SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint ad8103b5e6150660edb317ad69a93e80370ba9c9.

Database Entry

SHA1 Fingerprint:ad8103b5e6150660edb317ad69a93e80370ba9c9
Certificate Common Name (CN):ina.themanyag.zm
Issuer Distinguished Name (DN):ina.themanyag.zm
TLS Version:TLS 1.2
First seen:2016-04-24 02:56:25 UTC
Last seen:2016-05-18 11:23:38 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-04-24 08:37:53
Malware samples:6
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-05-18 11:23:384a6bdf0688c9f51bc0f9e1d3cbecd476Virustotal results 3/56 (5.36%) Dridex 200.159.128.144:2443
2016-05-18 11:23:384a6bdf0688c9f51bc0f9e1d3cbecd476Virustotal results 3/56 (5.36%) Dridex 200.159.128.144:2443
2016-05-04 23:16:3613b51a69f3344b6ba1441e2cd7d80680Virustotal results 6/56 (10.71%) Dridex 200.159.128.144:2443
2016-05-04 23:16:3613b51a69f3344b6ba1441e2cd7d80680Virustotal results 6/56 (10.71%) Dridex 200.159.128.144:2443
2016-04-30 20:52:32565e429a7cf4b01cb8fc985dd7ca568bVirustotal results 40/57 (70.18%) Dridex 200.159.128.144:2443
2016-04-30 20:52:32565e429a7cf4b01cb8fc985dd7ca568bVirustotal results 40/57 (70.18%) Dridex 200.159.128.144:2443
2016-04-28 08:45:358503d0f6bfa7f6b14a2525f4fa41ddfcVirustotal results 42/57 (73.68%) Dridex 200.159.128.144:2443
2016-04-28 08:45:358503d0f6bfa7f6b14a2525f4fa41ddfcVirustotal results 42/57 (73.68%) Dridex 200.159.128.144:2443
2016-04-27 08:25:010daff4009be44f804b7811d345e30ec2Virustotal results 3/56 (5.36%) Dridex 200.159.128.144:2443
2016-04-27 08:25:010daff4009be44f804b7811d345e30ec2Virustotal results 3/56 (5.36%) Dridex 200.159.128.144:2443
2016-04-24 02:56:25ec58a876ac1e14db49727ec5961c60d9Virustotal results 36/56 (64.29%) Dridex 200.159.128.144:2443
2016-04-24 02:56:25ec58a876ac1e14db49727ec5961c60d9Virustotal results 36/56 (64.29%) Dridex 200.159.128.144:2443

# of entries: 12 (max: 100)