SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903204818Rev: 145 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"3b:49:80:d7:6d:79:ed:58:ef:16:00:46:89:00:ac:3b:13:ed:c2:89"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/3b4980d76d79ed58ef1600468900ac3b13edc289/; sid:903204818; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/3b4980d76d79ed58ef1600468900ac3b13edc289/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!