SSLBL: Malicious SSL certificate detected (Guildma C&C)

SID: 903208688Rev: 1EnabledDerived3 views
Filesslblacklist_tls_cert.rules
CreatedJanuary 6, 2026
UpdatedJanuary 6, 2026
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Guildma C&C)"; tls_cert_fingerprint; content:"36:a9:86:25:3d:83:18:8c:eb:6e:c2:27:34:20:bf:e3:57:07:47:63"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/36a986253d83188ceb6ec2273420bfe357074763/; sid:903208688; rev:1;)

References

urlsslbl.abuse.ch/ssl-certificates/sha1/36a986253d83188ceb6ec2273420bfe357074763/

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!