SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903207597Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"9b:29:4c:c8:2c:ef:a1:a8:38:6e:5d:66:fb:b9:16:09:4e:14:1e:20"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9b294cc82cefa1a8386e5d66fbb916094e141e20/; sid:903207597; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9b294cc82cefa1a8386e5d66fbb916094e141e20/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!