SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208659Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 28, 2025
UpdatedDecember 28, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"2b:e6:32:7a:2b:03:ae:d6:32:28:98:94:1f:4e:6c:7c:a2:9d:e8:e5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2be6327a2b03aed6322898941f4e6c7ca29de8e5/; sid:903208659; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2be6327a2b03aed6322898941f4e6c7ca29de8e5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!