SSLBL: Malicious SSL certificate detected (AZORult C&C)

SID: 903203023Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (AZORult C&C)"; tls_cert_fingerprint; content:"ae:04:24:d2:37:03:82:13:99:89:ac:0f:12:26:8e:f8:86:ca:a2:ce"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ae0424d2370382139989ac0f12268ef886caa2ce/; sid:903203023; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/ae0424d2370382139989ac0f12268ef886caa2ce/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!