SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903207632Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"23:dc:d2:45:75:76:bd:8c:17:f3:5c:9c:4f:50:bf:16:d2:c7:c1:61"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/23dcd2457576bd8c17f35c9c4f50bf16d2c7c161/; sid:903207632; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/23dcd2457576bd8c17f35c9c4f50bf16d2c7c161/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!