SSLBL: Malicious SSL certificate detected (DCRat C&C)

SID: 903208523Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedDecember 4, 2025
UpdatedDecember 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (DCRat C&C)"; tls_cert_fingerprint; content:"2f:5d:c8:00:ba:6e:42:0a:10:19:dc:0f:d1:42:26:f2:05:ed:08:35"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2f5dc800ba6e420a1019dc0fd14226f205ed0835/; sid:903208523; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2f5dc800ba6e420a1019dc0fd14226f205ed0835/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!