SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208425Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedNovember 12, 2025
UpdatedNovember 12, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"41:01:57:9a:e9:50:c9:54:fc:10:96:ad:f4:3b:de:fc:f0:36:4c:fd"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4101579ae950c954fc1096adf43bdefcf0364cfd/; sid:903208425; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4101579ae950c954fc1096adf43bdefcf0364cfd/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!