SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)

SID: 903208797Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedJanuary 30, 2026
UpdatedJanuary 30, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (QuasarRAT C&C)"; tls_cert_fingerprint; content:"68:69:27:79:2b:dc:7f:c8:fc:9a:61:8c:e9:c7:ff:8f:62:00:87:98"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/686927792bdc7fc8fc9a618ce9c7ff8f62008798/; sid:903208797; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/686927792bdc7fc8fc9a618ce9c7ff8f62008798/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!