SSLBL: Malicious SSL certificate detected (MaskGramStealer C&C)

SID: 903208391Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedNovember 4, 2025
UpdatedNovember 4, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (MaskGramStealer C&C)"; tls_cert_fingerprint; content:"67:a5:2a:c5:5b:41:cd:f9:8c:11:25:ae:6d:2c:61:d0:b3:8e:97:cb"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/67a52ac55b41cdf98c1125ae6d2c61d0b38e97cb/; sid:903208391; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/67a52ac55b41cdf98c1125ae6d2c61d0b38e97cb/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!