SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210544Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedAugust 30, 2026
UpdatedAugust 30, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"bf:bc:d2:80:21:86:b6:c5:70:7f:7f:f6:34:1b:87:c1:2b:97:f4:a4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/bfbcd2802186b6c5707f7ff6341b87c12b97f4a4/; sid:903210544; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/bfbcd2802186b6c5707f7ff6341b87c12b97f4a4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!