SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903209549Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedApril 14, 2026
UpdatedApril 14, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"54:cd:35:dc:5d:5f:8e:70:68:cc:d2:c1:d2:42:22:18:77:84:f9:0a"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/54cd35dc5d5f8e7068ccd2c1d24222187784f90a/; sid:903209549; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/54cd35dc5d5f8e7068ccd2c1d24222187784f90a/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!