 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"48c700cb03fc4616c6e5d7632993939b63a5f79be5d5a2405af23fee41f07e6d"; reference:url,publicmosaic.com/indicators; sid:9103711; rev:2;)
alert tls $HOME_NET any -> 43.160.235.200 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6db16b0b17fdd9dee47a674678149718bbb85b217f7c00cbb7e79ee077205255"; reference:url,publicmosaic.com/indicators; sid:9100807; rev:2;)
alert tls $HOME_NET any -> 43.163.208.239 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4a690038e2efdf6e428933d91217de9981bdf1c6ef2fd8b1e057b64900646abf"; reference:url,publicmosaic.com/indicators; sid:9103710; rev:2;)
alert tls $HOME_NET any -> 44.200.237.10 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3da223e09c2308ab1c8d431d2b01f9e0ecf998676ef1d7e24f59503610915222"; reference:url,publicmosaic.com/indicators; sid:9101922; rev:2;)
alert tls $HOME_NET any -> 44.217.217.119 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab6cc0d0662d6fd8def2b2ffb96e63d653a78d0fd60baf39477235852ce5590f"; reference:url,publicmosaic.com/indicators; sid:9101748; rev:2;)
alert tls $HOME_NET any -> 45.32.165.7 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1154766444df8cc471804678124ec5d8cd634092a2c97f2b15f612a5f129fa0c"; reference:url,publicmosaic.com/indicators; sid:9100739; rev:2;)
alert tls $HOME_NET any -> 45.38.20.151 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"71bf5f878553803ff5a97d64bec87f661d1fc56f09fe569ac207e4ee8fd3c97f"; reference:url,publicmosaic.com/indicators; sid:9106347; rev:2;)
alert tls $HOME_NET any -> 45.38.20.151 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b6e8be28cee97ffe2cce33984e6b68af9d127c1992ade2599928df295d50e6c8"; reference:url,publicmosaic.com/indicators; sid:9106346; rev:2;)
alert tls $HOME_NET any -> 45.38.20.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"de360b3e9f065ecfb0a814154d0a5df764ae11da43f55956875a63d78378bb60"; reference:url,publicmosaic.com/indicators; sid:9106003; rev:2;)
alert tls $HOME_NET any -> 45.64.52.67 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"302e4a3aae0b72450430a1f7340003dc2156ccd8ead9ddf07e5f2d96dd379cfd"; reference:url,publicmosaic.com/indicators; sid:9105346; rev:2;)
alert tls $HOME_NET any -> 45.64.52.67 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d6b7f8f1f1a67cd98ab456376a68104d35b50f8dd1416ac2782fa17497d3e8c0"; reference:url,publicmosaic.com/indicators; sid:9104119; rev:2;)
alert tls $HOME_NET any -> 45.74.3.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"064ec1bb25be28fc3885d3f0755072ead056562b78895fe1b27f65a57d4c73d2"; reference:url,publicmosaic.com/indicators; sid:9100047; rev:2;)
alert tls $HOME_NET any -> 45.74.31.54 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4d2ecd380840c1938a0ece01514b3ef0e9fa37ec33fe10a5afce27385a3b26a9"; reference:url,publicmosaic.com/indicators; sid:9100717; rev:2;)
alert tls $HOME_NET any -> 45.74.31.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ad9a81f7f300769e307588613a55a8563197229e170ce7e42ea1138d5cb583c"; reference:url,publicmosaic.com/indicators; sid:9100394; rev:2;)
alert tls $HOME_NET any -> 45.77.33.208 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b3d8b2241b869203e7dc75cf32dac694c559c2c16ac266458060c84355a3ee5a"; reference:url,publicmosaic.com/indicators; sid:9101923; rev:2;)
alert tls $HOME_NET any -> 45.87.245.85 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d154f770a23e049bd735656d402cdbda107e25d2a11cca655f13468a5e0a34fd"; reference:url,publicmosaic.com/indicators; sid:9101924; rev:2;)
alert tls $HOME_NET any -> 45.125.67.196 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ece70edc608245f25b2762b8acff990f1c8af58f9caad2d6e959b1cdc9998fa"; reference:url,publicmosaic.com/indicators; sid:9101145; rev:2;)
alert tls $HOME_NET any -> 45.136.13.14 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05518cef42fee350b42a2af90d8d5081358c149b1eea5b36203a29cee0f3f6aa"; reference:url,publicmosaic.com/indicators; sid:9100393; rev:2;)
alert tls $HOME_NET any -> 45.136.15.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"27530809ecf9400907f7d467fdf49d2cb162d3bd3d6cf76c3352d1589163fa3b"; reference:url,publicmosaic.com/indicators; sid:9100389; rev:2;)
alert tls $HOME_NET any -> 45.137.149.43 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"36b89d1353d62a64df511daa8bc38c69780a00408f5e56106ee64ab4c964ecd8"; reference:url,publicmosaic.com/indicators; sid:9105145; rev:2;)
alert tls $HOME_NET any -> 45.141.215.195 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6a801f71cca33673f6002b0d88ed7c41b6ea4c9fc08810cc992a979f2465693e"; reference:url,publicmosaic.com/indicators; sid:9100773; rev:2;)
alert tls $HOME_NET any -> 45.141.215.195 59404 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0991a6fdfec181b2546b4a2f043f3870988d95f6698c043743a91e22be4cccc9"; reference:url,publicmosaic.com/indicators; sid:9100050; rev:2;)
alert tls $HOME_NET any -> 45.142.31.82 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23b00a321d97c779f6e81da95c72d594c76ce9f4c8edc21b4d4fd159314bc276"; reference:url,publicmosaic.com/indicators; sid:9103709; rev:2;)
alert tls $HOME_NET any -> 45.142.143.176 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f3079f3c8841f6dd06b44434fc5d198c19855ab3e48d6e86da3315a23aa9f6c1"; reference:url,publicmosaic.com/indicators; sid:9100772; rev:2;)
alert tls $HOME_NET any -> 45.142.143.176 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e5a8ac41a22549eaf7a5e2e6345e26e0e449980859debb231df679a124a7d5a4"; reference:url,publicmosaic.com/indicators; sid:9100771; rev:2;)
alert tls $HOME_NET any -> 45.153.34.164 61443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d1f54996152bf05fd1fc8a19c0f23d749ce61fb85fd8ef4780206d7bf92fac12"; reference:url,publicmosaic.com/indicators; sid:9100049; rev:2;)
alert tls $HOME_NET any -> 45.154.98.226 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6c53ea0bc7f6866252003bdb0e0b606a6e11f01d233b1bc393399ab7e3922780"; reference:url,publicmosaic.com/indicators; sid:9106748; rev:2;)
alert tls $HOME_NET any -> 45.154.98.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8bbb60ba8593ba80899099897dcb888e1db56a3537440736b076ade6a97a4efe"; reference:url,publicmosaic.com/indicators; sid:9106620; rev:2;)
alert tls $HOME_NET any -> 45.156.248.2 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4c88988b92684afc18b38c79d807dba0601a65848ae8cc94231e8bd6e645c8d9"; reference:url,publicmosaic.com/indicators; sid:9101925; rev:2;)
alert tls $HOME_NET any -> 45.221.118.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b320ef0d0336e953692773b254eea76f72f1e339182b98b5e8d286f462d0db15"; reference:url,publicmosaic.com/indicators; sid:9100048; rev:2;)
alert tls $HOME_NET any -> 46.8.101.202 61337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d016f19d76edddb535161c8c1401138270103d0ff442746b1dd58decc796f96e"; reference:url,publicmosaic.com/indicators; sid:9100046; rev:2;)
alert tls $HOME_NET any -> 46.16.35.120 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a8105d8c4e3fb69883da4d6eb20263d16f247798b847c08d9dafa3e10b6cba34"; reference:url,publicmosaic.com/indicators; sid:9106002; rev:2;)
alert tls $HOME_NET any -> 46.101.64.237 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"04e50f0d2cf7b67487c0b0c34abb09a61858541f62618b4732a5be197f2487ed"; reference:url,publicmosaic.com/indicators; sid:9100392; rev:2;)
alert tls $HOME_NET any -> 46.151.182.182 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4e98f61b5d6a53e6870486f24d70f260bd8728381932cc1ba42d95bbf141c6c8"; reference:url,publicmosaic.com/indicators; sid:9104696; rev:2;)
alert tls $HOME_NET any -> 46.151.182.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7fda6f6135fbf79b8e2ce2328bf381a5ec06ad4ee39a499159e0773f9c9a7631"; reference:url,publicmosaic.com/indicators; sid:9100391; rev:2;)
alert tls $HOME_NET any -> 47.84.125.171 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0746f5948d21c602c1eec2494e5604c1542c2499d5b29cc5697993b3065adcce"; reference:url,publicmosaic.com/indicators; sid:9103708; rev:2;)
alert tls $HOME_NET any -> 47.89.175.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"45a7a202f2135ae3f24912b27159190a0b037d6e76fc482b417d6631bbe5a773"; reference:url,publicmosaic.com/indicators; sid:9100390; rev:2;)
alert tls $HOME_NET any -> 47.91.30.143 40000 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad7f791d3cc344eb2da70149849c3ccbc131deb14ba7e42063a765844985e866"; reference:url,publicmosaic.com/indicators; sid:9103707; rev:2;)
alert tls $HOME_NET any -> 47.93.159.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3afea977b7a8f6f41db33eaea131ce59376d94e1af8792afad315aa03b7b76e6"; reference:url,publicmosaic.com/indicators; sid:9100388; rev:2;)
alert tls $HOME_NET any -> 47.93.243.161 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f3ad06f47e3f1e07a83ffcf7b51882987e69c2f16324e0aa0811a24dee1a4dcd"; reference:url,publicmosaic.com/indicators; sid:9103406; rev:2;)
alert tls $HOME_NET any -> 47.104.0.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92e4322129c27e7bda00c79ad2c88c55172efef069d9bbe6dfc8e59a0528961d"; reference:url,publicmosaic.com/indicators; sid:9100783; rev:2;)
alert tls $HOME_NET any -> 47.105.109.104 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"471e41900a65fbee890ccb574212b3bfeee7c960710405ab22e8501fedd220d3"; reference:url,publicmosaic.com/indicators; sid:9101926; rev:2;)
alert tls $HOME_NET any -> 47.110.42.209 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9ad9d14bb508099a22ad7ee05066ac946f88c2fd8abe5c3e7dac49ebbc028d2c"; reference:url,publicmosaic.com/indicators; sid:9101927; rev:2;)
alert tls $HOME_NET any -> 47.110.42.209 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f203293d02e06aa42e8d60f4d9870921f8f24f13e9986f838b252d4da934a010"; reference:url,publicmosaic.com/indicators; sid:9104458; rev:2;)
alert tls $HOME_NET any -> 47.116.113.15 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9d8f783ce0268d1df5970d991fb3ab53321b68a8c32620a990495c77b6f6ac1b"; reference:url,publicmosaic.com/indicators; sid:9101647; rev:2;)
alert tls $HOME_NET any -> 47.120.46.210 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6be6fa70608e7ceb3ddd965b296ac7cfcef4d03a10ef1c4128130cc9aa096c4d"; reference:url,publicmosaic.com/indicators; sid:9100387; rev:2;)
alert tls $HOME_NET any -> 47.121.136.51 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5cc5748741d65e34659f3d19f1fc7ce16abb31f524c5ce78f7d562f2d7f92f70"; reference:url,publicmosaic.com/indicators; sid:9103706; rev:2;)
alert tls $HOME_NET any -> 47.237.100.236 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1b86134d2e23de8018192dfd1e13caff230007bea5b0e198437ec7849f8640a2"; reference:url,publicmosaic.com/indicators; sid:9100716; rev:2;)
alert tls $HOME_NET any -> 47.237.100.236 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5b72209c38e50c84b5cf00a68f2fe131abf633e45061eda447748f9b246f52ba"; reference:url,publicmosaic.com/indicators; sid:9100386; rev:2;)
alert tls $HOME_NET any -> 47.239.116.237 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9d23f3e9b08a184a67ed7b93364fb13bcfc199702704921dbb05a59b893255a1"; reference:url,publicmosaic.com/indicators; sid:9106011; rev:2;)
alert tls $HOME_NET any -> 49.7.54.77 50051 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"42130ee9b6a9db4d6974ef4ec89d8c9ab5fedf5764d40beddbcb1b5221f2dade"; reference:url,publicmosaic.com/indicators; sid:9103705; rev:2;)
alert tls $HOME_NET any -> 49.232.60.192 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"eada92eb116279506de4bccb2a81e49f4cdfb6fa8a942c1788c90d0cb4181685"; reference:url,publicmosaic.com/indicators; sid:9103704; rev:2;)
alert tls $HOME_NET any -> 49.232.170.10 29180 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"14937c86654dd3165ec87f51387e84c36a0461325661489161326b416a6cafa4"; reference:url,publicmosaic.com/indicators; sid:9100044; rev:2;)
alert tls $HOME_NET any -> 51.15.8.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2af22687b4365ac1908cf1f9d1dec412f05a131277d63013c3dd2db776331c16"; reference:url,publicmosaic.com/indicators; sid:9100385; rev:2;)
alert tls $HOME_NET any -> 51.38.146.21 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bc53cceff3c2c42822f0e451da8e42c6b140e5966b811e752d1d5fb037888e14"; reference:url,publicmosaic.com/indicators; sid:9100697; rev:2;)
alert tls $HOME_NET any -> 51.75.62.52 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ee99fb52abe75be69ea7ac7825e4b5765e1b037908237983111c143b2b695683"; reference:url,publicmosaic.com/indicators; sid:9100715; rev:2;)
alert tls $HOME_NET any -> 51.75.62.52 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7dccde44307b50b16e74d4af9a849382f68de0b90fd6bb2986ce32bc01cfd427"; reference:url,publicmosaic.com/indicators; sid:9100384; rev:2;)
alert tls $HOME_NET any -> 51.81.63.109 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"899eb351331ebdcfaeac4aafb4b40a7b1e5602e57108a7f8faacb8de3fc196b9"; reference:url,publicmosaic.com/indicators; sid:9101928; rev:2;)
alert tls $HOME_NET any -> 51.81.80.239 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"899eb351331ebdcfaeac4aafb4b40a7b1e5602e57108a7f8faacb8de3fc196b9"; reference:url,publicmosaic.com/indicators; sid:9101929; rev:2;)
alert tls $HOME_NET any -> 51.83.133.9 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"930a6af46a9ca249ce15c05f92946edd7905f4af4269d30dd06ad102f80ec442"; reference:url,publicmosaic.com/indicators; sid:9100383; rev:2;)
alert tls $HOME_NET any -> 51.83.185.120 9321 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"421decc7993427e79a9a5c546b64820a989c931857b88d0bc021b597697d08d3"; reference:url,publicmosaic.com/indicators; sid:9103703; rev:2;)
alert tls $HOME_NET any -> 51.195.41.45 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"711621315aeec21118ab023d0604234ee40caa46b52792b3dcdabbfb83291cf1"; reference:url,publicmosaic.com/indicators; sid:9103702; rev:2;)
alert tls $HOME_NET any -> 52.51.21.68 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"da19ff4239ad3dbf0733c9ce8da5f1d9e07feea532fac21b89f3c1be1138f8c0"; reference:url,publicmosaic.com/indicators; sid:9104224; rev:2;)
alert tls $HOME_NET any -> 52.51.21.68 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d860bf752f94466474dec8cee6f9f8d9868c5e2ab31c83926a6623ee19202f8b"; reference:url,publicmosaic.com/indicators; sid:9103701; rev:2;)
alert tls $HOME_NET any -> 52.143.174.249 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"340770e22b7e54175718025c4eb8dd2a11d21ee53de4b8935e218a4d479d1e96"; reference:url,publicmosaic.com/indicators; sid:9100382; rev:2;)
alert tls $HOME_NET any -> 52.173.131.28 4444 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"243a3b5f1d6f598fd773c42f0156acc3b736e1a87041415adf3fbba2a5e7dc5c"; reference:url,publicmosaic.com/indicators; sid:9100380; rev:2;)
alert tls $HOME_NET any -> 52.175.50.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f9e68795f3190606058dda701a8ca12a3ecc5963d5f0b5ccbd7fd362dbc3bb2c"; reference:url,publicmosaic.com/indicators; sid:9101299; rev:2;)
alert tls $HOME_NET any -> 52.188.156.51 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2ddeb6ddeab66e1849ce2102ebcc864259d9228177359bf49a2ae40f29da9e5b"; reference:url,publicmosaic.com/indicators; sid:9101930; rev:2;)
alert tls $HOME_NET any -> 54.46.17.182 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d61910f85b0db0998a4ac22c5945f7070ed10f115e964113f733caaf34bcd34a"; reference:url,publicmosaic.com/indicators; sid:9104118; rev:2;)
alert tls $HOME_NET any -> 57.129.110.30 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47b99cddc4f529533c4cb8252d441fffae99f5ea683bcee45629957d835ade61"; reference:url,publicmosaic.com/indicators; sid:9100381; rev:2;)
alert tls $HOME_NET any -> 57.158.27.132 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"588587c78081378a58269b137eef127af411d92e5f1a8f29f6a1877c639765f3"; reference:url,publicmosaic.com/indicators; sid:9100379; rev:2;)
alert tls $HOME_NET any -> 62.60.159.153 8099 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd792f422061530ac7bf9d8b4a2feadd96ff54dcc1465bbd4c9089b54253252b"; reference:url,publicmosaic.com/indicators; sid:9101931; rev:2;)
alert tls $HOME_NET any -> 62.60.159.153 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"96dd1e712815426e89925a0184a06f0c5ca7428d7a1ff08c11b27235d065077d"; reference:url,publicmosaic.com/indicators; sid:9104232; rev:2;)
alert tls $HOME_NET any -> 62.60.159.153 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"586c488d00e9c570a703b649071406507a7d0cfb4f4475bef7605206f5dd0f4c"; reference:url,publicmosaic.com/indicators; sid:9100436; rev:2;)
alert tls $HOME_NET any -> 62.69.131.43 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"826da3da5058e110de452048b05f7d20b9da336d5e704500d409ed276771800a"; reference:url,publicmosaic.com/indicators; sid:9103700; rev:2;)
alert tls $HOME_NET any -> 62.76.229.144 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b6188a5f9c7f03e30dc42a1d23744cd767f2766989b2341b62ffd5f1203fd95c"; reference:url,publicmosaic.com/indicators; sid:9104236; rev:2;)
alert tls $HOME_NET any -> 62.76.229.144 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6f52515b2cdd17e5e691457467c970249fd46fea0738b0a87290961737f7f9eb"; reference:url,publicmosaic.com/indicators; sid:9101932; rev:2;)
alert tls $HOME_NET any -> 64.7.198.138 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8494443f40f77c2d3100a072d2f75ca8c5bc00d0fcec66790f4254c52e8c7477"; reference:url,publicmosaic.com/indicators; sid:9104253; rev:2;)
alert tls $HOME_NET any -> 64.23.139.223 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"441d38020bfefcba7d86348e01d943203ed36b07ca70b8ce17bc90c58312abe1"; reference:url,publicmosaic.com/indicators; sid:9100378; rev:2;)
alert tls $HOME_NET any -> 64.23.184.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2a2dd98a32976d364e644fa97b0c81d99d7c394e66530fd5abf4abd812411ef6"; reference:url,publicmosaic.com/indicators; sid:9100374; rev:2;)
alert tls $HOME_NET any -> 64.23.192.235 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a7ed9201558859d7859001f841cb55a08c23dfd10aa896bfff3eace2841c3571"; reference:url,publicmosaic.com/indicators; sid:9100713; rev:2;)
alert tls $HOME_NET any -> 64.23.192.235 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7ff9aab4bf0032576495fefdef8a08aa5a31386d3508713ee7bfc212cd9e15f8"; reference:url,publicmosaic.com/indicators; sid:9100376; rev:2;)
alert tls $HOME_NET any -> 64.23.254.205 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c19c15a70711482722723913180d67e3e984aba6bdbf6a4063ba468bde68f8ee"; reference:url,publicmosaic.com/indicators; sid:9104219; rev:2;)
alert tls $HOME_NET any -> 64.23.254.205 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c19c15a70711482722723913180d67e3e984aba6bdbf6a4063ba468bde68f8ee"; reference:url,publicmosaic.com/indicators; sid:9103699; rev:2;)
alert tls $HOME_NET any -> 64.23.254.205 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5851efc83ae587d18f8b30ee706e558c8b483ee6061ad5f792d18552d679332c"; reference:url,publicmosaic.com/indicators; sid:9103698; rev:2;)
alert tls $HOME_NET any -> 64.176.41.241 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"44856a76d6076bbec85dcdff8e770142c90063e773eda8f28af7e1cd15220889"; reference:url,publicmosaic.com/indicators; sid:9100714; rev:2;)
alert tls $HOME_NET any -> 64.176.41.241 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c4ae080324ba02158cba6ad48d3af6d63e6330c42dadbc509618d4da5160b4af"; reference:url,publicmosaic.com/indicators; sid:9100795; rev:2;)
alert tls $HOME_NET any -> 64.176.41.241 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6dbef7de82a9b3f1b278c3a0fc74d89172bf735d1744534665302d80af1db8b5"; reference:url,publicmosaic.com/indicators; sid:9105013; rev:2;)
alert tls $HOME_NET any -> 64.176.41.241 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0c1503894c66f6a2e1c909bef122d3b2d5310cb70d45b365126dec04e18980b5"; reference:url,publicmosaic.com/indicators; sid:9100377; rev:2;)
alert tls $HOME_NET any -> 64.227.87.165 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b2ebd94264585e370dfa54bc24ec1a19803f55fb34d87a5f7d7901728abc7c18"; reference:url,publicmosaic.com/indicators; sid:9100373; rev:2;)
alert tls $HOME_NET any -> 64.235.35.39 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1c25174752ff8134cca154b045ee41afd5ab09df11d540465e6e2f05f368ebfb"; reference:url,publicmosaic.com/indicators; sid:9100794; rev:2;)
alert tls $HOME_NET any -> 64.235.35.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cd30a1ae7c4805dffe62b55a20e13291e8e9572e5ae402fcee0f937fe2f75e01"; reference:url,publicmosaic.com/indicators; sid:9100375; rev:2;)
alert tls $HOME_NET any -> 65.20.69.106 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c6b7093c6d350fcec236e86a479edcc3819a5fab5883189975baa307b634df59"; reference:url,publicmosaic.com/indicators; sid:9101933; rev:2;)
alert tls $HOME_NET any -> 66.154.103.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"81419462a35f5c159ff138df91f47da70edf13828ccdc847951b6c1d35c4f7f0"; reference:url,publicmosaic.com/indicators; sid:9100372; rev:2;)
alert tls $HOME_NET any -> 66.179.136.167 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3aa0be522f57fc3e50b1ce221bd9f6f2c96b4dc3ae07337476c3ebf404fade2f"; reference:url,publicmosaic.com/indicators; sid:9100371; rev:2;)
alert tls $HOME_NET any -> 66.187.5.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"07e02c3355f7085464bb490147c9360ecdca850e97e22cd780ce90ee4b255182"; reference:url,publicmosaic.com/indicators; sid:9101535; rev:2;)
alert tls $HOME_NET any -> 67.205.159.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88291427729e68ca28aa65b250a058ca92326417fd08182d977855cd25de37ba"; reference:url,publicmosaic.com/indicators; sid:9101644; rev:2;)
alert tls $HOME_NET any -> 68.178.202.150 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9101643; rev:2;)
alert tls $HOME_NET any -> 68.178.205.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9100370; rev:2;)
alert tls $HOME_NET any -> 68.183.144.101 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"708fab8c575a06b53ca845d227b7df8de41a82d1774841d023be391c245b82bd"; reference:url,publicmosaic.com/indicators; sid:9103697; rev:2;)
alert tls $HOME_NET any -> 74.0.42.242 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"07feb6ba0dcae5859b007a4f96bfc756544f6ed01ad0046defc77e5548bc8898"; reference:url,publicmosaic.com/indicators; sid:9101298; rev:2;)
alert tls $HOME_NET any -> 77.42.75.230 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"28ac7c465c115bf51b02a774e04e3896a09991fb0eae73116e6af760e30c6256"; reference:url,publicmosaic.com/indicators; sid:9101934; rev:2;)
alert tls $HOME_NET any -> 77.42.75.230 8444 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e477deebafd29dcfadb1f3c43902f8290476a9ceb255c71e2d61cb10fcb0f702"; reference:url,publicmosaic.com/indicators; sid:9104171; rev:2;)
alert tls $HOME_NET any -> 77.42.75.230 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"368ddd548ac9e3ec5ccc94bf68be58aa9a710bdf4c28294e638a184817f321c1"; reference:url,publicmosaic.com/indicators; sid:9104170; rev:2;)
alert tls $HOME_NET any -> 77.42.75.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2d1d524bf4ee585cd5aa7666a7bcd227800b31d0099fe84b513c8e24ba776cde"; reference:url,publicmosaic.com/indicators; sid:9101297; rev:2;)
alert tls $HOME_NET any -> 78.17.212.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8eaca1e0eba3b55d47e159ff220fdef83b3214315e68576f0734b81ef274b056"; reference:url,publicmosaic.com/indicators; sid:9100831; rev:2;)
alert tls $HOME_NET any -> 78.17.212.192 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"50c3179305e7c1ed2565838e0bad8a13e505e68b728f824e21313dfc638e82a6"; reference:url,publicmosaic.com/indicators; sid:9101935; rev:2;)
alert tls $HOME_NET any -> 79.137.77.63 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"985fb8bdf4ca11e99e94d491bcd909f6aaec0ea53d4535b54ad15a5c40dce3aa"; reference:url,publicmosaic.com/indicators; sid:9105342; rev:2;)
alert tls $HOME_NET any -> 79.137.77.63 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2df141e49ad1c4f2da70b3d93d57b20157ee3bed59803fa70343e0891c3f0170"; reference:url,publicmosaic.com/indicators; sid:9104999; rev:2;)
alert tls $HOME_NET any -> 80.75.218.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f5f94694734d0493627d788569044738bb343ede37789ccaed79f36f64b51ce6"; reference:url,publicmosaic.com/indicators; sid:9103696; rev:2;)
alert tls $HOME_NET any -> 80.94.93.47 9823 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c4758e6a2cdd8143bf774e611dbdc9027dddf32c66cbc1c3aee12a90cdaa562e"; reference:url,publicmosaic.com/indicators; sid:9101936; rev:2;)
alert tls $HOME_NET any -> 81.17.100.251 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a61212066303d57ae0a2c1af8d085b64bfee9aebf7cc9ba7cc3f33529ff2d075"; reference:url,publicmosaic.com/indicators; sid:9106619; rev:2;)
alert tls $HOME_NET any -> 81.71.51.134 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270f2bb98c1505557c4a2993f8be06a6543ec90ad07d7172acbdb8055aec9e41"; reference:url,publicmosaic.com/indicators; sid:9101296; rev:2;)
alert tls $HOME_NET any -> 82.29.53.100 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"19f31b53147e0f25472dd99769a148e91be2e3d43c7fcb944582ddd71aaca96c"; reference:url,publicmosaic.com/indicators; sid:9100369; rev:2;)
alert tls $HOME_NET any -> 82.67.123.12 6443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"20fac55260845b73608b81007612eaadf4a87287aef4666d2412291329088f35"; reference:url,publicmosaic.com/indicators; sid:9100884; rev:2;)
alert tls $HOME_NET any -> 82.165.79.60 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0ba516c56602cae85871dce3792cf6a71a064baf2359169ccdfa4f35033ec64"; reference:url,publicmosaic.com/indicators; sid:9100368; rev:2;)
alert tls $HOME_NET any -> 82.165.218.73 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"448110064a4c28954e0efc3cb196fd583855c94c039604e11dac2ce7697f709e"; reference:url,publicmosaic.com/indicators; sid:9104222; rev:2;)
alert tls $HOME_NET any -> 82.165.218.73 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d58c2b5d6ebed038ea8c15adba6c243c4900f886e518d2c21015e70034c605c5"; reference:url,publicmosaic.com/indicators; sid:9101496; rev:2;)
alert tls $HOME_NET any -> 84.247.191.49 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"794c80002bd3ed61a7dfd8122335e2a3306c4b56a01b612b4fdff7cbe904a266"; reference:url,publicmosaic.com/indicators; sid:9100367; rev:2;)
alert tls $HOME_NET any -> 85.137.58.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"715b2ac4b0c5a9d3d3c80665646305bf3ab2da90b41ab8281ad2c3f7d57c444d"; reference:url,publicmosaic.com/indicators; sid:9105127; rev:2;)
alert tls $HOME_NET any -> 85.137.63.86 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cce46420b05dbd0772c65689fec4ae7da99c68b08000455fecb611c51efedb61"; reference:url,publicmosaic.com/indicators; sid:9100811; rev:2;)
alert tls $HOME_NET any -> 85.215.44.146 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e2ef078404f28cf55dbab78439d4d450a9025c03f0472118ee3735b295614d19"; reference:url,publicmosaic.com/indicators; sid:9100366; rev:2;)
alert tls $HOME_NET any -> 85.239.144.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ac6aa716391a0aa16ccae02e1cf24e0fcf0e53bcf2bb4807d0a6dac1963a0995"; reference:url,publicmosaic.com/indicators; sid:9101747; rev:2;)
alert tls $HOME_NET any -> 87.120.92.91 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"68434b7aec1fd39b41a3c0ee0355ed9e43e6407056f7779d441ffba14171b626"; reference:url,publicmosaic.com/indicators; sid:9101937; rev:2;)
alert tls $HOME_NET any -> 89.34.90.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3fa5091feab695f17358fc151c5094a9ceb201537831119a3054d392c9b14a50"; reference:url,publicmosaic.com/indicators; sid:9101659; rev:2;)
alert tls $HOME_NET any -> 89.106.78.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"665f6839dfb435f06250f8543221a6b599fab8dfb52ec7edb2abf68eaf3d8439"; reference:url,publicmosaic.com/indicators; sid:9100365; rev:2;)
alert tls $HOME_NET any -> 89.106.83.136 36366 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8f18faa476ce7c4ef894710527a4f4478cc6fda37b6a06a27e38533a9322a0ab"; reference:url,publicmosaic.com/indicators; sid:9101660; rev:2;)
alert tls $HOME_NET any -> 89.117.2.145 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"566d402375b6f5a20524859fd7af603546b8db796175bd19878ae5e1e5f31ab7"; reference:url,publicmosaic.com/indicators; sid:9103695; rev:2;)
alert tls $HOME_NET any -> 89.127.233.186 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d680e0fc34d8a127656cb22624f437234e9601e761181f30c94e945e9b97bde8"; reference:url,publicmosaic.com/indicators; sid:9100855; rev:2;)
alert tls $HOME_NET any -> 89.223.95.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100828; rev:2;)
alert tls $HOME_NET any -> 89.223.95.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100827; rev:2;)
alert tls $HOME_NET any -> 89.223.95.176 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100829; rev:2;)
alert tls $HOME_NET any -> 89.223.95.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100826; rev:2;)
alert tls $HOME_NET any -> 89.223.95.179 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"531509aabf19a606216aec65de21ee88fc4c5dcd3df71da2dfd3b3b8b14178e1"; reference:url,publicmosaic.com/indicators; sid:9100825; rev:2;)
alert tls $HOME_NET any -> 91.92.47.160 37773 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e014838d5ff91ed9da810c4483436212a9c8db2e1c2a6cde5e9e6797c24ca574"; reference:url,publicmosaic.com/indicators; sid:9105125; rev:2;)
alert tls $HOME_NET any -> 91.199.154.103 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8981285f37fb0cf81a4ab9301a93acace4e43574f0b2542bce0f6a283545a98a"; reference:url,publicmosaic.com/indicators; sid:9101710; rev:2;)
alert tls $HOME_NET any -> 91.202.233.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"62ce02d31a21e32203b360c017b105a80e74a698a9c55de143548ffebd3b1f4e"; reference:url,publicmosaic.com/indicators; sid:9100364; rev:2;)
alert tls $HOME_NET any -> 91.208.162.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7740045caa4a2a86ca6a407052dff75717d2a896c7151bab20dbafcfc474fd34"; reference:url,publicmosaic.com/indicators; sid:9100735; rev:2;)
alert tls $HOME_NET any -> 91.242.163.201 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"70297e01fd305a9d1247124d41ebfc9099449c29c9bed0a207e599d08682d314"; reference:url,publicmosaic.com/indicators; sid:9106001; rev:2;)
alert tls $HOME_NET any -> 92.5.166.15 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ed6efc1b1901f05da36ba140ae8d82c8bebd2780bcebc8cfe4c64df3fec02720"; reference:url,publicmosaic.com/indicators; sid:9104192; rev:2;)
alert tls $HOME_NET any -> 92.5.166.15 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"72858ef4706c240bacdcdbef3e10ab2cb7f35535d953eb05c74b1d0ff42025f7"; reference:url,publicmosaic.com/indicators; sid:9103988; rev:2;)
alert tls $HOME_NET any -> 92.63.104.14 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e6754111d19f1a7fb1f32db8f4a7e91d145da8e2621a657ca274f074ca872e7f"; reference:url,publicmosaic.com/indicators; sid:9101938; rev:2;)
alert tls $HOME_NET any -> 92.119.164.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5bd24792ae5d0bbceb166da3ec6fe87613290678d11eb2d4a16be1e3f6a9d6e2"; reference:url,publicmosaic.com/indicators; sid:9100363; rev:2;)
alert tls $HOME_NET any -> 92.242.164.31 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3a6318f64860cb8c1878e23fb8bf9b31a8631ca7f8a83ee41cefaadc545b9148"; reference:url,publicmosaic.com/indicators; sid:9101939; rev:2;)
alert tls $HOME_NET any -> 92.242.164.31 4433 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05df1766bb7036f534a61207db6629cda335f09e2b0ec0a89f6423c9f1a1e747"; reference:url,publicmosaic.com/indicators; sid:9106450; rev:2;)
alert tls $HOME_NET any -> 92.242.164.31 5555 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cc9c98e0182135c6fe013a5ff39c32bbc31c966e8fbf6c96fc71a070e3c525ce"; reference:url,publicmosaic.com/indicators; sid:9106449; rev:2;)
alert tls $HOME_NET any -> 94.125.101.85 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d17cc653329b5518b96d650b272e595c4fe4ee287b463b7f343fe1d4e4cd69dc"; reference:url,publicmosaic.com/indicators; sid:9106198; rev:2;)
alert tls $HOME_NET any -> 94.125.101.85 3389 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"842d85c9d6bce7a3fd20945c8d6da8cbc08eadcdf454183a94d2fcce45198831"; reference:url,publicmosaic.com/indicators; sid:9106000; rev:2;)
alert tls $HOME_NET any -> 94.125.101.85 7011 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"842d85c9d6bce7a3fd20945c8d6da8cbc08eadcdf454183a94d2fcce45198831"; reference:url,publicmosaic.com/indicators; sid:9106747; rev:2;)
alert tls $HOME_NET any -> 95.38.161.209 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"816529a175c2ec56219e4ce23c39be0b6c78577df4a451ec6dbaf01e624fd872"; reference:url,publicmosaic.com/indicators; sid:9100733; rev:2;)
alert tls $HOME_NET any -> 95.38.176.143 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2e415e825fd13fb521061490d58fff0e478b43f41f807755cd4cec247587cb0f"; reference:url,publicmosaic.com/indicators; sid:9103694; rev:2;)
alert tls $HOME_NET any -> 95.142.37.234 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"afeaace117088af4710e78a8a1cc0da8c373fb173da86c41d35c26d1995815cd"; reference:url,publicmosaic.com/indicators; sid:9104187; rev:2;)
alert tls $HOME_NET any -> 95.142.37.234 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c053713a26655918eaa63aa729e37335f47f74ae8415ab533b67a642eb6c7dde"; reference:url,publicmosaic.com/indicators; sid:9101940; rev:2;)
alert tls $HOME_NET any -> 95.142.37.234 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"afeaace117088af4710e78a8a1cc0da8c373fb173da86c41d35c26d1995815cd"; reference:url,publicmosaic.com/indicators; sid:9104186; rev:2;)
alert tls $HOME_NET any -> 95.142.37.234 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"849f152aa15a986374638bebe7a73091af74d0d1faebd87b533f21bbaf5c8733"; reference:url,publicmosaic.com/indicators; sid:9104185; rev:2;)
alert tls $HOME_NET any -> 95.179.149.93 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4b47a3f4688ed56c779a9322416c587c01d68ff09d566e8ad934e429356c7671"; reference:url,publicmosaic.com/indicators; sid:9101941; rev:2;)
alert tls $HOME_NET any -> 100.53.240.26 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"301e153d4af4744823e6475eaf79065b17044b8a8ca93a56a24b662582141c56"; reference:url,publicmosaic.com/indicators; sid:9104252; rev:2;)
alert tls $HOME_NET any -> 101.42.96.140 8889 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b5d7a7d4e570aab0baa278c4a576c7b79760b7987a4073d5641580be3e3a8275"; reference:url,publicmosaic.com/indicators; sid:9101942; rev:2;)
alert tls $HOME_NET any -> 101.42.96.140 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4fcebc1d5407c5c32e3d5b5670e2748ee12db311e6d1d207340e96d04876fcfb"; reference:url,publicmosaic.com/indicators; sid:9100362; rev:2;)
alert tls $HOME_NET any -> 101.126.90.250 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4e59a6b573526fc1c14dd863d6d76ed96cc17ac0273ca3d097a66aa43e7b9c27"; reference:url,publicmosaic.com/indicators; sid:9101716; rev:2;)
alert tls $HOME_NET any -> 101.126.90.250 11337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e67b894597dd726ed7bfbb8bec4075a5596e9f85d1b3c0a131ff5e4ab464f836"; reference:url,publicmosaic.com/indicators; sid:9103839; rev:2;)
alert tls $HOME_NET any -> 101.132.66.50 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9b4276f70fd0d951695d02846fe86c3686d7239ba90a985b205cd517ff218e7d"; reference:url,publicmosaic.com/indicators; sid:9104213; rev:2;)
alert tls $HOME_NET any -> 101.132.66.50 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"58934a755591a8abaa425f7ada1cb02307466b81fa40f3d89c7ff3721ddb1f75"; reference:url,publicmosaic.com/indicators; sid:9104214; rev:2;)
alert tls $HOME_NET any -> 103.67.184.198 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab2db5f6f56109c697b2e588196c71801e9948a5c873c4c0057f0db2465cc00f"; reference:url,publicmosaic.com/indicators; sid:9101295; rev:2;)
alert tls $HOME_NET any -> 103.70.77.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"34737b09206387ac5e0688619dc24f3aa3f1fcb214a2dbab83be1e3e5d358d70"; reference:url,publicmosaic.com/indicators; sid:9100361; rev:2;)
alert tls $HOME_NET any -> 103.121.92.150 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4a7a5683884dcba19d6634c1e0ef0e13ed66e614b623d0301d18fe8fe9760bab"; reference:url,publicmosaic.com/indicators; sid:9104211; rev:2;)
alert tls $HOME_NET any -> 103.121.92.150 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"161b6d5cb63b3fe34dd2678725fdabdc514b9e6b0423bd543aca44d4ca400599"; reference:url,publicmosaic.com/indicators; sid:9100360; rev:2;)
alert tls $HOME_NET any -> 103.121.92.249 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd4ada9c372c9dcc46b6501a109f1fd4181d236408c2ab07a3b11321b1f0f67f"; reference:url,publicmosaic.com/indicators; sid:9101713; rev:2;)
alert tls $HOME_NET any -> 103.121.92.249 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0aa2129b4e44d2a8f3d4eafa9cb5f87822e11840acebc22e589688cadbc39ca0"; reference:url,publicmosaic.com/indicators; sid:9100123; rev:2;)
alert tls $HOME_NET any -> 103.121.95.90 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270975a12075bdc98d4509af067855203e4b2b5f5627963e96c63b2ac080765e"; reference:url,publicmosaic.com/indicators; sid:9100359; rev:2;)
alert tls $HOME_NET any -> 103.185.249.13 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"270975a12075bdc98d4509af067855203e4b2b5f5627963e96c63b2ac080765e"; reference:url,publicmosaic.com/indicators; sid:9100358; rev:2;)
alert tls $HOME_NET any -> 103.242.12.143 80 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0c94f1104f673f3d049bc6e2a507e601a063234a7c1c6ff7fc3ec4bb9660c5b2"; reference:url,publicmosaic.com/indicators; sid:9100761; rev:2;)
alert tls $HOME_NET any -> 103.250.172.230 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"713316dfa832c897699c79806bb1526e4b9448cf40a41c3416883bd0a148d211"; reference:url,publicmosaic.com/indicators; sid:9106210; rev:2;)
alert tls $HOME_NET any -> 103.250.172.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a1b317b4efea8f1c9ff26a4b4fdcf172b3bf8f7bb7aad44624cfeb36bad47f0d"; reference:url,publicmosaic.com/indicators; sid:9101744; rev:2;)
alert tls $HOME_NET any -> 103.253.42.34 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cec7a02f5bc9ae3fa169c8076488db4bbb85a8da5567d42783722b0271220449"; reference:url,publicmosaic.com/indicators; sid:9100435; rev:2;)
alert tls $HOME_NET any -> 103.253.43.20 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8443d73664b5dba863272d2988632350ddb0545762122c903bd0efec9f61fe3f"; reference:url,publicmosaic.com/indicators; sid:9100120; rev:2;)
alert tls $HOME_NET any -> 104.129.54.121 9443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a9c2a49e139aa442464b3aa7e609e3eb8664f80c153873d33796919e4566b94c"; reference:url,publicmosaic.com/indicators; sid:9103693; rev:2;)
alert tls $HOME_NET any -> 104.131.164.51 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd27296d7a32e193ea6e51b4468b87cc4423df3ba6b53810836e0d7b4fbe3092"; reference:url,publicmosaic.com/indicators; sid:9104251; rev:2;)
alert tls $HOME_NET any -> 104.223.75.156 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e64f951c953a142339805bcf335e289d077b710dfdb3a67d2d1446158e9c9035"; reference:url,publicmosaic.com/indicators; sid:9103987; rev:2;)
alert tls $HOME_NET any -> 104.236.230.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"959a3c71adb986115ca08a6adc133db678ee675a5e218a2738639cc09f8b10a4"; reference:url,publicmosaic.com/indicators; sid:9100357; rev:2;)
alert tls $HOME_NET any -> 104.248.163.130 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05c7761738dcf640eb5f53ff41bf852190db3a6d4d336de5a2b25828289cb6bd"; reference:url,publicmosaic.com/indicators; sid:9100356; rev:2;)
alert tls $HOME_NET any -> 104.248.229.157 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"687c96413eac5cba6950bd966a7545739530e8613b98b110fc9bce2e2df0ed20"; reference:url,publicmosaic.com/indicators; sid:9101943; rev:2;)
alert tls $HOME_NET any -> 104.253.79.117 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f4de8da4e6bfa2e45f0440244bbe21554f7a432906a26714fa028f746225b77c"; reference:url,publicmosaic.com/indicators; sid:9104177; rev:2;)
alert tls $HOME_NET any -> 104.253.79.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"efea7df105d0b2dd56f673840016c74f94c481b478c86bc9e9fc341329e54935"; reference:url,publicmosaic.com/indicators; sid:9103692; rev:2;)
alert tls $HOME_NET any -> 106.54.62.203 80 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9963b928dc1147cf7ee066e1e98ec9b7365158c06f44a8e326b79ab7c9227ce3"; reference:url,publicmosaic.com/indicators; sid:9100760; rev:2;)
alert tls $HOME_NET any -> 106.54.62.203 65530 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7d35afdd1f1346397e041507fab20d5bd96d6d6e203711507778f0f40e78f0ad"; reference:url,publicmosaic.com/indicators; sid:9100115; rev:2;)
alert tls $HOME_NET any -> 107.23.60.48 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ea7f45313aa7ca5ef231cf78a1451e9dcf3ef0717795169f4c94b6b6b7e5b27"; reference:url,publicmosaic.com/indicators; sid:9101944; rev:2;)
alert tls $HOME_NET any -> 107.172.72.178 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c539ac70e565e63efc64a0bf56bc3bd3cc2a22655f5c9ce40a1c464afb77b848"; reference:url,publicmosaic.com/indicators; sid:9100355; rev:2;)
alert tls $HOME_NET any -> 108.143.227.46 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e79db728d3ea047d1290338423dcdd3b68d318c2db4e9fcd6469244685068648"; reference:url,publicmosaic.com/indicators; sid:9100354; rev:2;)
alert tls $HOME_NET any -> 109.199.126.209 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"43f616b4d5fb5d72e9d784c97d11238a645fa802371020534c8d982b5efc4764"; reference:url,publicmosaic.com/indicators; sid:9101945; rev:2;)
alert tls $HOME_NET any -> 109.233.21.109 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e5959ce922c87f17a35fb7965a28320e4ea4755eeca2bf5ffc8942db418a32c"; reference:url,publicmosaic.com/indicators; sid:9101627; rev:2;)
alert tls $HOME_NET any -> 109.236.50.145 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8073d5c37be2a686880500518a2292e04ad1a0657274edf107b376982caf3871"; reference:url,publicmosaic.com/indicators; sid:9105830; rev:2;)
alert tls $HOME_NET any -> 114.55.151.60 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"21122a428605b3696f6804e609ed6f6f7e1e697eab07b1406b25ba1760e34dc1"; reference:url,publicmosaic.com/indicators; sid:9101947; rev:2;)
alert tls $HOME_NET any -> 114.55.151.60 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"52c2ba814256aa080bb25cfbe8503180525290635fea7cfdfc177ad9c9c28d41"; reference:url,publicmosaic.com/indicators; sid:9101946; rev:2;)
alert tls $HOME_NET any -> 115.29.241.139 5001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6ac2bf08fe2a4eff6243c21b10941a62e95a2e64eb0d166bca2ff1bb58bad9d3"; reference:url,publicmosaic.com/indicators; sid:9104148; rev:2;)
alert tls $HOME_NET any -> 115.190.227.197 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ed31a9ab9209f1a2a07ac20ab6a34a708b0dbfa4b5318b9053fd387404c7f3c8"; reference:url,publicmosaic.com/indicators; sid:9103957; rev:2;)
alert tls $HOME_NET any -> 116.118.95.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1ddf68843b80a251d3f3f51b5f9d2628103d98e4fc1c20794a866fbb9e148e00"; reference:url,publicmosaic.com/indicators; sid:9100353; rev:2;)
alert tls $HOME_NET any -> 116.198.204.146 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f8d60c6d9a16c40758bd0a7561457888507b59289bacb6b9b2193e9a1121f219"; reference:url,publicmosaic.com/indicators; sid:9103980; rev:2;)
alert tls $HOME_NET any -> 116.198.204.146 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"57e391ac2e8319c7d42f6f082aa9b651bf703927735a6a7db542bb6f1507f2e0"; reference:url,publicmosaic.com/indicators; sid:9100352; rev:2;)
alert tls $HOME_NET any -> 116.202.158.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"263bee79fa3817fe36ea49211138120eff0c2e35612005ed2675755c0f2bef91"; reference:url,publicmosaic.com/indicators; sid:9100806; rev:2;)
alert tls $HOME_NET any -> 117.148.177.48 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"db84adbd265f981295abdcf3dd9f11ea39da33f411cac499a4cea8fc0b125e3e"; reference:url,publicmosaic.com/indicators; sid:9101534; rev:2;)
alert tls $HOME_NET any -> 118.107.9.178 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9101742; rev:2;)
alert tls $HOME_NET any -> 118.107.9.213 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9104117; rev:2;)
alert tls $HOME_NET any -> 118.107.9.217 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9103838; rev:2;)
alert tls $HOME_NET any -> 118.107.9.233 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2c6a2dad17543b145e8dae3cf9128c5112467520776b36aa02cedbcd33e46c4f"; reference:url,publicmosaic.com/indicators; sid:9104116; rev:2;)
alert tls $HOME_NET any -> 118.195.163.227 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d55457fe50519b02116dde7cd761ba5f327b5f05a374920c4b857115f3233682"; reference:url,publicmosaic.com/indicators; sid:9106800; rev:2;)
alert tls $HOME_NET any -> 118.195.163.227 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"85c5ffffa0ad280a809caefe6e294eec6bb29b5fb27b964c9b722d898ab75b9b"; reference:url,publicmosaic.com/indicators; sid:9106817; rev:2;)
alert tls $HOME_NET any -> 120.26.48.207 61001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4c593d4e9bc1fdb1393ccdee22ee94f015784474b30321f2eb094238eafd1794"; reference:url,publicmosaic.com/indicators; sid:9105202; rev:2;)
alert tls $HOME_NET any -> 120.26.146.96 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2f7500875b1ebb80740b25b6c31e81675adf2a3e5f3d75fa62f411d833925050"; reference:url,publicmosaic.com/indicators; sid:9103691; rev:2;)
alert tls $HOME_NET any -> 121.4.43.2 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"dd005ea709c75822e093fb3cd798dbf035e8f7638a7d80c942e092ae11188392"; reference:url,publicmosaic.com/indicators; sid:9104962; rev:2;)
alert tls $HOME_NET any -> 121.4.43.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b522da120daf13983e4f8456a0f9a715515fa3bf6de50c42aa8033670045a5a"; reference:url,publicmosaic.com/indicators; sid:9104115; rev:2;)
alert tls $HOME_NET any -> 121.43.182.95 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0b9efafd002c0fff391f00d46b32466d6ef1c2669897848c1b0f001aefc7148"; reference:url,publicmosaic.com/indicators; sid:9100351; rev:2;)
alert tls $HOME_NET any -> 121.78.127.232 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8154bbb0ea8142a42aee788388228632834e9ac40aa62ef2b58b476ae7140e98"; reference:url,publicmosaic.com/indicators; sid:9104220; rev:2;)
alert tls $HOME_NET any -> 121.78.127.232 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2624e5834f8a53b3cf0e882e2ad6158d39a53be29e01cdbf616f3956c9ec05a6"; reference:url,publicmosaic.com/indicators; sid:9100350; rev:2;)
alert tls $HOME_NET any -> 122.114.10.199 8001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83f1a41068402a3c14dfe51b8745527249c3888a7b6937dc339b028d00818e77"; reference:url,publicmosaic.com/indicators; sid:9103690; rev:2;)
alert tls $HOME_NET any -> 123.57.230.199 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"462548e21b77db9f8a5845571f5ba13bb0570711a2622b0d446bb18e1571555f"; reference:url,publicmosaic.com/indicators; sid:9100822; rev:2;)
alert tls $HOME_NET any -> 124.158.5.149 9001 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c38a723dca9439f47011d2fd7ba0d0ccebb2b6bf2a5442ab1a0d845a526dec7d"; reference:url,publicmosaic.com/indicators; sid:9100729; rev:2;)
alert tls $HOME_NET any -> 124.158.5.149 9003 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"efc61ac332c99b5cf0792aefc8360255bcaa95e72b56bb94b4f58620e49c9569"; reference:url,publicmosaic.com/indicators; sid:9103646; rev:2;)
alert tls $HOME_NET any -> 124.158.5.149 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b13c2a89e37f4308aa1e5640ceefad991d248e5ead3d8363a154c0aea45af0a0"; reference:url,publicmosaic.com/indicators; sid:9100349; rev:2;)
alert tls $HOME_NET any -> 124.220.16.198 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b342a79baba091455e044db5575196c6df606e5f5b6cea1e27e8c7934e418ed9"; reference:url,publicmosaic.com/indicators; sid:9103956; rev:2;)
alert tls $HOME_NET any -> 124.222.144.44 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bb27311392242ae1cce1f0f39a4547379db63a6843a74ecbbc8ca9f0d3b373cb"; reference:url,publicmosaic.com/indicators; sid:9100347; rev:2;)
alert tls $HOME_NET any -> 124.243.150.112 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae1e98493dbb0672732ff1792cdfcab0164d7647fa8fc4b929675ee3e5a84a"; reference:url,publicmosaic.com/indicators; sid:9103689; rev:2;)
alert tls $HOME_NET any -> 128.65.199.135 8899 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c37e6bb0ead82b6eadc2c3d39353de1d5413b21e89462011196b9d6163295d35"; reference:url,publicmosaic.com/indicators; sid:9103688; rev:2;)
alert tls $HOME_NET any -> 129.213.164.210 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d34d45be274b9e23d11cf10a18c0dd1414efe7e5a45c852e6cbdbe9636fd7487"; reference:url,publicmosaic.com/indicators; sid:9101948; rev:2;)
alert tls $HOME_NET any -> 129.226.150.240 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1076df45f07c971a53dc0df31c5bfc31597eacc9b0ffeb2f5afecd301055a6d"; reference:url,publicmosaic.com/indicators; sid:9105997; rev:2;)
alert tls $HOME_NET any -> 129.226.195.254 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"164902129fafd0fafc03a2a8a19d01c592a5651c06bde7e9e3295f22d065f2b2"; reference:url,publicmosaic.com/indicators; sid:9100348; rev:2;)
alert tls $HOME_NET any -> 130.94.41.151 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"23ac47cd113eb29198e5b596e43a83be89a3f1d83faed3213c1aee26bacd788c"; reference:url,publicmosaic.com/indicators; sid:9103687; rev:2;)
alert tls $HOME_NET any -> 130.94.92.169 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2f0ae0c48fd2fe50a237c5c09cb18b85cbc5e7f29b05a8230218da64fbe87432"; reference:url,publicmosaic.com/indicators; sid:9100346; rev:2;)
alert tls $HOME_NET any -> 130.94.105.104 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2048037dcd4cc4209cc0ab818fd94ffed56c7373e64db4c02b6c1bd2a3b7ff44"; reference:url,publicmosaic.com/indicators; sid:9106209; rev:2;)
alert tls $HOME_NET any -> 134.122.123.227 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8172ee65e50dff56a12967746d53d3d8019c8f9875ebb81a6ee679dddb005178"; reference:url,publicmosaic.com/indicators; sid:9100433; rev:2;)
alert tls $HOME_NET any -> 134.122.153.121 8080 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"253eb7154b2ebd6c89c962d87845d0b04b1f19cc93524f345e0bd3ae864cf459"; reference:url,publicmosaic.com/indicators; sid:9103977; rev:2;)
alert tls $HOME_NET any -> 134.209.93.110 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"68cb3831a6e7791d52dd7b97267e1dab914617a0750c19999c4ee5a60bbd97f0"; reference:url,publicmosaic.com/indicators; sid:9100345; rev:2;)
alert tls $HOME_NET any -> 134.209.213.17 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2e02d72d464625280fa7097e5f559f7049293e87a0d74581709aa1400d7b0ed9"; reference:url,publicmosaic.com/indicators; sid:9101973; rev:2;)
alert tls $HOME_NET any -> 135.106.164.201 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b33c5639d5179931eda063e9cc47a097baa9c8fe047cdc4befd0072c5a04b5a8"; reference:url,publicmosaic.com/indicators; sid:9101972; rev:2;)
alert tls $HOME_NET any -> 136.64.24.207 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ec8ef7d476c5acb1f17a289b9209eacebeaf50ff1cf1786dda8e408ef9d62858"; reference:url,publicmosaic.com/indicators; sid:9104998; rev:2;)
alert tls $HOME_NET any -> 136.110.51.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83566176e4fd65f15421e7a19b8b291fa8becc139462b9a256b2ff9bcfebaeb3"; reference:url,publicmosaic.com/indicators; sid:9100344; rev:2;)
alert tls $HOME_NET any -> 137.116.136.69 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c4f341eb6e84ea11ed4cf4d0b3e53cd0f0d42c6d974b25f379469ea58f7c3e52"; reference:url,publicmosaic.com/indicators; sid:9104059; rev:2;)
alert tls $HOME_NET any -> 137.116.136.69 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d17ccc63c26d18c6060361ea08c9c56bfe279d99430689a32788e88c728a91cc"; reference:url,publicmosaic.com/indicators; sid:9100343; rev:2;)
alert tls $HOME_NET any -> 137.184.57.89 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83722f9fc34f1afed670032fa8f94b4ba6a40fcda579fb0422e619805fb29f62"; reference:url,publicmosaic.com/indicators; sid:9100342; rev:2;)
alert tls $HOME_NET any -> 137.220.219.243 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8d23f121b37fa17914194ad762725819f8d5a8150e91d2517dc9ae635fe15e6d"; reference:url,publicmosaic.com/indicators; sid:9101741; rev:2;)
alert tls $HOME_NET any -> 138.16.160.172 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"98c25b4cc8cc799488f734b2001bca3ff6a654e0ee08afe362b1694ddca16c0a"; reference:url,publicmosaic.com/indicators; sid:9100432; rev:2;)
alert tls $HOME_NET any -> 138.68.170.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f740834113e0687f7c55c27e06dc1af8941f8938b6af5d6350b96e0d041eb438"; reference:url,publicmosaic.com/indicators; sid:9100341; rev:2;)
alert tls $HOME_NET any -> 138.68.180.119 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"04e50f0d2cf7b67487c0b0c34abb09a61858541f62618b4732a5be197f2487ed"; reference:url,publicmosaic.com/indicators; sid:9100340; rev:2;)
alert tls $HOME_NET any -> 138.91.32.183 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d5a01d6b9667e1303c71a89caa5aa8d5f66665d81be7ee4ac7c8c37da734a4bb"; reference:url,publicmosaic.com/indicators; sid:9102248; rev:2;)
alert tls $HOME_NET any -> 138.197.224.55 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83722f9fc34f1afed670032fa8f94b4ba6a40fcda579fb0422e619805fb29f62"; reference:url,publicmosaic.com/indicators; sid:9100339; rev:2;)
alert tls $HOME_NET any -> 138.226.222.47 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9e07f646bb448a1e384e5615aa07603f43c4524396ce47cb87e8011924bbfac0"; reference:url,publicmosaic.com/indicators; sid:9101971; rev:2;)
alert tls $HOME_NET any -> 139.162.1.199 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"15568d9a085fde7267f743484a6443b35734685f9517626991d491c44d3fe4fb"; reference:url,publicmosaic.com/indicators; sid:9101718; rev:2;)
alert tls $HOME_NET any -> 139.162.1.199 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e78b6adfeaaa4a0611e16ec19f7b10a81217c9d4aeac888e46426a255a1ec9d"; reference:url,publicmosaic.com/indicators; sid:9101626; rev:2;)
alert tls $HOME_NET any -> 142.91.109.153 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9179c56fa7fff5e8c4341058529dba9a76d3e8413ea49fba626a3bef38431a55"; reference:url,publicmosaic.com/indicators; sid:9100853; rev:2;)
alert tls $HOME_NET any -> 142.91.109.153 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9a179763011cde1aa17354aea4bfdb2874a865ac2c6adfc720fc7a6181f60ef9"; reference:url,publicmosaic.com/indicators; sid:9100852; rev:2;)
alert tls $HOME_NET any -> 142.93.58.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"554a671de6fc0fddc30143b8f836fb8b5e6b8c1a3e1cb56f5b2eb5fe6d8c9461"; reference:url,publicmosaic.com/indicators; sid:9106618; rev:2;)
alert tls $HOME_NET any -> 142.93.162.87 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9f51e1b13460a633ad8b6ce6a414c18c190698e7c92778ce8b59aad507e6907e"; reference:url,publicmosaic.com/indicators; sid:9105336; rev:2;)
alert tls $HOME_NET any -> 142.93.162.87 8080 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4d37cae74b91bd1e85eb9f37d88e7353f3f275c7f9bbd1af3dfc0382dfdf1352"; reference:url,publicmosaic.com/indicators; sid:9106010; rev:2;)
alert tls $HOME_NET any -> 143.198.1.58 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7af552d55bf091ac26fc98a9d85a6fec926dfb3167de39bab6adbf5185e84b44"; reference:url,publicmosaic.com/indicators; sid:9100338; rev:2;)
alert tls $HOME_NET any -> 143.198.125.30 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"56f154fb79978f1a87234ff20ca1c0654df618ec8d7477f86e4543696ae594a6"; reference:url,publicmosaic.com/indicators; sid:9100337; rev:2;)
alert tls $HOME_NET any -> 143.198.136.6 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3556ffe9a9c93cfd534ac894e5f77f561fe11145227b8c1d86b901792f2f2a32"; reference:url,publicmosaic.com/indicators; sid:9100336; rev:2;)
alert tls $HOME_NET any -> 143.198.149.226 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d899c7d0b407118534bb61a7aeff368df39db5a13fa04ad6a7d0f2f027d0eaea"; reference:url,publicmosaic.com/indicators; sid:9104972; rev:2;)
alert tls $HOME_NET any -> 143.198.149.226 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0144a26ae0c9d9e5d9d7783b1a9de70001e1d14df0cd19fcc229c2f9fb03b73"; reference:url,publicmosaic.com/indicators; sid:9100335; rev:2;)
alert tls $HOME_NET any -> 143.246.217.59 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"676272ca8356aa542b40c4f8cc752f55c97f8fc3f5fb2c6f11142b9bdf1c43fa"; reference:url,publicmosaic.com/indicators; sid:9100108; rev:2;)
alert tls $HOME_NET any -> 144.126.210.142 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8c00100c9d554771d2298441edd1fe630b408baa4942f6257e4f571f24dadd91"; reference:url,publicmosaic.com/indicators; sid:9104238; rev:2;)
alert tls $HOME_NET any -> 144.126.210.142 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"77c3958861bb2afb24bfcd6acd136b27e78e3a360049f8a8fd3da74dc2eb19d1"; reference:url,publicmosaic.com/indicators; sid:9103686; rev:2;)
alert tls $HOME_NET any -> 144.202.31.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7fdd940674d788d115d09ba58cae47011b651b8ec252da1e910db67f8f72513b"; reference:url,publicmosaic.com/indicators; sid:9106746; rev:2;)
alert tls $HOME_NET any -> 144.202.41.78 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1154766444df8cc471804678124ec5d8cd634092a2c97f2b15f612a5f129fa0c"; reference:url,publicmosaic.com/indicators; sid:9100107; rev:2;)
alert tls $HOME_NET any -> 145.239.73.139 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"42d5f695e7a95050d5bb6b355004d8dcde8ebeab71ea5f9da9dbec187310d9af"; reference:url,publicmosaic.com/indicators; sid:9106009; rev:2;)
alert tls $HOME_NET any -> 145.239.73.139 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"64d6bc6ab51aa22033e7f63b213ea40f9de38f9c20f2b82a006302f0b6872ecc"; reference:url,publicmosaic.com/indicators; sid:9106208; rev:2;)
alert tls $HOME_NET any -> 146.56.214.130 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5017255d7a8409408aabc049045b5bb210dfe5f79c8fc31e3c2fd93097c7b056"; reference:url,publicmosaic.com/indicators; sid:9100334; rev:2;)
alert tls $HOME_NET any -> 146.59.63.41 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9fd4199d09d74413b0e91d093b7d85ebadbab79bb1dc56acfc36bef2e206ddce"; reference:url,publicmosaic.com/indicators; sid:9106745; rev:2;)
alert tls $HOME_NET any -> 146.59.63.41 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"45032b5ac8d78fa8c5166e8febc00c1079c05fc5d86a908e1a1bc6f088ffcfe4"; reference:url,publicmosaic.com/indicators; sid:9104250; rev:2;)
alert tls $HOME_NET any -> 146.70.79.45 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"81df444929628e5c96c6ffbe18f59de7015747cb20663857b4bd4658cea4baad"; reference:url,publicmosaic.com/indicators; sid:9104237; rev:2;)
alert tls $HOME_NET any -> 146.70.79.45 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ab022eddb39549607c97151d39205ebacd4a8816c71bcf23c48774f131172d8e"; reference:url,publicmosaic.com/indicators; sid:9104997; rev:2;)
alert tls $HOME_NET any -> 146.70.158.198 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"55b294b42b6b91d6de116c6f60f2cf4e77f9571aea2b4e5bc5c827a9f0b9d3d8"; reference:url,publicmosaic.com/indicators; sid:9100797; rev:2;)
alert tls $HOME_NET any -> 146.70.158.198 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"08dc3a208a3fb829921c63326b680a08e85e2db1b9487d99b9329e8a6fd43aad"; reference:url,publicmosaic.com/indicators; sid:9100333; rev:2;)
alert tls $HOME_NET any -> 146.70.232.107 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad9af8c056757580586667da76ade7b3bb043d41aaf4361b55d1252ff4b4d487"; reference:url,publicmosaic.com/indicators; sid:9106744; rev:2;)
alert tls $HOME_NET any -> 146.70.232.107 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"be7cbdaf0712389f831ab0e715f9c42b158016a8704ff8ebd57636e5f9b6bb6f"; reference:url,publicmosaic.com/indicators; sid:9106617; rev:2;)
alert tls $HOME_NET any -> 146.190.17.255 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f21de01635c0ae0ea4c435c81b6cfad066cec05b8ea2e7ab14fb4bfe3e0b4600"; reference:url,publicmosaic.com/indicators; sid:9103685; rev:2;)
alert tls $HOME_NET any -> 147.15.78.253 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ce387ac3077c1d89376817969cdcb899f35a2787da0671ebfd7eecc126a675ee"; reference:url,publicmosaic.com/indicators; sid:9100332; rev:2;)
alert tls $HOME_NET any -> 147.50.242.137 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f35f94b8e245171363cd7274f7a0041c45b234cb19058cb89462720681f2dc27"; reference:url,publicmosaic.com/indicators; sid:9105996; rev:2;)
alert tls $HOME_NET any -> 147.78.65.252 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5e7ba0fd36fcca4bb201659c1c35fbd47dbf9770c02f4c9f3e49bad00790f0b1"; reference:url,publicmosaic.com/indicators; sid:9100851; rev:2;)
alert tls $HOME_NET any -> 147.185.197.5 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4c0bbbdb0ccd68f5ff168f037a11c0e4412e985caf6165dc128c976794db9c2c"; reference:url,publicmosaic.com/indicators; sid:9100821; rev:2;)
alert tls $HOME_NET any -> 149.56.12.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88855d525e815fe5b7016229f69e862c643b4f95999398193902da16e668ad8a"; reference:url,publicmosaic.com/indicators; sid:9100331; rev:2;)
alert tls $HOME_NET any -> 149.62.46.25 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6b4605de093824e987511cbb2e55c16c890a929edba93b7a62a487539c806ee9"; reference:url,publicmosaic.com/indicators; sid:9100330; rev:2;)
alert tls $HOME_NET any -> 149.88.73.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f00953ba65cf63d1f0133f48c3693f525737baff5ca9c06d0261a837bbe4bf94"; reference:url,publicmosaic.com/indicators; sid:9100106; rev:2;)
alert tls $HOME_NET any -> 149.104.90.17 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3fe06d4c66c67bc09050e370aa14f352e8be7198ea6a0417fbe341e5b2b8ee67"; reference:url,publicmosaic.com/indicators; sid:9101717; rev:2;)
alert tls $HOME_NET any -> 149.104.90.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e546368a0963f931bc1d71de435567e5bb348564040bb23b2e3cc8ff46e600ea"; reference:url,publicmosaic.com/indicators; sid:9101639; rev:2;)
alert tls $HOME_NET any -> 150.5.168.18 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f35257e760d5b2829e09136d8c9071dc0ec942624915b9575b44090394644738"; reference:url,publicmosaic.com/indicators; sid:9100805; rev:2;)
alert tls $HOME_NET any -> 150.40.117.90 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a8db86f2b3aa7dc3b431afa18d287c68e7ef6634ed0fc485ad429f618b3ccd65"; reference:url,publicmosaic.com/indicators; sid:9103986; rev:2;)
alert tls $HOME_NET any -> 150.107.31.116 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9de5393fab1875d2c1320e3cfb88ca8ec1fc3710d7b6b12bf8376bd99401853e"; reference:url,publicmosaic.com/indicators; sid:9100712; rev:2;)
alert tls $HOME_NET any -> 150.107.31.116 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1fe3a805a104986f6e92d7c272623d97c33226a30fab16b3fe9fb7d052c37aa3"; reference:url,publicmosaic.com/indicators; sid:9103684; rev:2;)
alert tls $HOME_NET any -> 150.107.31.116 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1fe3a805a104986f6e92d7c272623d97c33226a30fab16b3fe9fb7d052c37aa3"; reference:url,publicmosaic.com/indicators; sid:9100329; rev:2;)
alert tls $HOME_NET any -> 150.109.154.3 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cc4e38e8bfc5340907b5019d6bb4c9984aead14b173a5c14bd2c6a7ca417fbf2"; reference:url,publicmosaic.com/indicators; sid:9105995; rev:2;)
alert tls $HOME_NET any -> 150.158.122.8 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7d46f1eddf42dd1d50746f8bfce23096a606e91f6c5511d93a7f078450fb4804"; reference:url,publicmosaic.com/indicators; sid:9100328; rev:2;)
alert tls $HOME_NET any -> 151.243.126.22 2053 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9087854b9e6c9a0500ae6b03a1276be38c81eaa1100775e99ea0697546afb7fd"; reference:url,publicmosaic.com/indicators; sid:9106207; rev:2;)
alert tls $HOME_NET any -> 151.243.126.22 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5cb281d0aaf307f244f86f31dd532892d791551b49bc0b268a51c798f16a13f4"; reference:url,publicmosaic.com/indicators; sid:9105994; rev:2;)
alert tls $HOME_NET any -> 152.42.172.222 9898 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"22107e9685937784e7ce13087d9962971ef074d3be6df88512db3d980775fefc"; reference:url,publicmosaic.com/indicators; sid:9105201; rev:2;)
alert tls $HOME_NET any -> 152.42.207.101 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"230cfd878c159eb7f95599831724e4b1ec923928f8726949f3cb26edb00f62dc"; reference:url,publicmosaic.com/indicators; sid:9103683; rev:2;)
alert tls $HOME_NET any -> 152.42.214.0 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d9bc1819ddfa812f0728c67d2ce9ca6f89ce0dbb095133f0233cf9ca20f33d7a"; reference:url,publicmosaic.com/indicators; sid:9101970; rev:2;)
alert tls $HOME_NET any -> 152.42.214.0 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c08168d8d128202ea9f29334d416020fdc409969898928e3d1ea249fd7ef2935"; reference:url,publicmosaic.com/indicators; sid:9101969; rev:2;)
alert tls $HOME_NET any -> 152.53.187.147 58173 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9c1c7a65846d671c6c8cd2a2322aa615c6903e9943ca93fef7047b96c031d6b0"; reference:url,publicmosaic.com/indicators; sid:9100838; rev:2;)
alert tls $HOME_NET any -> 153.75.82.143 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ec02bd371b0c9807ab7eb75aa9c0afb4859195f863fa0c50e6d00f99cbbe5ec8"; reference:url,publicmosaic.com/indicators; sid:9100759; rev:2;)
alert tls $HOME_NET any -> 153.75.82.143 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"faadc7aeb1fd4430bbc773c5e73b4cd121ac7036378f7e7f584af474cd44a579"; reference:url,publicmosaic.com/indicators; sid:9100105; rev:2;)
alert tls $HOME_NET any -> 153.76.114.134 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4ab458ed8db2dcba3aa40d641d04e683c12eb128c8cc366fcf3a82db783a947f"; reference:url,publicmosaic.com/indicators; sid:9104935; rev:2;)
alert tls $HOME_NET any -> 154.31.217.203 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"280faa73d71c02bf9ab2da512ae79e777b4db403ac4520d9cb095055eb68613b"; reference:url,publicmosaic.com/indicators; sid:9101533; rev:2;)
alert tls $HOME_NET any -> 154.38.116.247 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7356035b55588a213812adc3638ff1e968eb244a41222b39e91ea92bfd8def40"; reference:url,publicmosaic.com/indicators; sid:9103334; rev:2;)
alert tls $HOME_NET any -> 154.93.103.232 60317 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3c9b05bd6d3274c56e4a099205f8d8eae7904a4512c6970c316564d457d68091"; reference:url,publicmosaic.com/indicators; sid:9103682; rev:2;)
alert tls $HOME_NET any -> 155.138.148.143 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e433cd6dbfabb90429aa7b1e0e05fbb36df9f0fc866357afeed3831223c53c2"; reference:url,publicmosaic.com/indicators; sid:9101968; rev:2;)
alert tls $HOME_NET any -> 156.251.16.152 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2e2fe9cc2e749b692b6046a452abc679b58a11588563eab6ba8b8021da812fd8"; reference:url,publicmosaic.com/indicators; sid:9100327; rev:2;)
alert tls $HOME_NET any -> 157.245.14.84 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"dd75e5acd8fff52d99dbf0f6dc00c1b8b13e115d74b9f992d29f2957690ecff5"; reference:url,publicmosaic.com/indicators; sid:9100711; rev:2;)
alert tls $HOME_NET any -> 157.245.14.84 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b149e5caeff1f2bad26b8d2d0d4731960257012baf3cf5729789a9839873f82b"; reference:url,publicmosaic.com/indicators; sid:9100326; rev:2;)
alert tls $HOME_NET any -> 157.254.167.106 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b680d4a8227e02a16157eab857bf9b74c7f96c1bfeaef4fbc1b06a697f784e63"; reference:url,publicmosaic.com/indicators; sid:9105993; rev:2;)
alert tls $HOME_NET any -> 158.94.208.154 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f0702a4c53a1e1afc15b177a917a692056adc9ec6d3293bf4e9811d0f6f60782"; reference:url,publicmosaic.com/indicators; sid:9101967; rev:2;)
alert tls $HOME_NET any -> 158.160.98.75 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88e1995602c53866ec9f04ca1f88ce56f40c5125c7b538c721ae3deb1676cc3d"; reference:url,publicmosaic.com/indicators; sid:9100102; rev:2;)
alert tls $HOME_NET any -> 158.178.225.215 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3b9c8919745e2a8a05bf9ebad0403af56ced94df2543b81f3f91ee4b8e21cde3"; reference:url,publicmosaic.com/indicators; sid:9100325; rev:2;)
alert tls $HOME_NET any -> 159.65.22.41 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d0a7c9e45820a9cfe5609f7082ab913407efa3688adcc5632f8494872350c6"; reference:url,publicmosaic.com/indicators; sid:9100324; rev:2;)
alert tls $HOME_NET any -> 159.65.113.187 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8c5d4b00f726f466a88b579de0d2a1864a1353384a9eb3994ec32f6d790467b4"; reference:url,publicmosaic.com/indicators; sid:9100708; rev:2;)
alert tls $HOME_NET any -> 159.65.113.187 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8c9d1e1eecbf750293e664021853be2d47b242c2aa29c16902f015cdf50bae04"; reference:url,publicmosaic.com/indicators; sid:9100315; rev:2;)
alert tls $HOME_NET any -> 159.65.209.64 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d0a7c9e45820a9cfe5609f7082ab913407efa3688adcc5632f8494872350c6"; reference:url,publicmosaic.com/indicators; sid:9100323; rev:2;)
alert tls $HOME_NET any -> 159.65.231.200 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7ed20a39bb74dad5b91e28d1487034b11c3c1e7bcb4c6b4db203cdefb8ef9d5e"; reference:url,publicmosaic.com/indicators; sid:9100318; rev:2;)
alert tls $HOME_NET any -> 159.89.232.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"88ee80f9db6301bce9b389d52b7e3f5939e0d228e0b599bfaa8111156ac42988"; reference:url,publicmosaic.com/indicators; sid:9100321; rev:2;)
alert tls $HOME_NET any -> 159.112.188.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05fb6ba51b3133257f67fc7fc32878ff7a2e62b75c79d06cea9bc3b4520ebb69"; reference:url,publicmosaic.com/indicators; sid:9100101; rev:2;)
alert tls $HOME_NET any -> 159.194.232.217 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8fd52ccc7a06932d3a4e7cf68b63f6ca0374dbe26109b98bf50a0c8ae0674adb"; reference:url,publicmosaic.com/indicators; sid:9105991; rev:2;)
alert tls $HOME_NET any -> 159.203.148.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7af552d55bf091ac26fc98a9d85a6fec926dfb3167de39bab6adbf5185e84b44"; reference:url,publicmosaic.com/indicators; sid:9100314; rev:2;)
alert tls $HOME_NET any -> 159.223.138.182 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"628b696f74547c632b4e941895095ea5afa396e4b7842e58ef5c1e1677567f84"; reference:url,publicmosaic.com/indicators; sid:9101966; rev:2;)
alert tls $HOME_NET any -> 161.97.127.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"da899a762848291c722a9140a836fa7edcc76c994c109a4d5401ed56acd87717"; reference:url,publicmosaic.com/indicators; sid:9105200; rev:2;)
alert tls $HOME_NET any -> 161.153.76.241 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b4c2ccb24b570008a86ef66e94379ba9aceceefbe808469e487f3d400003a832"; reference:url,publicmosaic.com/indicators; sid:9100322; rev:2;)
alert tls $HOME_NET any -> 162.243.172.161 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d280fa2c3f22958372e76968f20e438d83fbea4db701c21aad5851cc59b75321"; reference:url,publicmosaic.com/indicators; sid:9103837; rev:2;)
alert tls $HOME_NET any -> 162.254.35.170 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9215bdf922d2c01684c0d7df3b7b086af4a68fec4f1f32bf22196b9a1c6f5c5f"; reference:url,publicmosaic.com/indicators; sid:9100709; rev:2;)
alert tls $HOME_NET any -> 162.254.35.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fdecbf1aa47fd95591608f307cc228b9877b2545cadf193146d1448f8d30ec26"; reference:url,publicmosaic.com/indicators; sid:9100320; rev:2;)
alert tls $HOME_NET any -> 163.53.219.87 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bf2c31206c782571afbb9d38b570008ecc7094cb7fe6c99cc375ca12a1dba27c"; reference:url,publicmosaic.com/indicators; sid:9100319; rev:2;)
alert tls $HOME_NET any -> 163.53.219.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d4e95bc78d8af82df3bd4102af9af949ef492f61080d23c750049033ad293a41"; reference:url,publicmosaic.com/indicators; sid:9100316; rev:2;)
alert tls $HOME_NET any -> 163.172.45.158 6789 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e466667229c8176133ae3d76be2371ccffc43be38867967a1cf204399adcfff1"; reference:url,publicmosaic.com/indicators; sid:9100099; rev:2;)
alert tls $HOME_NET any -> 163.172.71.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3e1405181c13388d8540bc5b4c50217b790e949ba824cf9fe9068da83e222e8b"; reference:url,publicmosaic.com/indicators; sid:9100317; rev:2;)
alert tls $HOME_NET any -> 164.90.149.44 80 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251ea40b3ccfba6921f6b2ad5881deb50aa5133aa54d343d6852ac921e5682eb"; reference:url,publicmosaic.com/indicators; sid:9103681; rev:2;)
alert tls $HOME_NET any -> 164.90.149.44 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9facf4cb0f60860863e8767e83331f830e6182a983f79b756f0b857af1f140f1"; reference:url,publicmosaic.com/indicators; sid:9100707; rev:2;)
alert tls $HOME_NET any -> 164.90.149.44 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251ea40b3ccfba6921f6b2ad5881deb50aa5133aa54d343d6852ac921e5682eb"; reference:url,publicmosaic.com/indicators; sid:9100311; rev:2;)
alert tls $HOME_NET any -> 164.90.197.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"334c532e082eea2b88804afe246c512bee1b873ad9277edc1c91841eef7542ef"; reference:url,publicmosaic.com/indicators; sid:9100313; rev:2;)
alert tls $HOME_NET any -> 164.90.201.1 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1bbf707f6664764bb8ade66097afd9ab433ae5b976e7b9e5bc930c2a98b0072a"; reference:url,publicmosaic.com/indicators; sid:9101965; rev:2;)
alert tls $HOME_NET any -> 164.92.136.111 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5697d7421a2d7e49a72e6dd0355f4c0fbeeebff460a55894ed83835dbabbfb21"; reference:url,publicmosaic.com/indicators; sid:9100310; rev:2;)
alert tls $HOME_NET any -> 165.154.6.188 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"fe2e7943d833783a0746fd657b8f49400c06e3c5bae8c8c0699931232db8b0cb"; reference:url,publicmosaic.com/indicators; sid:9104249; rev:2;)
alert tls $HOME_NET any -> 165.227.32.223 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"282ea53dccb2016cf0c0bd7675942bbf4b20e9601852b7ecab929d1a9b67cfd8"; reference:url,publicmosaic.com/indicators; sid:9101581; rev:2;)
alert tls $HOME_NET any -> 165.227.231.125 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5764cc69595087f291389848b478a4c77066a82b2a5c37fc1fcecf51b7887ab6"; reference:url,publicmosaic.com/indicators; sid:9100706; rev:2;)
alert tls $HOME_NET any -> 165.227.231.125 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"010271d003e3abf7f3c813b7d4311a4df7c663740232cf71caf394f107e90833"; reference:url,publicmosaic.com/indicators; sid:9100312; rev:2;)
alert tls $HOME_NET any -> 166.0.106.156 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"67f93e9b2a3cec0bd8d01f983247fddfca5328d08f837d48810524f6944c793e"; reference:url,publicmosaic.com/indicators; sid:9106616; rev:2;)
alert tls $HOME_NET any -> 166.88.95.90 5000 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e72a4ede8400ffc530affc4b18fea4c0a17857a0bab2852c64ecb6f5884919d8"; reference:url,publicmosaic.com/indicators; sid:9101331; rev:2;)
alert tls $HOME_NET any -> 167.71.13.103 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5eeb3cffe5dfe3b4f601162436a1d66c32ac59d62527907a99bc89c39a53259f"; reference:url,publicmosaic.com/indicators; sid:9100705; rev:2;)
alert tls $HOME_NET any -> 167.71.13.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ee26ee73c6e27103874a3f00efd31a7721277c728c1503513464c92342764ba0"; reference:url,publicmosaic.com/indicators; sid:9100309; rev:2;)
alert tls $HOME_NET any -> 167.71.16.171 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"be98bef1ee649c4129f4f63379fba9354c6e0064b0234ef45e9fcfc5c2563fb2"; reference:url,publicmosaic.com/indicators; sid:9100308; rev:2;)
alert tls $HOME_NET any -> 167.71.184.214 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ba914cf051841d520cdf52d5222ac58b6c6daa2ff375b3de1d8f416164017039"; reference:url,publicmosaic.com/indicators; sid:9100301; rev:2;)
alert tls $HOME_NET any -> 167.99.5.39 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ce845333d39c1187778b5873cc6c5bfd17ca206a1f0c1efd1a1fcc147796f6e8"; reference:url,publicmosaic.com/indicators; sid:9100704; rev:2;)
alert tls $HOME_NET any -> 167.99.5.39 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ce0b1b6802054a3916f782eb2f1529b8115e3181872349752f06b28231f4bd6"; reference:url,publicmosaic.com/indicators; sid:9100098; rev:2;)
alert tls $HOME_NET any -> 167.99.51.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f7adc0c1f00b0a6c3476fab1c46212e34ee9ac16a3989f0f1c276a0424a6a83f"; reference:url,publicmosaic.com/indicators; sid:9100307; rev:2;)
alert tls $HOME_NET any -> 167.172.239.135 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"13c4a32f5bcb144ef91c414769726110daa3c719ba71a6f6924c8c1354e5241b"; reference:url,publicmosaic.com/indicators; sid:9100306; rev:2;)
alert tls $HOME_NET any -> 168.144.101.98 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"83d07bed6173e8bb5a3f42d8a80ac9d3e92872e7eec47ec8993d1cd7cb5b874e"; reference:url,publicmosaic.com/indicators; sid:9100431; rev:2;)
alert tls $HOME_NET any -> 169.58.198.202 8050 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47cf5d7a9ae522651aa865b0648ac2377dcc7d3236e7465ef3781678c31e8690"; reference:url,publicmosaic.com/indicators; sid:9100837; rev:2;)
alert tls $HOME_NET any -> 169.58.252.86 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d693e8b6a117c5e01b99874bca0fdf1ed1c8961943b742fd47971ea4703d2ab6"; reference:url,publicmosaic.com/indicators; sid:9103680; rev:2;)
alert tls $HOME_NET any -> 170.64.162.117 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5287364e4dcafdca62d2fa4c2e6a3831c17d65502c0b30e29ab81c77f3baf5a0"; reference:url,publicmosaic.com/indicators; sid:9101307; rev:2;)
alert tls $HOME_NET any -> 170.64.177.194 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92be9d384496c0bfad762e89d81317a658d6af4aa1817d597d4bc1a0f9b85d16"; reference:url,publicmosaic.com/indicators; sid:9100303; rev:2;)
alert tls $HOME_NET any -> 170.64.254.183 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92be9d384496c0bfad762e89d81317a658d6af4aa1817d597d4bc1a0f9b85d16"; reference:url,publicmosaic.com/indicators; sid:9100302; rev:2;)
alert tls $HOME_NET any -> 172.86.94.94 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e66ce7aa87bac67255609238a3b21fa3cdac2eaba23f11e8f4015ffb13d292a"; reference:url,publicmosaic.com/indicators; sid:9100305; rev:2;)
alert tls $HOME_NET any -> 172.93.187.109 4433 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"cf7d21ff631aa30ede25eabbf0c3e04a542663dee5e8ae75dfb5342b2221f8c6"; reference:url,publicmosaic.com/indicators; sid:9100755; rev:2;)
alert tls $HOME_NET any -> 172.94.9.81 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0ceaf1d79134524bd911555a04aa6fe155b3959209c9c3bc34a92d5365d2b0dd"; reference:url,publicmosaic.com/indicators; sid:9100095; rev:2;)
alert tls $HOME_NET any -> 172.105.103.223 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"de13703fcc480093c5a58017ddedc2895a58241dc6802805db6815058eb48a9d"; reference:url,publicmosaic.com/indicators; sid:9100304; rev:2;)
alert tls $HOME_NET any -> 172.236.10.230 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"50ed3450fbccc4787602e262e51518417e0d0d26445e29ec0241be004d48f197"; reference:url,publicmosaic.com/indicators; sid:9100804; rev:2;)
alert tls $HOME_NET any -> 172.236.215.250 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"0f6cb6b6b931100f14e91cefbdd34bf7f04bd4c9dc417b35dab00a373647e3f9"; reference:url,publicmosaic.com/indicators; sid:9103679; rev:2;)
alert tls $HOME_NET any -> 172.245.111.207 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"7b5f02dce6d9a1301fa4f5daf7da76aa78de304125d7ecb7322680b8754dd707"; reference:url,publicmosaic.com/indicators; sid:9105199; rev:2;)
alert tls $HOME_NET any -> 172.245.195.202 8888 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3108086a3a2bfe17c51af752d289f537cbca2fd7868d89679e28b86e3878f996"; reference:url,publicmosaic.com/indicators; sid:9100754; rev:2;)
alert tls $HOME_NET any -> 172.245.195.202 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bd356fdb670fec502951829f382aa78bec927d1547f3515060cbbbf68911e868"; reference:url,publicmosaic.com/indicators; sid:9100097; rev:2;)
alert tls $HOME_NET any -> 173.214.172.252 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"363159a3e2ccc3be082aa5a2f987ef699688dd312e7a240bd4ae882e7faefb73"; reference:url,publicmosaic.com/indicators; sid:9100803; rev:2;)
alert tls $HOME_NET any -> 173.230.129.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e6c70f30f0489162b62632b5ecabd7a9f01ed3e9d2762925f2382202bc5cd8a"; reference:url,publicmosaic.com/indicators; sid:9103836; rev:2;)
alert tls $HOME_NET any -> 173.249.205.43 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"86ccc8dd3fb308f0c41fa5fe8af962a5f5a9f35d977e7a712ec944dce1cc2d86"; reference:url,publicmosaic.com/indicators; sid:9105990; rev:2;)
alert tls $HOME_NET any -> 176.122.166.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3faeece7945a69ccac539446c4549452477a014d9ae7cdc589cafbeae3eda4ca"; reference:url,publicmosaic.com/indicators; sid:9103640; rev:2;)
alert tls $HOME_NET any -> 177.124.72.24 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"acc9fed5ee946bb455dd0a54096a90ab62d91f3dfcecf9e261ee50d18551783a"; reference:url,publicmosaic.com/indicators; sid:9100300; rev:2;)
alert tls $HOME_NET any -> 177.130.81.72 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5405aba406df160cdabc20f97eb320511b201d09ce5ad94c9cdaa22c4db6c389"; reference:url,publicmosaic.com/indicators; sid:9103678; rev:2;)
alert tls $HOME_NET any -> 178.104.123.237 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d01413aebc25a90ad541ad4f942ab257996caaef5a2de5c9dee2d168e9630e4f"; reference:url,publicmosaic.com/indicators; sid:9101964; rev:2;)
alert tls $HOME_NET any -> 178.128.21.54 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"25f70c6d4330f59e04e07c1d2614e9d0e4ed4a8a778d2215f4019c0fe837228c"; reference:url,publicmosaic.com/indicators; sid:9101963; rev:2;)
alert tls $HOME_NET any -> 178.128.21.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b5eb6af96497bd333a02922a8b5afde55029aef5ead7edb672b14678c58452fc"; reference:url,publicmosaic.com/indicators; sid:9100299; rev:2;)
alert tls $HOME_NET any -> 178.128.63.20 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f4707cc1a8dbdd5ace10eb65cee3642540f1a27e7322b30f1749753bed4624da"; reference:url,publicmosaic.com/indicators; sid:9100298; rev:2;)
alert tls $HOME_NET any -> 178.128.140.47 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"334c532e082eea2b88804afe246c512bee1b873ad9277edc1c91841eef7542ef"; reference:url,publicmosaic.com/indicators; sid:9100746; rev:2;)
alert tls $HOME_NET any -> 178.128.222.137 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"36ca57038359b888ea99744016d157a526f6944b202a645c134ac152f5d3783b"; reference:url,publicmosaic.com/indicators; sid:9100430; rev:2;)
alert tls $HOME_NET any -> 178.128.244.152 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"87a2f2ded1bc4f84ffc5607423f1dac6cec01c77cac87f6cf72c8c1b44fd5258"; reference:url,publicmosaic.com/indicators; sid:9100296; rev:2;)
alert tls $HOME_NET any -> 179.199.198.208 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"683975f5cdf26c2484a4dfd3024b6aec0e0aee7408d7b2900fe407f04faecf82"; reference:url,publicmosaic.com/indicators; sid:9105989; rev:2;)
alert tls $HOME_NET any -> 180.94.20.228 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ff8d00618c59d08250d6940309fffb235bc7c41b3a9723cd2e6687450cc2c65a"; reference:url,publicmosaic.com/indicators; sid:9105988; rev:2;)
alert tls $HOME_NET any -> 182.255.44.231 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"324e3cd776ec2f2286929f663288a2b18000ef5e3822bc59738a6459366e9ae4"; reference:url,publicmosaic.com/indicators; sid:9100092; rev:2;)
alert tls $HOME_NET any -> 182.255.45.50 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4bd148c5c8b0e49686503b355e1083bc23d3184f70135ce9424c0c7fef10c6fb"; reference:url,publicmosaic.com/indicators; sid:9100703; rev:2;)
alert tls $HOME_NET any -> 182.255.45.50 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"86a11eda8a8b64d49871919f028f3c416a8c092e00cdee0610fbdcf3106483fd"; reference:url,publicmosaic.com/indicators; sid:9100297; rev:2;)
alert tls $HOME_NET any -> 182.255.91.104 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8c0600b76e7a6c5044790a8ac3df214963de4ada003cae498b00509c6d373741"; reference:url,publicmosaic.com/indicators; sid:9100164; rev:2;)
alert tls $HOME_NET any -> 182.255.91.104 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"32b7ac340f60b00977b90ce07dc08bf8d7488955eb3f6e81c8018fbd36b811d6"; reference:url,publicmosaic.com/indicators; sid:9100166; rev:2;)
alert tls $HOME_NET any -> 185.43.5.225 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"679e8be32306fca92a1148e3de87418b8e46d94fc50abe598c72630de5ff8024"; reference:url,publicmosaic.com/indicators; sid:9100087; rev:2;)
alert tls $HOME_NET any -> 185.76.22.124 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"add424ccba472dc1a92df738164dd0003a336d6a7bdf7628f43316278cb09dca"; reference:url,publicmosaic.com/indicators; sid:9101962; rev:2;)
alert tls $HOME_NET any -> 185.130.46.90 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"4f631ccf13c188ede86c3b50b6d27a5f54c870646be93091a97ada7ac6133ffd"; reference:url,publicmosaic.com/indicators; sid:9104248; rev:2;)
alert tls $HOME_NET any -> 185.141.60.111 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"85c61990b65fb7b31d6c5c5c17041ed103634fae3280263820432b38b94033a3"; reference:url,publicmosaic.com/indicators; sid:9100295; rev:2;)
alert tls $HOME_NET any -> 185.158.112.103 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"47d2723d9c2dbb332897a4e76a17b5fa1ff3472283077d1690c6cd4392fa055a"; reference:url,publicmosaic.com/indicators; sid:9100836; rev:2;)
alert tls $HOME_NET any -> 185.185.68.42 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5a0678eae2e4156adbc61ade32f96fcd421f383e9139739fdf9d8bb7c91c6c62"; reference:url,publicmosaic.com/indicators; sid:9100819; rev:2;)
alert tls $HOME_NET any -> 185.233.166.158 35333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"1d3c90b39ef2b75297a3cc3bcf927b2a5a343af6de88fcf847a12aff67dbfd89"; reference:url,publicmosaic.com/indicators; sid:9100835; rev:2;)
alert tls $HOME_NET any -> 185.242.235.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8e82badef755fb964e5e5d264a69f221a005f623bc3c5d19cbf9d5b88f5a6dd9"; reference:url,publicmosaic.com/indicators; sid:9101637; rev:2;)
alert tls $HOME_NET any -> 185.246.220.204 55448 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"bb3b42a0fe166f5e7bc5c095a491483d97905633999569d3b78ea63a46bcf734"; reference:url,publicmosaic.com/indicators; sid:9100090; rev:2;)
alert tls $HOME_NET any -> 185.251.91.177 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5a0678eae2e4156adbc61ade32f96fcd421f383e9139739fdf9d8bb7c91c6c62"; reference:url,publicmosaic.com/indicators; sid:9100817; rev:2;)
alert tls $HOME_NET any -> 187.145.56.252 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9101306; rev:2;)
alert tls $HOME_NET any -> 187.145.125.245 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9106615; rev:2;)
alert tls $HOME_NET any -> 188.42.217.40 64323 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8bb55f94dac6cc1dac6a653f523f1aac578059107397c446be01555376a69cf6"; reference:url,publicmosaic.com/indicators; sid:9100834; rev:2;)
alert tls $HOME_NET any -> 189.249.193.210 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a722f763b4c5631d1570ff33153dbedf0bea43a5c73ce297935d06949dcff54c"; reference:url,publicmosaic.com/indicators; sid:9100802; rev:2;)
alert tls $HOME_NET any -> 192.30.243.157 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"2ff4902228ca6c5c9961f1965e0991cad2f63be56e4607ce10a04032035ce31f"; reference:url,publicmosaic.com/indicators; sid:9101961; rev:2;)
alert tls $HOME_NET any -> 192.110.167.180 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9b87408aa05dd93bd344cf58b0f963965d9efbbad757c36fdfac36ccc635186d"; reference:url,publicmosaic.com/indicators; sid:9105986; rev:2;)
alert tls $HOME_NET any -> 192.110.167.181 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9b87408aa05dd93bd344cf58b0f963965d9efbbad757c36fdfac36ccc635186d"; reference:url,publicmosaic.com/indicators; sid:9100294; rev:2;)
alert tls $HOME_NET any -> 192.155.92.211 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ad783a4be2aeff11eee8e8ec00fdc5cc8bd183cde940e9b039e006783ac6ef6a"; reference:url,publicmosaic.com/indicators; sid:9106818; rev:2;)
alert tls $HOME_NET any -> 192.169.176.54 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6bae42203af045c18922b118c3edb5b1094a5bd391c0c8dda6fa199279b1b1fd"; reference:url,publicmosaic.com/indicators; sid:9100293; rev:2;)
alert tls $HOME_NET any -> 193.104.75.44 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f593c860c1be50bc05f0b610f57d68ff0791cb7935d22cb989a8c6c9e4d3b1b1"; reference:url,publicmosaic.com/indicators; sid:9100816; rev:2;)
alert tls $HOME_NET any -> 193.149.129.2 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d82315b2874f9b9c0cba73702e250c7da7b646178deb5739e14334e9a7eac2d8"; reference:url,publicmosaic.com/indicators; sid:9105985; rev:2;)
alert tls $HOME_NET any -> 194.26.192.69 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d8be3571c06dbf79aa21628862b83b9bb84984866f1b4c02a2fd435a19e66b4e"; reference:url,publicmosaic.com/indicators; sid:9103677; rev:2;)
alert tls $HOME_NET any -> 194.87.206.229 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8981285f37fb0cf81a4ab9301a93acace4e43574f0b2542bce0f6a283545a98a"; reference:url,publicmosaic.com/indicators; sid:9101960; rev:2;)
alert tls $HOME_NET any -> 195.200.28.173 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"aa6b615753567078e0b063c675b14dbe33af5d6e26c24bd222ec699f5353c866"; reference:url,publicmosaic.com/indicators; sid:9100724; rev:2;)
alert tls $HOME_NET any -> 196.188.116.63 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5c3aeb467550851e897d4483799582b1a4ba75eb7b57bbcd72b891994fa5242e"; reference:url,publicmosaic.com/indicators; sid:9100077; rev:2;)
alert tls $HOME_NET any -> 198.251.91.17 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"f971c123faa94a5cfebe71b6d3b8be455b802fbe7d6d90b0c5e8f5fe7f1092b0"; reference:url,publicmosaic.com/indicators; sid:9106743; rev:2;)
alert tls $HOME_NET any -> 199.245.176.16 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b442d6c3299157e0fe1411e7a4f6e42b7bcb4e48bd398f5b2caa3664171d7ae2"; reference:url,publicmosaic.com/indicators; sid:9100292; rev:2;)
alert tls $HOME_NET any -> 202.61.137.217 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"5c1b750bfc6caa351911ab89412e296346e10d5d3c43d73944c70285c502efc8"; reference:url,publicmosaic.com/indicators; sid:9101959; rev:2;)
alert tls $HOME_NET any -> 203.24.92.184 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"c7d5c175c5f0a7721c71a01a5f02fd4a3ab00bdbe15902619bf5970454e17116"; reference:url,publicmosaic.com/indicators; sid:9101752; rev:2;)
alert tls $HOME_NET any -> 203.88.118.192 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"369fed3706977c877ce080a2a32dfbdf60b41c181435744accdab3e114c4bfbd"; reference:url,publicmosaic.com/indicators; sid:9101958; rev:2;)
alert tls $HOME_NET any -> 203.88.118.192 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3570cd2f1ff54c63ee10849a65ffa1e8a339da12a7a8f622f5330a0986fe9dc4"; reference:url,publicmosaic.com/indicators; sid:9101949; rev:2;)
alert tls $HOME_NET any -> 203.159.90.24 59407 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"3f18b700ab8b538317aea3d00f7675110be23e9a32ae58e80824040289680159"; reference:url,publicmosaic.com/indicators; sid:9100833; rev:2;)
alert tls $HOME_NET any -> 203.159.90.207 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"92fb046b5d6357a0108ef8ff593341781a3002bb2f3fb07a86afef84221a9be2"; reference:url,publicmosaic.com/indicators; sid:9100753; rev:2;)
alert tls $HOME_NET any -> 203.159.90.207 59405 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"a50f19d4720ce861b968c92ae6a08bd4c372b60d0d6047d414d2c156a259cdcc"; reference:url,publicmosaic.com/indicators; sid:9100071; rev:2;)
alert tls $HOME_NET any -> 204.12.245.170 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"251019543e0b670e960dce9474ee1484a087b8d67104ff0e46c6d6d09a744c42"; reference:url,publicmosaic.com/indicators; sid:9100070; rev:2;)
alert tls $HOME_NET any -> 204.152.220.114 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"8eb2f358a6be5bc06e80774468287efbcd5cac74220b30fda5936614ba8f482f"; reference:url,publicmosaic.com/indicators; sid:9100291; rev:2;)
alert tls $HOME_NET any -> 204.168.238.208 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"6e8372edb03c6e59308b371b61c8b773af1296a601ea7ce7caa83d5114488db2"; reference:url,publicmosaic.com/indicators; sid:9103676; rev:2;)
alert tls $HOME_NET any -> 204.194.54.61 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9958f8992a757cd5e7cdc369e5232841d847bd2d4985afb344386a3a50fc9c4e"; reference:url,publicmosaic.com/indicators; sid:9100289; rev:2;)
alert tls $HOME_NET any -> 206.245.132.230 35333 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"05ebeb0d56e11c1c627f64731a7c11d1aa939139a86ad457ca9421c44c3145bf"; reference:url,publicmosaic.com/indicators; sid:9100069; rev:2;)
alert tls $HOME_NET any -> 207.57.135.209 4443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"9c4f713a3bb89a9e7cdd52e0d7a2f6d07a86eed6405abf8fab44be704a6da67e"; reference:url,publicmosaic.com/indicators; sid:9100793; rev:2;)
alert tls $HOME_NET any -> 207.57.135.209 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b7e354f08985ad0d4d993e8c45182e3d22167f4620bc5d5501f7cc6248ca7fc7"; reference:url,publicmosaic.com/indicators; sid:9100290; rev:2;)
alert tls $HOME_NET any -> 209.74.72.248 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e1fe37bbe73e6bc92e827c9e8639a108d6a731e0abff65390247ede9cf6e81b8"; reference:url,publicmosaic.com/indicators; sid:9103895; rev:2;)
alert tls $HOME_NET any -> 209.99.184.231 63523 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"16b1e4fc30b9072f4802522f1462de1c4d4e8b9e53fa3d47fd372560f50503cc"; reference:url,publicmosaic.com/indicators; sid:9106742; rev:2;)
alert tls $HOME_NET any -> 209.99.191.164 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"d99be3bb0591e71e7c2f217a42ef14aefba609f3aec602587862ba961d82574d"; reference:url,publicmosaic.com/indicators; sid:9100815; rev:2;)
alert tls $HOME_NET any -> 209.126.1.46 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"b8b71b98cba0fcea06f8b50e0644d9ad5dc000cc2951f8538308a316eb4f5032"; reference:url,publicmosaic.com/indicators; sid:9103985; rev:2;)
alert tls $HOME_NET any -> 212.60.151.85 8443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e9ccd040f09dea9e7ce69d3cf5bb1adf63e2fffeed22c7caaaf02bafccc0069f"; reference:url,publicmosaic.com/indicators; sid:9100288; rev:2;)
alert tls $HOME_NET any -> 212.192.15.13 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"49dcbaaab977c4e9ec7bb9597dc6fe46d589739fe622d8a79620902039201bd7"; reference:url,publicmosaic.com/indicators; sid:9100814; rev:2;)
alert tls $HOME_NET any -> 213.145.86.232 31866 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"ba9f1846cd3d85dcd05e717f7ed374247e5c6622987047b1e61bffdd85575d71"; reference:url,publicmosaic.com/indicators; sid:9100832; rev:2;)
alert tls $HOME_NET any -> 213.165.60.71 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"615bf35b3a8f82fd2ab542f075d60246762f380d0007aaa5b6e672ec6cd4b704"; reference:url,publicmosaic.com/indicators; sid:9101957; rev:2;)
alert tls $HOME_NET any -> 213.183.56.126 443 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"e072a7c912b9ff9f490cc2d212f89c61776a5e417b8c8d1ef85dae45f2513f29"; reference:url,publicmosaic.com/indicators; sid:9101956; rev:2;)
alert tls $HOME_NET any -> 213.218.160.174 31337 (msg:"HOLLOWPOINT C2 sliver"; tls.cert_fingerprint; content:"30c576c2c0b4c5f9ea88af96274f91781d8c122bcf91c829f7a1fe99406117c5"; reference:url,publicmosaic.com/indicators; sid:9105984; rev:2;)