SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208194Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 4, 2025
UpdatedOctober 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"c7:5f:34:72:53:eb:f8:a4:c2:60:53:d2:db:7c:e5:bf:3e:14:17:f5"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/c75f347253ebf8a4c26053d2db7ce5bf3e1417f5/; sid:903208194; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/c75f347253ebf8a4c26053d2db7ce5bf3e1417f5/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!