SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 904bf7874ad3930fe57473d00ce8538b4a4f31a8.

Database Entry


SHA1 Fingerprint:904bf7874ad3930fe57473d00ce8538b4a4f31a8
Certificate Common Name (CN):ficnecwxpqwftazmlck.info
Issuer Distinguished Name (DN):ficnecwxpqwftazmlck.info
TLS Version:TLS 1.2
First seen:2016-04-11 05:35:28 UTC
Last seen:2016-04-11 06:27:00 UTC
Status:Blacklisted
Listing reason:Quakbot C&C
Listing date:2016-04-11 06:10:40
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-04-11 06:27:003fa359cba765955c11faf76abdbaa1cfn/aQuakbot5.230.208.16:443
2016-04-11 06:27:003fa359cba765955c11faf76abdbaa1cfn/aQuakbot5.230.208.16:443
2016-04-11 06:26:3945c1def08b01c5aae4c2d178cbc99e8fn/aQuakbot5.230.208.16:443
2016-04-11 06:26:3945c1def08b01c5aae4c2d178cbc99e8fn/aQuakbot5.230.208.16:443
2016-04-11 05:37:578a7b9aa6be8fafe8bbc62377c0ea34c7n/aQuakbot5.230.208.16:443
2016-04-11 05:37:578a7b9aa6be8fafe8bbc62377c0ea34c7n/aQuakbot5.230.208.16:443
2016-04-11 05:35:28f9fd1ab0575b600791edafd646bf40c1n/aQuakbot5.230.208.16:443
2016-04-11 05:35:28f9fd1ab0575b600791edafd646bf40c1n/aQuakbot5.230.208.16:443

# of entries: 8 (max: 100)