SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)

SID: 903206841Rev: 152 views
History
Sourcesslbl/ssl-fp-blacklist
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Rhadamanthys C&C)"; tls_cert_fingerprint; content:"09:ea:6f:3f:d2:cf:d1:69:cd:5a:1b:e4:37:e5:dc:46:c6:92:60:35"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/09ea6f3fd2cfd169cd5a1be437e5dc46c6926035/; sid:903206841; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/09ea6f3fd2cfd169cd5a1be437e5dc46c6926035/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!