SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)

SID: 903208681Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJanuary 6, 2026
UpdatedJanuary 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)"; tls_cert_fingerprint; content:"04:2a:15:f1:d8:ee:27:87:77:13:f2:98:12:72:b7:c1:25:b6:ec:18"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/042a15f1d8ee27877713f2981272b7c125b6ec18/; sid:903208681; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/042a15f1d8ee27877713f2981272b7c125b6ec18/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!