SSLBL: Malicious SSL certificate detected (RatonRAT C&C)

SID: 903209018Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedFebruary 23, 2026
UpdatedFebruary 23, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RatonRAT C&C)"; tls_cert_fingerprint; content:"a0:ed:32:29:d8:da:75:44:29:c8:37:d4:30:c9:e8:e3:d4:71:e3:1b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/a0ed3229d8da754429c837d430c9e8e3d471e31b/; sid:903209018; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/a0ed3229d8da754429c837d430c9e8e3d471e31b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!