SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)

SID: 903206877Rev: 129 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)"; tls_cert_fingerprint; content:"b2:00:7b:42:bc:1d:23:3d:af:b8:d9:34:52:a9:8b:d2:ce:dc:4a:88"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/b2007b42bc1d233dafb8d93452a98bd2cedc4a88/; sid:903206877; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/b2007b42bc1d233dafb8d93452a98bd2cedc4a88/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!