SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1d05c6fef14d2671d759a05b496464b831c650e8.

Database Entry


SHA1 Fingerprint:1d05c6fef14d2671d759a05b496464b831c650e8
Certificate Common Name (CN):host/emailAddress=web@host
Issuer Distinguished Name (DN):host/emailAddress=web@host
TLS Version:TLS 1.2
First seen:2016-12-29 17:49:25 UTC
Last seen:2017-01-03 22:39:01 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-12-30 07:54:19
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2017-01-03 22:39:010e7271008da870658f4d25da8bb24e85Virustotal results 8/57 (14.04%) Gootkit 89.46.78.221:80
2017-01-03 22:39:010e7271008da870658f4d25da8bb24e85Virustotal results 8/57 (14.04%) Gootkit 89.46.78.221:80
2016-12-29 17:49:25209071cf4ae0578321f340f5819a1bc1n/aGootkit 89.46.78.221:80
2016-12-29 17:49:25209071cf4ae0578321f340f5819a1bc1n/aGootkit 89.46.78.221:80

# of entries: 4 (max: 100)