SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903208661Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedDecember 29, 2025
UpdatedDecember 29, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"af:0d:24:18:e9:e8:e5:a7:05:7f:5d:1a:9b:56:04:13:7b:6a:cd:e4"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/af0d2418e9e8e5a7057f5d1a9b5604137b6acde4/; sid:903208661; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/af0d2418e9e8e5a7057f5d1a9b5604137b6acde4/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!