SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210481Rev: 1EnabledDerived4 views
Filesslblacklist_tls_cert.rules
CreatedAugust 22, 2026
UpdatedAugust 22, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"01:16:2a:a2:c2:be:7f:9d:16:f6:46:b9:4a:12:45:72:6c:68:b1:10"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/01162aa2c2be7f9d16f646b94a1245726c68b110/; sid:903210481; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/01162aa2c2be7f9d16f646b94a1245726c68b110/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!