SSLBL: Malicious SSL certificate detected (DCAgentRMM C&C)

SID: 903210900Rev: 1EnabledDerived9 views
History
Filesslblacklist_tls_cert.rules
CreatedOctober 12, 2026
UpdatedOctober 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCAgentRMM C&C)"; tls_cert_fingerprint; content:"62:97:00:c6:fb:58:a4:8c:e5:c3:4e:9e:83:02:25:fa:d3:e6:26:34"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/629700c6fb58a48ce5c34e9e830225fad3e62634/; sid:903210900; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/629700c6fb58a48ce5c34e9e830225fad3e62634/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!