SSLBL: Malicious SSL certificate detected (Dridex C&C)

SID: 903200857Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Dridex C&C)"; tls_cert_fingerprint; content:"87:4d:24:58:df:13:8c:b3:4e:4a:ef:b8:9b:11:a8:e4:99:b1:ab:ec"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/874d2458df138cb34e4aefb89b11a8e499b1abec/; sid:903200857; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/874d2458df138cb34e4aefb89b11a8e499b1abec/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!