SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903205801Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"84:26:0b:67:bb:54:0e:01:38:4d:22:54:ad:8a:7d:cf:ef:c8:10:13"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/84260b67bb540e01384d2254ad8a7dcfefc81013/; sid:903205801; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/84260b67bb540e01384d2254ad8a7dcfefc81013/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!