SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208020Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"72:90:a9:13:19:4f:30:32:12:9f:61:05:91:b2:97:cf:77:d2:f4:86"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/7290a913194f3032129f610591b297cf77d2f486/; sid:903208020; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/7290a913194f3032129f610591b297cf77d2f486/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!