SSLBL: Malicious SSL certificate detected (RatonRAT C&C)

SID: 903210471Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedAugust 21, 2026
UpdatedAugust 21, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RatonRAT C&C)"; tls_cert_fingerprint; content:"ec:ae:97:6f:3e:ab:ca:ad:99:6e:0a:43:1d:47:bc:ea:d6:1d:fb:5e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ecae976f3eabcaad996e0a431d47bcead61dfb5e/; sid:903210471; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ecae976f3eabcaad996e0a431d47bcead61dfb5e/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!