SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)

SID: 903208357Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedOctober 29, 2025
UpdatedOctober 29, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (OrcusRAT C&C)"; tls_cert_fingerprint; content:"f4:38:ed:5b:3e:8a:0a:d7:66:ab:0c:32:80:b6:7a:6b:9d:73:3e:87"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/f438ed5b3e8a0ad766ab0c3280b67a6b9d733e87/; sid:903208357; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/f438ed5b3e8a0ad766ab0c3280b67a6b9d733e87/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!