SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210170Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedJuly 15, 2026
UpdatedJuly 15, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"0f:50:07:4c:54:89:b9:7d:ef:2d:22:0b:8c:d7:0b:ad:a3:36:12:20"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0f50074c5489b97def2d220b8cd70bada3361220/; sid:903210170; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0f50074c5489b97def2d220b8cd70bada3361220/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!