SSLBL: Malicious SSL certificate detected (PureRAT C&C)

SID: 903210537Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedAugust 29, 2026
UpdatedAugust 29, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (PureRAT C&C)"; tls_cert_fingerprint; content:"b3:42:40:91:2b:c1:f0:9b:2e:23:42:36:36:47:61:6b:10:88:a1:b0"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b34240912bc1f09b2e2342363647616b1088a1b0/; sid:903210537; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b34240912bc1f09b2e2342363647616b1088a1b0/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!