SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 34a92e41d4cf61f1fc510e40afd362d2ddc00ff7.
Database Entry
| SHA1 Fingerprint: | 34a92e41d4cf61f1fc510e40afd362d2ddc00ff7 |
|---|---|
| Certificate Common Name (CN): | kuklovodw.com/emailAddress=admin@kuklovodw.com |
| Issuer Distinguished Name (DN): | kuklovodw.com/emailAddress=admin@kuklovodw.com |
| TLS Version: | TLS 1.2 |
| First seen: | 2016-01-22 06:11:44 UTC |
| Last seen: | 2016-01-26 02:07:32 UTC |
| Status: | Blacklisted |
| Listing reason: | Qadars C&C |
| Listing date: | 2016-01-22 10:54:02 |
| Malware samples: | 14 |
| Botnet C&Cs: | 4 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-01-26 02:07:32 | 534eada82992d9c0d5c9d224841f6dd2 |  4/54 (7.41%)
| Qadars | 192.210.137.123:443 |
| 2016-01-26 02:07:32 | 534eada82992d9c0d5c9d224841f6dd2 | 4/54 (7.41%)
| Qadars | 192.210.137.123:443 |
| 2016-01-25 08:07:30 | b39775be63bd9af7daf72e6c0a636969 | 4/54 (7.41%)
| Qadars | 192.210.137.123:443 |
| 2016-01-25 08:07:30 | b39775be63bd9af7daf72e6c0a636969 | 4/54 (7.41%)
| Qadars | 192.210.137.123:443 |
| 2016-01-24 19:37:11 | 95daac9c9356a019c4a6fff507fb2389 | n/a | Qadars | 107.161.145.175:443 |
| 2016-01-24 19:37:11 | 95daac9c9356a019c4a6fff507fb2389 | n/a | Qadars | 107.161.145.175:443 |
| 2016-01-24 15:54:18 | 475a4b295f28c432f68bc7b541d3b7eb | 12/54 (22.22%)
| Qadars | 216.170.126.138:443 |
| 2016-01-24 15:54:18 | 475a4b295f28c432f68bc7b541d3b7eb | 12/54 (22.22%)
| Qadars | 216.170.126.138:443 |
| 2016-01-24 11:03:41 | a844f64f80d4374c7030ebd2ccf79f7c | 5/55 (9.09%)
| Qadars | 216.170.126.138:443 |
| 2016-01-24 11:03:41 | a844f64f80d4374c7030ebd2ccf79f7c | 5/55 (9.09%)
| Qadars | 216.170.126.138:443 |
| 2016-01-23 23:49:31 | 9f299d0ade1b22a8bfc906bf283f12fa | 34/58 (58.62%)
| Qadars | 216.170.126.138:443 |
| 2016-01-23 23:49:31 | 9f299d0ade1b22a8bfc906bf283f12fa | 34/58 (58.62%)
| Qadars | 216.170.126.138:443 |
| 2016-01-23 23:10:02 | 60acb407e3a5dfbaa5bd4b33b79d92ba | 2/55 (3.64%)
| Qadars | 107.161.145.175:443 |
| 2016-01-23 23:10:02 | 60acb407e3a5dfbaa5bd4b33b79d92ba | 2/55 (3.64%)
| Qadars | 107.161.145.175:443 |
| 2016-01-23 11:38:47 | 1c40e655e972caa2adef94be3e433d6b | 4/54 (7.41%)
| Qadars | 107.161.145.175:443 |
| 2016-01-23 11:38:47 | 1c40e655e972caa2adef94be3e433d6b | 4/54 (7.41%)
| Qadars | 107.161.145.175:443 |
| 2016-01-23 08:00:55 | 5af260f1c35cc6d81fb9825962af62df | 6/55 (10.91%)
| Qadars | 107.161.145.175:443 |
| 2016-01-23 08:00:55 | 5af260f1c35cc6d81fb9825962af62df | 6/55 (10.91%)
| Qadars | 107.161.145.175:443 |
| 2016-01-22 16:09:26 | bcb405b821ccf6a6be399c6f63651695 | n/a | Qadars | 185.25.116.98:443 |
| 2016-01-22 16:09:26 | bcb405b821ccf6a6be399c6f63651695 | n/a | Qadars | 185.25.116.98:443 |
| 2016-01-22 12:57:58 | c5e39a02790f3af1596a10345912778f | n/a | Qadars | 216.170.126.138:443 |
| 2016-01-22 12:57:58 | c5e39a02790f3af1596a10345912778f | n/a | Qadars | 216.170.126.138:443 |
| 2016-01-22 10:03:05 | 9fe67f9cd145d1d7eb2d931804c7ba55 | 34/54 (62.96%)
| Qadars | 185.25.116.98:443 |
| 2016-01-22 10:03:05 | 9fe67f9cd145d1d7eb2d931804c7ba55 | 34/54 (62.96%)
| Qadars | 185.25.116.98:443 |
| 2016-01-22 08:16:37 | e73e1ca84ac1e897300b084645020adc | 36/55 (65.45%)
| Qadars | 216.170.126.138:443 |
| 2016-01-22 08:16:37 | e73e1ca84ac1e897300b084645020adc | 36/55 (65.45%)
| Qadars | 216.170.126.138:443 |
| 2016-01-22 06:11:44 | 53123d79b3e1a33bfde42bb884781fef | 3/55 (5.45%)
| Qadars | 185.25.116.98:443 |
| 2016-01-22 06:11:44 | 53123d79b3e1a33bfde42bb884781fef | 3/55 (5.45%)
| Qadars | 185.25.116.98:443 |
# of entries: 28 (max: 100)