SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 40e74305790c9e5b761156746126d961d029231c.

Database Entry


SHA1 Fingerprint:40e74305790c9e5b761156746126d961d029231c
Certificate Common Name (CN):ttintourv.do
Issuer Distinguished Name (DN):ttintourv.do
TLS Version:TLS 1.2
First seen:2015-07-10 18:13:33 UTC
Last seen:2015-07-12 16:57:33 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-07-13 07:26:19
Malware samples:5
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-12 16:57:33c35724366b56798cb9d084d8c3a4fc56n/aDridex 176.9.118.201:449
2015-07-12 16:57:33c35724366b56798cb9d084d8c3a4fc56n/aDridex 176.9.118.201:449
2015-07-11 23:55:21db25a869ba7a14806cb917625f46be07Virustotal results 0/55 (0.00%) Dridex 176.9.118.201:449
2015-07-11 23:55:21db25a869ba7a14806cb917625f46be07Virustotal results 0/55 (0.00%) Dridex 176.9.118.201:449
2015-07-11 18:38:28587803ef6da656ee38ab93a0ea091babVirustotal results 3/56 (5.36%) Dridex 176.9.118.201:449
2015-07-11 18:38:28587803ef6da656ee38ab93a0ea091babVirustotal results 3/56 (5.36%) Dridex 176.9.118.201:449
2015-07-11 14:23:041f23f467f12ca8f523e76d6953a0148bVirustotal results 4/55 (7.27%) Dridex 176.9.118.201:449
2015-07-11 14:23:041f23f467f12ca8f523e76d6953a0148bVirustotal results 4/55 (7.27%) Dridex 176.9.118.201:449
2015-07-10 18:13:33a3144ab525c8976947a941bcce7945dbVirustotal results 2/56 (3.57%) 176.9.118.201:449
2015-07-10 18:13:33a3144ab525c8976947a941bcce7945dbVirustotal results 2/56 (3.57%) 176.9.118.201:449

# of entries: 10 (max: 100)