SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903207743Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"dd:ba:e2:e6:13:27:af:9e:c5:eb:cb:b6:50:5b:8b:20:84:e1:c4:03"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ddbae2e61327af9ec5ebcbb6505b8b2084e1c403/; sid:903207743; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ddbae2e61327af9ec5ebcbb6505b8b2084e1c403/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!