SSLBL: Malicious SSL certificate detected (Socks5Systemz C&C)

SID: 903206000Rev: 1EnabledDerived2 views
Filesslblacklist_tls_cert.rules
CreatedJune 25, 2025
UpdatedJune 25, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Socks5Systemz C&C)"; tls_cert_fingerprint; content:"da:be:d6:d3:b1:33:b0:78:ba:8e:f9:53:96:95:4a:5f:7e:1f:ca:0b"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/dabed6d3b133b078ba8ef95396954a5f7e1fca0b/; sid:903206000; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/dabed6d3b133b078ba8ef95396954a5f7e1fca0b/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!