# hollowpoint.rules — generated 2026-09-15 09:38 UTC — 84 rules — TLP:CLEAR
# source: https://publicmosaic.com/indicators — published for defensive use
# scope: ja4x 5de83f524929_5de83f524929_795797892f9c — https://publicmosaic.com/ja4x/5de83f524929_5de83f524929_795797892f9c
# rev:2 — alert tcp on address and port; alert tls with tls.cert_fingerprint only where the full
#   certificate SHA-256 is published. REPLACE any rev:1 file (every rule was alert tls) rather than
#   loading it beside this one: a same-sid different-text pair is a duplicate Suricata refuses.
# live set only — archived episodes omitted: 1
# Rules may lag a withdrawal by up to five minutes (edge cache); the hub page is authoritative.
alert tls $HOME_NET any -> 1.14.104.208 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"89e4016a53d764dbbad8d240c8508f3c5d57a74f862856d7a4ce3df56852f700"; reference:url,publicmosaic.com/indicators; sid:9100476; rev:2;)
alert tls $HOME_NET any -> 2.26.1.177 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c1c304fba349d7da9229440adf4add8b6d5f6dbb2565082983f92df39ce92f39"; reference:url,publicmosaic.com/indicators; sid:9100475; rev:2;)
alert tls $HOME_NET any -> 20.119.73.195 31337 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"788f28fb1e6954cf35f4ab1a76ae3910f232a91df3bded06b39370108b0f16d3"; reference:url,publicmosaic.com/indicators; sid:9101459; rev:2;)
alert tls $HOME_NET any -> 23.227.196.18 43655 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"304e36e88bf0c7bbab05a7dead83e03e5687e95b8411de90dc4068875e43cf2e"; reference:url,publicmosaic.com/indicators; sid:9102209; rev:2;)
alert tls $HOME_NET any -> 23.227.199.67 42215 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9102208; rev:2;)
alert tls $HOME_NET any -> 23.227.203.6 42235 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"304e36e88bf0c7bbab05a7dead83e03e5687e95b8411de90dc4068875e43cf2e"; reference:url,publicmosaic.com/indicators; sid:9102207; rev:2;)
alert tls $HOME_NET any -> 23.227.203.190 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103997; rev:2;)
alert tls $HOME_NET any -> 23.227.203.191 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3508977c434c34e2fa6cebfe4734c50df952c7545fd2b1fb2ca5fa360edd60f9"; reference:url,publicmosaic.com/indicators; sid:9102206; rev:2;)
alert tls $HOME_NET any -> 23.227.203.246 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"59695808b0322b0881ab19b2d21da3b15821c0536f74fd7934f2c78f54c5825f"; reference:url,publicmosaic.com/indicators; sid:9102205; rev:2;)
alert tls $HOME_NET any -> 31.56.228.50 8888 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2c92ce46a6fefcb5f96c46827280674d340ccdfecdf902eeda269de3c00d6460"; reference:url,publicmosaic.com/indicators; sid:9101512; rev:2;)
alert tls $HOME_NET any -> 31.77.161.250 2911 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"55434eb1583264b3e2eca876aff9b4ebfc7480afe2eb97ae8ad1a41bd7d6a0c6"; reference:url,publicmosaic.com/indicators; sid:9104105; rev:2;)
alert tls $HOME_NET any -> 31.77.161.250 5667 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9a303e64a735143ffc765c6cc9905892695f751678f4b2b15ba75ebd3f5490c7"; reference:url,publicmosaic.com/indicators; sid:9105944; rev:2;)
alert tls $HOME_NET any -> 37.72.168.163 42554 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9106162; rev:2;)
alert tls $HOME_NET any -> 37.72.168.189 42334 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9106740; rev:2;)
alert tls $HOME_NET any -> 38.60.203.203 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3920e7a1e3c0c271c425e519a0e40c35ba218c4ae885c9d2ccaf98450e8f467a"; reference:url,publicmosaic.com/indicators; sid:9101457; rev:2;)
alert tls $HOME_NET any -> 38.132.122.141 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103901; rev:2;)
alert tls $HOME_NET any -> 38.132.122.145 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9104245; rev:2;)
alert tls $HOME_NET any -> 38.132.122.161 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9102204; rev:2;)
alert tls $HOME_NET any -> 39.105.16.200 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"57a05de129b30a407780ff40fb5dbfd8a1917ee3c5ca1ef280e8cf6d24097b0a"; reference:url,publicmosaic.com/indicators; sid:9102203; rev:2;)
alert tls $HOME_NET any -> 43.140.219.182 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fc7fa97c86da9cb4a6badf161e913574a64d790b7690360861c1af7b6f27cba0"; reference:url,publicmosaic.com/indicators; sid:9100150; rev:2;)
alert tls $HOME_NET any -> 43.198.116.85 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b0dfc4b09a95836e7194750fb27759b00664af4685a43a07f444f07d6e98e0d1"; reference:url,publicmosaic.com/indicators; sid:9106205; rev:2;)
alert tls $HOME_NET any -> 45.38.20.38 8491 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"d8eeefec35af1c1c82454887698188be8df57f44d3759826887f49df0cfa7a95"; reference:url,publicmosaic.com/indicators; sid:9102200; rev:2;)
alert tls $HOME_NET any -> 45.76.191.22 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9a957a2556bc0352d1549b5658bf5a87c74fdbad5051552f6929a06f6dc55ed4"; reference:url,publicmosaic.com/indicators; sid:9101511; rev:2;)
alert tls $HOME_NET any -> 45.125.67.171 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"1e829af2f976153dabb5ab8bc35e5a936c575681b8cb7de4e01844530181cded"; reference:url,publicmosaic.com/indicators; sid:9100471; rev:2;)
alert tls $HOME_NET any -> 45.142.31.82 52125 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b510d26551508e8eec69f1b770dc54f2c8b67a61c525e905c5e92aafa7ffa2c0"; reference:url,publicmosaic.com/indicators; sid:9101590; rev:2;)
alert tls $HOME_NET any -> 45.157.117.186 27487 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"be82b5bf645be835fae4b290674f4404f5ad614e17369dc9485549929df14bc9"; reference:url,publicmosaic.com/indicators; sid:9102197; rev:2;)
alert tls $HOME_NET any -> 46.21.153.148 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103996; rev:2;)
alert tls $HOME_NET any -> 47.99.196.178 7001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"6957f69ea437d37651b486d77ada3bac79b105c0148a71c4b366b5868e310c9d"; reference:url,publicmosaic.com/indicators; sid:9101259; rev:2;)
alert tls $HOME_NET any -> 69.48.229.91 65500 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2c92ce46a6fefcb5f96c46827280674d340ccdfecdf902eeda269de3c00d6460"; reference:url,publicmosaic.com/indicators; sid:9106084; rev:2;)
alert tls $HOME_NET any -> 79.135.160.20 9999 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"fbfb20a7568570029a479b0e829d874019e7221322d4febb57ee6b7e5ed3ea08"; reference:url,publicmosaic.com/indicators; sid:9102193; rev:2;)
alert tls $HOME_NET any -> 82.115.16.4 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"546468c9b051f3824e02ae2c68faf8efa3c3f859d2c796d09b8308d9c758b055"; reference:url,publicmosaic.com/indicators; sid:9106204; rev:2;)
alert tls $HOME_NET any -> 85.209.90.132 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"286704b0728c8fa6bb02f4b622ab07b1b0b8ba3aba9854d3526da4bcf55803ca"; reference:url,publicmosaic.com/indicators; sid:9100469; rev:2;)
alert tls $HOME_NET any -> 89.110.91.35 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4df76b811ae27d1c5cfaedd717cef48d4ff9071167d913b7b415f487dc935a2f"; reference:url,publicmosaic.com/indicators; sid:9102191; rev:2;)
alert tls $HOME_NET any -> 91.202.233.214 44123 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"b26544aef6f662fa9ffe4c755ebf69aae459a65b676681b07b33234144c66196"; reference:url,publicmosaic.com/indicators; sid:9103605; rev:2;)
alert tls $HOME_NET any -> 91.215.85.212 45423 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9544f24363e1f629f8a295144aaa64a118a0ede72a939f84c994bf7322892124"; reference:url,publicmosaic.com/indicators; sid:9102190; rev:2;)
alert tls $HOME_NET any -> 94.26.248.76 50050 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3244265bd53b2e9ad250fa566e5cc356229d03eee3f7f30d416f463bdaebf5a5"; reference:url,publicmosaic.com/indicators; sid:9102189; rev:2;)
alert tls $HOME_NET any -> 96.126.179.88 443 (msg:"HOLLOWPOINT C2 vshell"; tls.cert_fingerprint; content:"70fdc4501c3c7cc5a2513f5b8402ddeaf9cf0d5c83b4ed692e953b9efc8cbe41"; reference:url,publicmosaic.com/indicators; sid:9103971; rev:2;)
alert tls $HOME_NET any -> 103.79.76.207 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3fb1291d7f2f186a16e06f910efb2d31016782f718b2c17860224b078fbfdafc"; reference:url,publicmosaic.com/indicators; sid:9104996; rev:2;)
alert tls $HOME_NET any -> 103.116.52.203 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2948758e8f514365774b9bdc3f9a7e86bbb7a38bd301efb0b6436226a675ebab"; reference:url,publicmosaic.com/indicators; sid:9101193; rev:2;)
alert tls $HOME_NET any -> 107.152.42.223 34321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"9534c7cee195aff527bf7abba1d94172df45c4a27542e96f5e041bf8055de381"; reference:url,publicmosaic.com/indicators; sid:9103371; rev:2;)
alert tls $HOME_NET any -> 110.41.76.236 5678 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4aaff9d0e258538fc722e121064d4e5ef50f570cfa29243b825103420c26de10"; reference:url,publicmosaic.com/indicators; sid:9103370; rev:2;)
alert tls $HOME_NET any -> 121.127.253.146 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"643ac62b3a1f4adca9cad24d1e353e2b642e4f3d14dde9fd5b70fdd2bf0bf052"; reference:url,publicmosaic.com/indicators; sid:9100427; rev:2;)
alert tls $HOME_NET any -> 130.185.82.117 5641 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"f8cd8ae9d7126eac80c8cc9a2347eb1dacc4545f6c6cf092abe471055b6efd04"; reference:url,publicmosaic.com/indicators; sid:9102182; rev:2;)
alert tls $HOME_NET any -> 134.122.132.3 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100464; rev:2;)
alert tls $HOME_NET any -> 134.122.132.28 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100458; rev:2;)
alert tls $HOME_NET any -> 134.122.132.35 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"c54c146b0398c44850a252d29899caf566d5c67f6a2701b945620edbd6ca89fe"; reference:url,publicmosaic.com/indicators; sid:9100460; rev:2;)
alert tls $HOME_NET any -> 138.226.236.52 13212 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a8b7c5ca3ff96da6afe6e61daa86b25cb2f07e0a5a9fbeb546a3b4d2d7d69a8e"; reference:url,publicmosaic.com/indicators; sid:9104497; rev:2;)
alert tls $HOME_NET any -> 139.162.113.221 64321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7c79be82d1f87ddea9dd8e0016943edd5543f7c4dd6e5ba3ab0a22f1c335d596"; reference:url,publicmosaic.com/indicators; sid:9103367; rev:2;)
alert tls $HOME_NET any -> 143.246.217.103 25729 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7f427a70756e9529c9ade42e2f58ebb66a3fd9bebb8862fc3d8131ea0c49eaa3"; reference:url,publicmosaic.com/indicators; sid:9106564; rev:2;)
alert tls $HOME_NET any -> 144.31.51.6 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"453af7bc194e6845dbcc37cc6b98436e06c1b7c0fc8fb5de0224014bd6c55101"; reference:url,publicmosaic.com/indicators; sid:9103995; rev:2;)
alert tls $HOME_NET any -> 146.70.87.64 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103364; rev:2;)
alert tls $HOME_NET any -> 146.70.87.96 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103363; rev:2;)
alert tls $HOME_NET any -> 146.70.87.237 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5584b65f331b8cbb1e5edf34dbd1356b14f410ed7396fb890f146ae6ac4736fd"; reference:url,publicmosaic.com/indicators; sid:9103362; rev:2;)
alert tls $HOME_NET any -> 148.251.135.156 8443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"a33ab35e8f002efaf7bd08401b035d9e74c2592692906eb4065b2cbcae8ccf59"; reference:url,publicmosaic.com/indicators; sid:9100649; rev:2;)
alert tls $HOME_NET any -> 149.104.28.204 3656 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3003df3ed778b33750e7a8ba1827e4b94688615766cf7df8de271f66503e4b4f"; reference:url,publicmosaic.com/indicators; sid:9104496; rev:2;)
alert tls $HOME_NET any -> 151.236.20.3 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5e766519ccb4fc05b7a80543474c81b3366742dd2b9c8a0351a790e0796e2efe"; reference:url,publicmosaic.com/indicators; sid:9100461; rev:2;)
alert tls $HOME_NET any -> 154.219.115.123 60001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"52e86169a6ca864d0ee5c9d87a53f7bec26ed048ca48aaf226ea8a476c91684f"; reference:url,publicmosaic.com/indicators; sid:9101509; rev:2;)
alert tls $HOME_NET any -> 164.160.187.69 8080 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"dc388403ae9bdf9cb436f4d1e04a6c9082991ad183edb0a710e54513ee315d80"; reference:url,publicmosaic.com/indicators; sid:9101453; rev:2;)
alert tls $HOME_NET any -> 167.17.47.121 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"7365f39c07502a31f84b9e3b72359576db983df0180349f3d28e736a510cfc1f"; reference:url,publicmosaic.com/indicators; sid:9105787; rev:2;)
alert tls $HOME_NET any -> 169.40.135.36 8888 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2e71cbaeb0efde3b25b08d5d2355b836b031a093407fc4b1a6b938e85f23f36b"; reference:url,publicmosaic.com/indicators; sid:9101254; rev:2;)
alert tls $HOME_NET any -> 171.113.113.19 8001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ba712ac8027edcf33cc64a9b0a0522fabe40227d2ca78ac379cc7eb594d977b8"; reference:url,publicmosaic.com/indicators; sid:9105291; rev:2;)
alert tls $HOME_NET any -> 171.113.115.5 8001 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"ba712ac8027edcf33cc64a9b0a0522fabe40227d2ca78ac379cc7eb594d977b8"; reference:url,publicmosaic.com/indicators; sid:9106202; rev:2;)
alert tls $HOME_NET any -> 181.41.201.103 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"4c91579c55a44911d757085d011c78d84b0e3b0e2d68a72b57a892b9a291309d"; reference:url,publicmosaic.com/indicators; sid:9100456; rev:2;)
alert tls $HOME_NET any -> 182.92.227.226 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"03e959ad76c97983cb8eb9c8f1367798dc6c194469e326dcbf70e84c41aba971"; reference:url,publicmosaic.com/indicators; sid:9101253; rev:2;)
alert tls $HOME_NET any -> 182.255.45.114 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"329fda88e01ab35b161a16123e703c8e53afff9e39c5efdc5f76d8cde3fc944f"; reference:url,publicmosaic.com/indicators; sid:9100638; rev:2;)
alert tls $HOME_NET any -> 182.255.45.114 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100455; rev:2;)
alert tls $HOME_NET any -> 185.193.127.10 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"0cbce5d34d388b2289bc84e55f0264231057f0bd681970b0bb33421ac10d2db3"; reference:url,publicmosaic.com/indicators; sid:9100598; rev:2;)
alert tls $HOME_NET any -> 185.207.154.11 443 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100637; rev:2;)
alert tls $HOME_NET any -> 185.207.154.11 4848 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5456f579674a55acf4bcc2b46ec6a5cbc9b270f12f147b6e8a5972fea578ffde"; reference:url,publicmosaic.com/indicators; sid:9100453; rev:2;)
alert tls $HOME_NET any -> 185.213.20.250 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"039e810e79668c1e5dcfdb4677249b6b82267a717df031868a0fb188d912c2de"; reference:url,publicmosaic.com/indicators; sid:9100452; rev:2;)
alert tls $HOME_NET any -> 188.166.244.201 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"92a899eb87b7ad255c934ab518e9d587c779460d677ecf215c232ae70e6781c1"; reference:url,publicmosaic.com/indicators; sid:9100448; rev:2;)
alert tls $HOME_NET any -> 192.253.226.10 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"2623eab9853231c1de8f513309e6a31c4485815a6cb0f67fba707a1e7dc5e9ea"; reference:url,publicmosaic.com/indicators; sid:9105096; rev:2;)
alert tls $HOME_NET any -> 193.135.137.240 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"e457d4966b593ad9beac49cfed6094abfeeac8e4ed5c5af34d8f0697501f6b67"; reference:url,publicmosaic.com/indicators; sid:9101252; rev:2;)
alert tls $HOME_NET any -> 194.36.178.53 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5b63c9eed87e3abc3acfb17dbf27674221a11f3064c2fde68de35ba5eacbf2c3"; reference:url,publicmosaic.com/indicators; sid:9100446; rev:2;)
alert tls $HOME_NET any -> 195.242.118.106 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"3c47c8a09b96d3d7a81ada1fee6cc745fe6e39430c62762ccb981afc4ccb8315"; reference:url,publicmosaic.com/indicators; sid:9100444; rev:2;)
alert tls $HOME_NET any -> 202.95.8.92 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100443; rev:2;)
alert tls $HOME_NET any -> 202.95.8.97 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100442; rev:2;)
alert tls $HOME_NET any -> 202.95.8.98 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"71a3a75eab1d5aa102de250df100cd37dd67b5d01559582c92d149c07fcf2e9b"; reference:url,publicmosaic.com/indicators; sid:9100438; rev:2;)
alert tls $HOME_NET any -> 202.95.17.188 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"cde406af5bae8bdee4ee186f77bd3a6cf688bdc316c12cec6e256255e0b96321"; reference:url,publicmosaic.com/indicators; sid:9100439; rev:2;)
alert tls $HOME_NET any -> 206.81.21.156 4321 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"de1f95f7dfddbeb19b7c3a2fcec4169f53fc83d7e899217bc8465b7a2b7d0d8c"; reference:url,publicmosaic.com/indicators; sid:9100441; rev:2;)
alert tls $HOME_NET any -> 207.57.123.129 43211 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"64111f4a4a9eef52cfc7d745d93732166c001c12f2560319b1a019350c462ab6"; reference:url,publicmosaic.com/indicators; sid:9104495; rev:2;)
alert tls $HOME_NET any -> 209.99.188.193 4323 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"87fcc3e3a0d9a22d4405fbe267f30e326e47ab92b395403f8bab2706bc4aa7a5"; reference:url,publicmosaic.com/indicators; sid:9103352; rev:2;)
alert tls $HOME_NET any -> 209.99.188.193 43222 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"87fcc3e3a0d9a22d4405fbe267f30e326e47ab92b395403f8bab2706bc4aa7a5"; reference:url,publicmosaic.com/indicators; sid:9103351; rev:2;)
alert tls $HOME_NET any -> 213.209.159.36 1879 (msg:"HOLLOWPOINT C2 adaptix"; tls.cert_fingerprint; content:"5a6a4d936003e1b1fd9c882f1eafe4b3fbb8f5dec7913e9517a6dd4fd9fa9f8d"; reference:url,publicmosaic.com/indicators; sid:9105290; rev:2;)