SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6ce3740140128cf5500b56e1b5020bc22de647a1.

Database Entry


SHA1 Fingerprint:6ce3740140128cf5500b56e1b5020bc22de647a1
Certificate Common Name (CN):Thai_lerec.0alermedspaf.guge
Issuer Distinguished Name (DN):Thai_lerec.0alermedspaf.guge
TLS Version:TLS 1.2
First seen:2017-02-02 20:50:02 UTC
Last seen:2017-02-19 20:11:36 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2017-02-06 16:04:58
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2017-02-19 20:11:3612588ae58b33a39dbaed74f41d478db8Virustotal results 19/57 (33.33%) Dridex 91.121.30.169:4431
2017-02-19 20:11:3612588ae58b33a39dbaed74f41d478db8Virustotal results 19/57 (33.33%) Dridex 91.121.30.169:4431
2017-02-04 01:55:0966317f519ce67a86d3fc634b4b8f2aa1Virustotal results 16/57 (28.07%) Dridex 91.121.30.169:4431
2017-02-04 01:55:0966317f519ce67a86d3fc634b4b8f2aa1Virustotal results 16/57 (28.07%) Dridex 91.121.30.169:4431
2017-02-02 20:50:02130917578fb41f7737fa475cc74f7890Virustotal results 13/56 (23.21%) Dridex 91.121.30.169:4431
2017-02-02 20:50:02130917578fb41f7737fa475cc74f7890Virustotal results 13/56 (23.21%) Dridex 91.121.30.169:4431

# of entries: 6 (max: 100)