SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903209972Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJune 22, 2026
UpdatedJune 22, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"60:76:97:ed:79:09:ed:a4:94:1f:46:e1:6f:84:f5:bf:aa:63:d4:c0"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/607697ed7909eda4941f46e16f84f5bfaa63d4c0/; sid:903209972; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/607697ed7909eda4941f46e16f84f5bfaa63d4c0/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!