SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210565Rev: 1EnabledDerived0 views
Filesslblacklist_tls_cert.rules
CreatedSeptember 1, 2026
UpdatedSeptember 1, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"4c:c4:e6:35:af:94:a2:19:c0:c1:ea:a7:8c:7c:1e:eb:dd:a4:9e:1f"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/4cc4e635af94a219c0c1eaa78c7c1eebdda49e1f/; sid:903210565; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/4cc4e635af94a219c0c1eaa78c7c1eebdda49e1f/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!