SSLBL: Malicious SSL certificate detected (RatonRAT C&C)

SID: 903209562Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedApril 16, 2026
UpdatedApril 16, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (RatonRAT C&C)"; tls_cert_fingerprint; content:"17:fd:07:fa:dd:07:77:7f:54:3e:7f:16:69:4b:e4:ff:84:8d:98:11"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/17fd07fadd07777f543e7f16694be4ff848d9811/; sid:903209562; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/17fd07fadd07777f543e7f16694be4ff848d9811/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!