SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903207430Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"2e:ef:46:a1:38:d7:21:e5:8a:3c:90:f6:ce:7c:fc:94:a4:7b:04:92"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2eef46a138d721e58a3c90f6ce7cfc94a47b0492/; sid:903207430; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2eef46a138d721e58a3c90f6ce7cfc94a47b0492/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!