SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208214Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedOctober 8, 2025
UpdatedOctober 8, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"30:2e:d4:ee:b2:8e:1e:8c:a5:60:c6:45:b8:eb:34:24:98:30:01:34"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/302ed4eeb28e1e8ca560c645b8eb342498300134/; sid:903208214; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/302ed4eeb28e1e8ca560c645b8eb342498300134/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!