SSLBL: Malicious SSL certificate detected (Qadars C&C)

SID: 903200944Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Qadars C&C)"; tls_cert_fingerprint; content:"0d:41:87:12:21:70:67:91:a2:62:03:f9:61:7b:85:97:23:ff:b2:43"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/0d41871221706791a26203f9617b859723ffb243/; sid:903200944; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/0d41871221706791a26203f9617b859723ffb243/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!