SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210085Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 7, 2026
UpdatedJuly 7, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"14:5b:58:5a:8d:47:72:43:e2:29:f4:d6:60:d1:a9:fc:40:b3:82:43"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/145b585a8d477243e229f4d660d1a9fc40b38243/; sid:903210085; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/145b585a8d477243e229f4d660d1a9fc40b38243/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!