SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 15761e8a78189f6c050d071a164a3f426ae174c3.

Database Entry


SHA1 Fingerprint:15761e8a78189f6c050d071a164a3f426ae174c3
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-06-17 16:58:35 UTC
Last seen:2016-07-09 12:40:24 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-06-25 07:50:24
Malware samples:37
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-07-09 12:40:24a02b562c170c4b087720d6f7715a4ccaVirustotal results 32/56 (57.14%) Gootkit 93.115.10.203:80
2016-07-09 12:40:24a02b562c170c4b087720d6f7715a4ccaVirustotal results 32/56 (57.14%) Gootkit 93.115.10.203:80
2016-07-09 06:57:437b8d229b8394b9485c091bb7926eb521n/aGootkit 93.115.10.203:80
2016-07-09 06:57:437b8d229b8394b9485c091bb7926eb521n/aGootkit 93.115.10.203:80
2016-07-09 06:45:54f494c6fa0e1e47ae486ab803b1db50afn/aGootkit 93.115.10.203:80
2016-07-09 06:45:54f494c6fa0e1e47ae486ab803b1db50afn/aGootkit 93.115.10.203:80
2016-07-09 04:00:456ce72ae30c863264fc2264d99211ce84n/aGootkit 93.115.10.203:80
2016-07-09 04:00:456ce72ae30c863264fc2264d99211ce84n/aGootkit 93.115.10.203:80
2016-07-09 03:56:43650bc161664176975e46b88ae2571e06n/aGootkit 93.115.10.203:80
2016-07-09 03:56:43650bc161664176975e46b88ae2571e06n/aGootkit 93.115.10.203:80
2016-07-08 22:30:027f0933b5994c59e169d04773a7ef1a09n/aGootkit 93.115.10.203:80
2016-07-08 22:30:027f0933b5994c59e169d04773a7ef1a09n/aGootkit 93.115.10.203:80
2016-07-08 21:54:532bd042440c48d7688a60ff49f96a3673Virustotal results 8/51 (15.69%) Gootkit 93.115.10.203:80
2016-07-08 21:54:532bd042440c48d7688a60ff49f96a3673Virustotal results 8/51 (15.69%) Gootkit 93.115.10.203:80
2016-07-08 13:38:45b5802b655b31dc56616e0c286c66c034Virustotal results 32/52 (61.54%) Gootkit 93.115.10.203:80
2016-07-08 13:38:45b5802b655b31dc56616e0c286c66c034Virustotal results 32/52 (61.54%) Gootkit 93.115.10.203:80
2016-07-08 08:45:58812236b72cf05ce76e1ea80ebc354a87Virustotal results 32/54 (59.26%) Gootkit 93.115.10.203:80
2016-07-08 08:45:58812236b72cf05ce76e1ea80ebc354a87Virustotal results 32/54 (59.26%) Gootkit 93.115.10.203:80
2016-07-08 06:31:29ccc73b8e3ccb1ecde814b1b3b0311c89Virustotal results 38/55 (69.09%) Gootkit 93.115.10.203:80
2016-07-08 06:31:29ccc73b8e3ccb1ecde814b1b3b0311c89Virustotal results 38/55 (69.09%) Gootkit 93.115.10.203:80
2016-07-08 05:31:361287eb274d6f81b4763e872de12c973eVirustotal results 38/55 (69.09%) Gootkit 93.115.10.203:80
2016-07-08 05:31:361287eb274d6f81b4763e872de12c973eVirustotal results 38/55 (69.09%) Gootkit 93.115.10.203:80
2016-07-08 03:50:319ae5fed779c6059b1491d349ff488679Virustotal results 27/52 (51.92%) Gootkit 93.115.10.203:80
2016-07-08 03:50:319ae5fed779c6059b1491d349ff488679Virustotal results 27/52 (51.92%) Gootkit 93.115.10.203:80
2016-07-08 03:01:3572c63d9c0745eec95e16a250f6e3874cn/aGootkit 93.115.10.203:80
2016-07-08 03:01:3572c63d9c0745eec95e16a250f6e3874cn/aGootkit 93.115.10.203:80
2016-07-08 02:32:228e395bdff82f2917c6777c0a6de56867n/aGootkit 93.115.10.203:80
2016-07-08 02:32:228e395bdff82f2917c6777c0a6de56867n/aGootkit 93.115.10.203:80
2016-07-08 01:55:27af9e2bb8677b45ab7ed71bb844bb8a32Virustotal results 25/52 (48.08%) Gootkit 93.115.10.203:80
2016-07-08 01:55:27af9e2bb8677b45ab7ed71bb844bb8a32Virustotal results 25/52 (48.08%) Gootkit 93.115.10.203:80
2016-07-07 20:37:0223483fae86e4fdfedd7b4be23a796d0an/aGootkit 93.115.10.203:80
2016-07-07 20:37:0223483fae86e4fdfedd7b4be23a796d0an/aGootkit 93.115.10.203:80
2016-07-07 19:43:3242041225b7819b93794b1118f8583a3fVirustotal results 8/51 (15.69%) Gootkit 93.115.10.203:80
2016-07-07 19:43:3242041225b7819b93794b1118f8583a3fVirustotal results 8/51 (15.69%) Gootkit 93.115.10.203:80
2016-07-07 19:25:5020e4327f2d4eefe1c4dfd7bffb8d9da4Virustotal results 30/56 (53.57%) Shylock 93.115.10.203:80
2016-07-07 19:25:5020e4327f2d4eefe1c4dfd7bffb8d9da4Virustotal results 30/56 (53.57%) Shylock 93.115.10.203:80
2016-07-07 08:01:25582b43a188aa480a9abe641aabd5decfn/aShylock 93.115.10.203:80
2016-07-07 08:01:25582b43a188aa480a9abe641aabd5decfn/aShylock 93.115.10.203:80
2016-07-07 03:46:257f3e3ba1625cc27d12dcb2fc7e3f3f26Virustotal results 27/50 (54.00%) Gootkit 93.115.10.203:80
2016-07-07 03:46:257f3e3ba1625cc27d12dcb2fc7e3f3f26Virustotal results 27/50 (54.00%) Gootkit 93.115.10.203:80
2016-07-07 02:20:18fdf85d4bc517df6d2a522ffd3661aaa3n/aGootkit 93.115.10.203:80
2016-07-07 02:20:18fdf85d4bc517df6d2a522ffd3661aaa3n/aGootkit 93.115.10.203:80
2016-07-07 00:58:376119194812040ed8552b20d1a89f9931Virustotal results 26/56 (46.43%) Gootkit 93.115.10.203:80
2016-07-07 00:58:376119194812040ed8552b20d1a89f9931Virustotal results 26/56 (46.43%) Gootkit 93.115.10.203:80
2016-07-06 20:39:28d98517c5f64ba3946848fb1d0997696bVirustotal results 41/56 (73.21%) Gootkit 93.115.10.203:80
2016-07-06 20:39:28d98517c5f64ba3946848fb1d0997696bVirustotal results 41/56 (73.21%) Gootkit 93.115.10.203:80
2016-07-06 19:08:289fea5a36c93221354e01d5f5a883c822n/aShylock 93.115.10.203:80
2016-07-06 19:08:289fea5a36c93221354e01d5f5a883c822n/aShylock 93.115.10.203:80
2016-07-05 19:47:53f01d45e547d9e1149d4fda7b6685f470Virustotal results 27/56 (48.21%) Gootkit 93.115.10.203:80
2016-07-05 19:47:53f01d45e547d9e1149d4fda7b6685f470Virustotal results 27/56 (48.21%) Gootkit 93.115.10.203:80
2016-07-05 18:48:18faa8fed66ad1981a606a8fc2d3ea7bd3n/aShylock 93.115.10.203:80
2016-07-05 18:48:18faa8fed66ad1981a606a8fc2d3ea7bd3n/aShylock 93.115.10.203:80
2016-07-05 09:50:14577ca447989e1c1f454c7e75dbb9963an/aGootkit 93.115.10.203:80
2016-07-05 09:50:14577ca447989e1c1f454c7e75dbb9963an/aGootkit 93.115.10.203:80
2016-07-05 04:25:115efb32589664fdb746b3db7376a5346bVirustotal results 34/55 (61.82%) Gootkit 93.115.10.203:80
2016-07-05 04:25:115efb32589664fdb746b3db7376a5346bVirustotal results 34/55 (61.82%) Gootkit 93.115.10.203:80
2016-07-04 21:06:0582dda421c9585e87ab625181f9577fc8Virustotal results 26/55 (47.27%) Gootkit 93.115.10.203:80
2016-07-04 21:06:0582dda421c9585e87ab625181f9577fc8Virustotal results 26/55 (47.27%) Gootkit 93.115.10.203:80
2016-07-04 10:13:26b017abbffb0374e49dc561119c4e9859Virustotal results 33/54 (61.11%) Gootkit 93.115.10.203:80
2016-07-04 10:13:26b017abbffb0374e49dc561119c4e9859Virustotal results 33/54 (61.11%) Gootkit 93.115.10.203:80
2016-07-03 18:02:00bbde544109cf5ce4cf8c80a6181c731dVirustotal results 32/53 (60.38%) Shylock 93.115.10.203:80
2016-07-03 18:02:00bbde544109cf5ce4cf8c80a6181c731dVirustotal results 32/53 (60.38%) Shylock 93.115.10.203:80
2016-07-03 15:45:4119345f8ac527e0145fe35478b5bad666Virustotal results 30/56 (53.57%) Gootkit 93.115.10.203:80
2016-07-03 15:45:4119345f8ac527e0145fe35478b5bad666Virustotal results 30/56 (53.57%) Gootkit 93.115.10.203:80
2016-07-03 14:34:5603721aecd9795f3e504c63a1ed84a920n/aGootkit 93.115.10.203:80
2016-07-03 14:34:5603721aecd9795f3e504c63a1ed84a920n/aGootkit 93.115.10.203:80
2016-06-25 00:42:08e8295e724b3bbfe55d5e441723284168n/aGootkit 93.115.10.203:80
2016-06-25 00:42:08e8295e724b3bbfe55d5e441723284168n/aGootkit 93.115.10.203:80
2016-06-24 14:26:27c852c22474d744bad4281bc7935b71b0Virustotal results 33/56 (58.93%) Gootkit 93.115.10.203:80
2016-06-24 14:26:27c852c22474d744bad4281bc7935b71b0Virustotal results 33/56 (58.93%) Gootkit 93.115.10.203:80
2016-06-21 02:52:1867892212b8089c08ded176d69a98615fVirustotal results 22/56 (39.29%) Gootkit 93.115.10.203:80
2016-06-21 02:52:1867892212b8089c08ded176d69a98615fVirustotal results 22/56 (39.29%) Gootkit 93.115.10.203:80
2016-06-17 16:58:357a11670347dfac2d3d606e20be5eb7feVirustotal results 10/56 (17.86%) Gootkit 93.115.10.203:80
2016-06-17 16:58:357a11670347dfac2d3d606e20be5eb7feVirustotal results 10/56 (17.86%) Gootkit 93.115.10.203:80

# of entries: 74 (max: 100)