SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 96a345a23ae826bba3c4da2470ac02b40c078ec6.
Database Entry
| SHA1 Fingerprint: | 96a345a23ae826bba3c4da2470ac02b40c078ec6 |
|---|---|
| Certificate Common Name (CN): | www.t617nwmi.com/O=t617nwmi./C=US |
| Issuer Distinguished Name (DN): | www.t617nwmi.com/O=t617nwmi./C=US |
| TLS Version: | TLS 1.2 |
| First seen: | 2015-11-26 06:30:04 UTC |
| Last seen: | 2015-11-26 10:22:56 UTC |
| Status: | Blacklisted |
| Listing reason: | Gootkit C&C |
| Listing date: | 2015-11-26 11:29:03 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-11-26 10:22:56 | 74521c8c58d7f60d2452915c80487658 |  12/56 (21.43%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 10:22:56 | 74521c8c58d7f60d2452915c80487658 | 12/56 (21.43%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 10:10:31 | 1f30e45d42cb4cb9093272050da4dfb9 | 13/55 (23.64%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 10:10:31 | 1f30e45d42cb4cb9093272050da4dfb9 | 13/55 (23.64%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 07:55:17 | 93cd71ddbec22d547beb764ceed79988 | 13/56 (23.21%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 07:55:17 | 93cd71ddbec22d547beb764ceed79988 | 13/56 (23.21%)
| Gootkit | 87.249.215.214:80 |
| 2015-11-26 06:30:22 | 52f0a7222b3680c38c7d1b8c36bf749e | n/a | 87.249.215.214:80 | |
| 2015-11-26 06:30:22 | 52f0a7222b3680c38c7d1b8c36bf749e | n/a | 87.249.215.214:80 |
# of entries: 8 (max: 100)