SSLBL: Malicious SSL certificate detected (Dridex C&C)

SID: 903200956Rev: 10 views
History
Sourceabuse.ch/sslbl-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Dridex C&C)"; tls_cert_fingerprint; content:"77:b6:6d:0d:5a:70:94:88:ab:7f:d4:fe:e3:8e:27:ee:a2:8e:b4:02"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/77b66d0d5a709488ab7fd4fee38e27eea28eb402/; sid:903200956; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/77b66d0d5a709488ab7fd4fee38e27eea28eb402/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!