SSLBL: Malicious SSL certificate detected (IcedID C&C)

SID: 903203336Rev: 137 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (IcedID C&C)"; tls_cert_fingerprint; content:"2e:d0:70:ce:aa:32:02:93:2b:75:e7:bf:63:eb:e1:5d:38:ef:89:f3"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/2ed070ceaa3202932b75e7bf63ebe15d38ef89f3/; sid:903203336; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/2ed070ceaa3202932b75e7bf63ebe15d38ef89f3/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!