SSLBL: Malicious SSL certificate detected (Socks5Systemz C&C)

SID: 903210494Rev: 1EnabledDerived1 views
Filesslblacklist_tls_cert.rules
CreatedAugust 26, 2026
UpdatedAugust 26, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Socks5Systemz C&C)"; tls_cert_fingerprint; content:"ee:de:b1:1b:c6:7d:f6:c7:b7:a7:14:51:2a:59:dc:34:6c:1b:42:71"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/eedeb11bc67df6c7b7a714512a59dc346c1b4271/; sid:903210494; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/eedeb11bc67df6c7b7a714512a59dc346c1b4271/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!