SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 8eef8e5d5119d23d259264485fce706df2411e52.
Database Entry
| SHA1 Fingerprint: | 8eef8e5d5119d23d259264485fce706df2411e52 |
|---|---|
| Certificate Common Name (CN): | www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US |
| Issuer Distinguished Name (DN): | www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US |
| TLS Version: | TLS 1.2 |
| First seen: | 2016-12-19 05:59:19 UTC |
| Last seen: | 2016-12-19 13:43:58 UTC |
| Status: | Blacklisted |
| Listing reason: | Gootkit C&C |
| Listing date: | 2016-12-19 14:03:41 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-12-19 13:43:58 | c2237048dc71f021e5dbf0f65f0da482 | n/a | Gootkit | 176.9.238.164:80 |
| 2016-12-19 13:43:58 | c2237048dc71f021e5dbf0f65f0da482 | n/a | Gootkit | 176.9.238.164:80 |
| 2016-12-19 13:23:20 | 8daed9c714e59e3531adf1ee4df2be9e |  24/57 (42.11%)
| 176.9.238.164:80 | |
| 2016-12-19 13:23:20 | 8daed9c714e59e3531adf1ee4df2be9e | 24/57 (42.11%)
| 176.9.238.164:80 | |
| 2016-12-19 08:36:23 | 11bd06d7709ed5d870be64701c452d80 | 19/55 (34.55%)
| Gootkit | 176.9.238.164:80 |
| 2016-12-19 08:36:23 | 11bd06d7709ed5d870be64701c452d80 | 19/55 (34.55%)
| Gootkit | 176.9.238.164:80 |
| 2016-12-19 05:59:19 | 6fe09868346adbc9592d8f5bab69903c | 39/54 (72.22%)
| Gootkit | 176.9.238.164:80 |
| 2016-12-19 05:59:19 | 6fe09868346adbc9592d8f5bab69903c | 39/54 (72.22%)
| Gootkit | 176.9.238.164:80 |
# of entries: 8 (max: 100)