SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903208202Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedOctober 7, 2025
UpdatedOctober 7, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"79:a8:05:62:7b:c3:b8:6a:a4:22:72:72:82:09:fc:28:01:9d:e0:2f"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/79a805627bc3b86aa42272728209fc28019de02f/; sid:903208202; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/79a805627bc3b86aa42272728209fc28019de02f/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!