SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210069Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 6, 2026
UpdatedJuly 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"fa:ef:3e:27:e5:26:f9:60:dc:f9:2e:08:65:f8:20:81:ec:bf:be:2d"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/faef3e27e526f960dcf92e0865f82081ecbfbe2d/; sid:903210069; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/faef3e27e526f960dcf92e0865f82081ecbfbe2d/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!