SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903208116Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedSeptember 25, 2025
UpdatedSeptember 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"6f:d8:5a:f2:b0:c3:37:e0:a6:52:c9:76:a9:05:8c:34:70:50:83:35"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6fd85af2b0c337e0a652c976a9058c3470508335/; sid:903208116; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6fd85af2b0c337e0a652c976a9058c3470508335/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!