SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)

SID: 903203323Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)"; tls_cert_fingerprint; content:"f3:19:97:12:22:6d:e3:80:42:c0:a7:65:a4:88:9e:b3:3e:8d:52:bf"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f3199712226de38042c0a765a4889eb33e8d52bf/; sid:903203323; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f3199712226de38042c0a765a4889eb33e8d52bf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!