SSLBL: Malicious SSL certificate detected (Dridex C&C)

SID: 903201259Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Dridex C&C)"; tls_cert_fingerprint; content:"5c:b2:5a:c5:4c:e0:40:e1:24:c4:52:3d:ca:fc:c2:68:64:aa:92:77"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/5cb25ac54ce040e124c4523dcafcc26864aa9277/; sid:903201259; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/5cb25ac54ce040e124c4523dcafcc26864aa9277/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!