SSLBL: Malicious SSL certificate detected (RaccoonStealer C&C)

SID: 903203833Rev: 142 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RaccoonStealer C&C)"; tls_cert_fingerprint; content:"2c:5b:df:fc:53:5c:b0:8b:23:bc:ff:4e:cd:5d:d9:ec:b7:69:ba:df"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2c5bdffc535cb08b23bcff4ecd5dd9ecb769badf/; sid:903203833; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2c5bdffc535cb08b23bcff4ecd5dd9ecb769badf/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!