SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903204730Rev: 148 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"9f:cb:39:9a:79:c0:f6:31:6d:90:33:2d:81:05:8b:ec:1b:04:d4:35"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9fcb399a79c0f6316d90332d81058bec1b04d435/; sid:903204730; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9fcb399a79c0f6316d90332d81058bec1b04d435/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!