SSLBL: Malicious SSL certificate detected (CobaltStrike C&C)

SID: 903209259Rev: 10 views
Sourceabuse.ch/sslbl-blacklist
CreatedMarch 18, 2026
UpdatedMarch 18, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (CobaltStrike C&C)"; tls_cert_fingerprint; content:"3d:12:75:77:5c:9a:4d:d6:c8:90:25:79:28:79:0d:e2:84:49:31:c8"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/3d1275775c9a4dd6c890257928790de2844931c8/; sid:903209259; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/3d1275775c9a4dd6c890257928790de2844931c8/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!