SSLBL: Malicious SSL certificate detected (TrickBot C&C)

SID: 903202197Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (TrickBot C&C)"; tls_cert_fingerprint; content:"65:4d:4f:33:b1:fb:15:02:0e:de:87:0d:e6:d3:d7:d4:38:ea:25:06"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/654d4f33b1fb15020ede870de6d3d7d438ea2506/; sid:903202197; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/654d4f33b1fb15020ede870de6d3d7d438ea2506/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!