SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903207753Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"15:88:b3:00:7f:6a:05:ea:a4:f9:62:67:b0:33:5c:fc:3e:db:8d:d7"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/1588b3007f6a05eaa4f96267b0335cfc3edb8dd7/; sid:903207753; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/1588b3007f6a05eaa4f96267b0335cfc3edb8dd7/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!