SSLBL: Malicious SSL certificate detected (BitRAT C&C)

SID: 903204346Rev: 144 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (BitRAT C&C)"; tls_cert_fingerprint; content:"5b:a5:af:60:9c:f3:3f:85:f7:d6:eb:92:94:0f:b2:86:b6:d1:64:f9"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/5ba5af609cf33f85f7d6eb92940fb286b6d164f9/; sid:903204346; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/5ba5af609cf33f85f7d6eb92940fb286b6d164f9/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!