SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)

SID: 903207811Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (AsyncRAT C&C)"; tls_cert_fingerprint; content:"9c:b0:3d:d8:43:6d:f6:8c:58:8d:28:bb:2e:1a:57:d3:b2:34:50:c1"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/9cb03dd8436df68c588d28bb2e1a57d3b23450c1/; sid:903207811; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/9cb03dd8436df68c588d28bb2e1a57d3b23450c1/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!