# Ruleset Update Summary - 2023/07/14 - v10372

**URL:** <https://community.emergingthreats.net/t/ruleset-update-summary-2023-07-14-v10372/766>\
**Category:** Ruleset Updates\
**Created:** [July 14, 2023, 8:53pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-07-14-v10372/766 "2023-07-14T20:53:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\
**Post date:** [July 14, 2023, 8:53pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-07-14-v10372/766/1 "2023-07-14T20:53:49Z")

</div>

## Summary:

4 new OPEN, 9 new PRO (4 + 5)

Thanks @jaydinbas, @Jane\_0sint

* * *

## Added rules:

### Open:

- 2046820 - ET MALWARE [ANY.RUN] Konni.APT Exfiltration (malware.rules)
- 2046821 - ET MALWARE [ANY.RUN] Konni.APT Keep-Alive (malware.rules)
- 2046822 - ET MALWARE [ANY.RUN] DNS Query to Konni APT Domain (cachecast001 .com) (malware.rules)
- 2046823 - ET MALWARE [ANY.RUN] DNS Query to Konni APT Domain (elinline .com) (malware.rules)

### Pro:

- 2854824 - ETPRO JA3 HASH Suspected Malware Related Response (ja3.rules)
- 2854829 - ETPRO MALWARE Enigma Loader DNS Activity M1 (malware.rules)
- 2854830 - ETPRO MALWARE Enigma Loader DNS Activity M2 (malware.rules)
- 2854833 - ETPRO INFO Abused Auth Related Domain in DNS Lookup (info.rules)
- 2854834 - ETPRO INFO Abused Auth Related Domain in TLS SNI (info.rules)

* * *

## Disabled and modified rules:

- 2046263 - ET MALWARE APT-C-36 Related Domain in DNS Lookup (travel-ag .com) (malware.rules)