SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903210536Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedAugust 29, 2026
UpdatedAugust 29, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"a6:e6:aa:58:ba:c8:4e:56:b8:68:f5:f6:18:ef:22:7b:75:d7:20:8e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a6e6aa58bac84e56b868f5f618ef227b75d7208e/; sid:903210536; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a6e6aa58bac84e56b868f5f618ef227b75d7208e/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!