SSLBL: Malicious SSL certificate detected (ValleyRAT C&C)

SID: 903210109Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedJuly 9, 2026
UpdatedJuly 9, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (ValleyRAT C&C)"; tls_cert_fingerprint; content:"0b:46:32:d2:29:6a:25:7c:1e:de:3c:bd:da:d9:10:d1:35:70:89:1d"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0b4632d2296a257c1ede3cbddad910d13570891d/; sid:903210109; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0b4632d2296a257c1ede3cbddad910d13570891d/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!