SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208193Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedOctober 4, 2025
UpdatedOctober 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"fc:21:69:72:db:ec:19:03:de:56:22:10:7d:c9:7b:6c:33:53:50:74"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/fc216972dbec1903de5622107dc97b6c33535074/; sid:903208193; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/fc216972dbec1903de5622107dc97b6c33535074/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!