SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208475Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 20, 2025
UpdatedNovember 20, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"ec:1e:d7:b8:bd:2e:d1:36:2b:76:19:7b:a2:c6:62:c5:1b:87:61:de"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ec1ed7b8bd2ed1362b76197ba2c662c51b8761de/; sid:903208475; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ec1ed7b8bd2ed1362b76197ba2c662c51b8761de/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!