SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint a275768461b0ace4a35e3a5f9310437683c0087b.

Database Entry

SHA1 Fingerprint:a275768461b0ace4a35e3a5f9310437683c0087b
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-05-30 15:19:35 UTC
Last seen:2016-06-03 23:10:08 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-06-03 08:22:22
Malware samples:4
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-06-03 23:10:08e5804027e18293a0389b0ca1351c86d9Virustotal results 14/57 (24.56%) Gootkit 198.2.254.188:80
2016-06-03 23:10:08e5804027e18293a0389b0ca1351c86d9Virustotal results 14/57 (24.56%) Gootkit 198.2.254.188:80
2016-06-02 21:20:24173a6bc2a6186a9a80d787160962149dVirustotal results 7/57 (12.28%) Gootkit 198.2.254.188:80
2016-06-02 21:20:24173a6bc2a6186a9a80d787160962149dVirustotal results 7/57 (12.28%) Gootkit 198.2.254.188:80
2016-06-02 17:55:10b7bc1a3ad99971ed16f480895dbd8f11Virustotal results 23/57 (40.35%) Gootkit 198.2.254.188:80
2016-06-02 17:55:10b7bc1a3ad99971ed16f480895dbd8f11Virustotal results 23/57 (40.35%) Gootkit 198.2.254.188:80
2016-05-30 15:19:35c6f11bae44ce505e2547465719090140Virustotal results 17/57 (29.82%) Gootkit 198.2.254.188:80
2016-05-30 15:19:35c6f11bae44ce505e2547465719090140Virustotal results 17/57 (29.82%) Gootkit 198.2.254.188:80

# of entries: 8 (max: 100)