SSLBL: Malicious SSL certificate detected (RatonRAT C&C)

SID: 903209016Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RatonRAT C&C)"; tls_cert_fingerprint; content:"d7:b5:d7:c4:d4:8f:06:7c:c5:68:42:85:bb:bf:16:2b:c8:9e:6f:58"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/d7b5d7c4d48f067cc5684285bbbf162bc89e6f58/; sid:903209016; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/d7b5d7c4d48f067cc5684285bbbf162bc89e6f58/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!