SSLBL: Malicious SSL certificate detected (DCAgentRMM C&C)

SID: 903210882Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedOctober 10, 2026
UpdatedOctober 10, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCAgentRMM C&C)"; tls_cert_fingerprint; content:"6d:90:08:6b:95:e7:88:30:5c:81:27:c7:01:22:f9:67:f1:cd:2a:48"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/6d90086b95e788305c8127c70122f967f1cd2a48/; sid:903210882; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/6d90086b95e788305c8127c70122f967f1cd2a48/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!