SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b20d20ac3b2492f11a2775d800fd726e14fc6fa6.

Database Entry


SHA1 Fingerprint:b20d20ac3b2492f11a2775d800fd726e14fc6fa6
Certificate Common Name (CN):microsoft.com/emailAddress=private@sysprivpop.lkdd
Issuer Distinguished Name (DN):microsoft.com/emailAddress=private@sysprivpop.lkdd
TLS Version:TLSv1
First seen:2016-04-14 06:05:37 UTC
Last seen:2017-04-24 16:51:13 UTC
Status:Blacklisted
Listing reason:Qadars C&C
Listing date:2016-04-14 10:29:17
Malware samples:205
Botnet C&Cs:74

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2017-04-24 16:51:13413198e0c3bd95f4e8f67bff990c6e9cVirustotal results 26/61 (42.62%) 188.124.170.93:443
2017-04-24 16:51:13413198e0c3bd95f4e8f67bff990c6e9cVirustotal results 26/61 (42.62%) 188.124.170.93:443
2017-03-19 06:13:106acdca2d1cf4a3b182889c7635fbc4d0Virustotal results 7/59 (11.86%) Qadars 175.136.183.22:443
2017-03-19 06:13:106acdca2d1cf4a3b182889c7635fbc4d0Virustotal results 7/59 (11.86%) Qadars 175.136.183.22:443
2017-03-18 22:38:097bd2de2cb765907bb4ed320e812e4c21Virustotal results 13/62 (20.97%) Qadars 183.87.11.253:443
2017-03-18 22:38:097bd2de2cb765907bb4ed320e812e4c21Virustotal results 13/62 (20.97%) Qadars 183.87.11.253:443
2017-03-01 05:02:07489be1c5793608b66d692e76586a1a6dVirustotal results 4/58 (6.90%) Qadars 195.174.126.121:443
2017-03-01 05:02:07489be1c5793608b66d692e76586a1a6dVirustotal results 4/58 (6.90%) Qadars 195.174.126.121:443
2017-02-27 01:16:25758b56d450d499d22231b7d6d383a9d1Virustotal results 35/58 (60.34%) Qadars 85.85.140.82:443
2017-02-27 01:16:25758b56d450d499d22231b7d6d383a9d1Virustotal results 35/58 (60.34%) Qadars 85.85.140.82:443
2017-02-27 00:52:505529b0f8acda5eda29cd57fe0614c6acVirustotal results 22/58 (37.93%) Qadars 85.85.140.82:443
2017-02-27 00:52:505529b0f8acda5eda29cd57fe0614c6acVirustotal results 22/58 (37.93%) Qadars 85.85.140.82:443
2017-02-24 15:04:234056ea1636848696d0f7b3c8f35c1ad5Virustotal results 38/60 (63.33%) Qadars 171.61.232.165:443
2017-02-24 15:04:234056ea1636848696d0f7b3c8f35c1ad5Virustotal results 38/60 (63.33%) Qadars 171.61.232.165:443
2017-02-14 15:21:277f62695b3f64aa0e1585a0e080f6b1bcVirustotal results 28/58 (48.28%) Qadars 85.104.229.104:443
2017-02-14 15:21:277f62695b3f64aa0e1585a0e080f6b1bcVirustotal results 28/58 (48.28%) Qadars 85.104.229.104:443
2017-02-13 18:57:38f851d1da7554abe6a19d3f678642d7bbVirustotal results 35/59 (59.32%) Qadars 85.101.189.216:443
2017-02-13 18:57:38f851d1da7554abe6a19d3f678642d7bbVirustotal results 35/59 (59.32%) Qadars 85.101.189.216:443
2017-02-11 13:43:26dc77de4a7812adc24ab1624b9e629b68Virustotal results 7/56 (12.50%) Qadars 125.26.255.230:443
2017-02-11 13:43:26dc77de4a7812adc24ab1624b9e629b68Virustotal results 7/56 (12.50%) Qadars 125.26.255.230:443
2017-01-29 23:08:45fdeb6c840992704c5f0c8c610c213a63Virustotal results 29/57 (50.88%) Qadars 62.221.97.151:443
2017-01-29 23:08:45fdeb6c840992704c5f0c8c610c213a63Virustotal results 29/57 (50.88%) Qadars 62.221.97.151:443
2017-01-21 08:15:56a113db2e591af2bd3d664c3eeba64d48Virustotal results 20/54 (37.04%) Qadars 5.239.214.127:443
2017-01-21 08:15:56a113db2e591af2bd3d664c3eeba64d48Virustotal results 20/54 (37.04%) Qadars 5.239.214.127:443
2017-01-10 21:00:26ece55c222dfbdc1ee0725aba30d13ab1Virustotal results 29/58 (50.00%) Qadars 46.11.36.216:443
2017-01-10 21:00:26ece55c222dfbdc1ee0725aba30d13ab1Virustotal results 29/58 (50.00%) Qadars 46.11.36.216:443
2017-01-10 05:03:23c6e7df7de2bb51132cdfdd2d1f5c1c71Virustotal results 2/56 (3.57%) Qadars 222.254.22.64:443
2017-01-10 05:03:23c6e7df7de2bb51132cdfdd2d1f5c1c71Virustotal results 2/56 (3.57%) Qadars 222.254.22.64:443
2017-01-08 06:38:38f85dbc57af16ff29e7be1fb7fffdaf82Virustotal results 6/56 (10.71%) Qadars 114.37.52.2:443
2017-01-08 06:38:38f85dbc57af16ff29e7be1fb7fffdaf82Virustotal results 6/56 (10.71%) Qadars 114.37.52.2:443
2016-12-28 11:49:20a896bb6b9c28369afeedbb3e7642bcc4Virustotal results 13/55 (23.64%) Qadars 85.85.138.188:443
2016-12-28 11:49:20a896bb6b9c28369afeedbb3e7642bcc4Virustotal results 13/55 (23.64%) Qadars 85.85.138.188:443
2016-12-27 11:10:171fdb4be497173eec3065ea6eb2baacbeVirustotal results 41/55 (74.55%) Qadars 80.112.73.129:443
2016-12-27 11:10:171fdb4be497173eec3065ea6eb2baacbeVirustotal results 41/55 (74.55%) Qadars 80.112.73.129:443
2016-12-10 01:38:00b5c1c8c31fa729eb6e2ce609d2daf8efVirustotal results 18/53 (33.96%) Qadars 79.100.73.20:443
2016-12-10 01:38:00b5c1c8c31fa729eb6e2ce609d2daf8efVirustotal results 18/53 (33.96%) Qadars 79.100.73.20:443
2016-12-01 06:40:326ddb243286dc52f529460b5c1992b184Virustotal results 4/56 (7.14%) Qadars 151.242.20.227:443
2016-12-01 06:40:326ddb243286dc52f529460b5c1992b184Virustotal results 4/56 (7.14%) Qadars 151.242.20.227:443
2016-11-29 21:51:00e3ba29a8d1ba84ee1dd801079f65097eVirustotal results 10/56 (17.86%) Qadars 184.18.128.137:443
2016-11-29 21:51:00e3ba29a8d1ba84ee1dd801079f65097eVirustotal results 10/56 (17.86%) Qadars 184.18.128.137:443
2016-11-27 21:59:383f6f80b4ca2cc61c34d5daf43e189232Virustotal results 11/56 (19.64%) Qadars 88.246.171.125:443
2016-11-27 21:59:383f6f80b4ca2cc61c34d5daf43e189232Virustotal results 11/56 (19.64%) Qadars 88.246.171.125:443
2016-11-26 14:51:16e2648cab691787ef1677597f08b43c1cVirustotal results 11/56 (19.64%) Qadars 107.171.180.198:443
2016-11-26 14:51:16e2648cab691787ef1677597f08b43c1cVirustotal results 11/56 (19.64%) Qadars 107.171.180.198:443
2016-11-24 18:51:3326c890233151302c842e6e8d215acabdVirustotal results 5/57 (8.77%) Qadars 2.89.220.124:443
2016-11-24 18:51:3326c890233151302c842e6e8d215acabdVirustotal results 5/57 (8.77%) Qadars 2.89.220.124:443
2016-11-23 01:37:020a3c401a3a6bd860ca361d9117491dadn/aQadars 71.228.17.79:443
2016-11-23 01:37:020a3c401a3a6bd860ca361d9117491dadn/aQadars 71.228.17.79:443
2016-11-21 19:40:52873ad60c46ce695cfdd717c079ae351cn/aQadars 188.214.179.241:443
2016-11-21 19:40:52873ad60c46ce695cfdd717c079ae351cn/aQadars 188.214.179.241:443
2016-11-20 02:08:066ca0dcbe4353694397ae548ed9173d24n/aQadars 178.128.197.167:443
2016-11-20 02:08:066ca0dcbe4353694397ae548ed9173d24n/aQadars 178.128.197.167:443
2016-11-18 19:12:112b33238f019f5345dff90999dc665325Virustotal results 22/57 (38.60%) Qadars 41.188.91.188:443
2016-11-18 19:12:112b33238f019f5345dff90999dc665325Virustotal results 22/57 (38.60%) Qadars 41.188.91.188:443
2016-11-17 08:59:37bf116446a681fd1f13562e5675b0e00cVirustotal results 31/56 (55.36%) Qadars 116.100.211.197:443
2016-11-17 08:59:37bf116446a681fd1f13562e5675b0e00cVirustotal results 31/56 (55.36%) Qadars 116.100.211.197:443
2016-11-16 22:21:13e9173aadd7ecadbbced5471bbc0f6785Virustotal results 33/57 (57.89%) Qadars 83.20.96.160:443
2016-11-16 22:21:13e9173aadd7ecadbbced5471bbc0f6785Virustotal results 33/57 (57.89%) Qadars 83.20.96.160:443
2016-11-15 22:32:217021c765e7d09c36a620625141f505a4Virustotal results 26/56 (46.43%) Qadars 78.8.109.89:443
2016-11-15 22:32:217021c765e7d09c36a620625141f505a4Virustotal results 26/56 (46.43%) Qadars 78.8.109.89:443
2016-11-15 22:25:55d10e4caf9d9a4b9c7c10a9f21a857d54Virustotal results 28/57 (49.12%) Qadars 76.69.91.161:443
2016-11-15 22:25:55d10e4caf9d9a4b9c7c10a9f21a857d54Virustotal results 28/57 (49.12%) Qadars 76.69.91.161:443
2016-11-15 10:55:21f7b08b8ad40f9eface7e4966625f5b88Virustotal results 31/54 (57.41%) Qadars 79.129.123.204:443
2016-11-15 10:55:21f7b08b8ad40f9eface7e4966625f5b88Virustotal results 31/54 (57.41%) Qadars 79.129.123.204:443
2016-11-14 09:34:59653bf7d1a31825fc40a666adadb3a007Virustotal results 19/66 (28.79%) Qadars 122.164.197.0:443
2016-11-14 09:34:59653bf7d1a31825fc40a666adadb3a007Virustotal results 19/66 (28.79%) Qadars 122.164.197.0:443
2016-10-27 14:12:31d4903558af8f0a5d7efbe25685558476Virustotal results 40/57 (70.18%) Qadars 82.77.104.71:443
2016-10-27 14:12:31d4903558af8f0a5d7efbe25685558476Virustotal results 40/57 (70.18%) Qadars 82.77.104.71:443
2016-10-27 11:00:35d6f14f29c4859d648fa6d08e66a79d96Virustotal results 38/57 (66.67%) Qadars 197.27.36.50:443
2016-10-27 11:00:35d6f14f29c4859d648fa6d08e66a79d96Virustotal results 38/57 (66.67%) Qadars 197.27.36.50:443
2016-10-27 08:42:59136ec33c5f32dade4fd0987a67c3c860Virustotal results 36/57 (63.16%) Qadars 105.228.99.40:443
2016-10-27 08:42:59136ec33c5f32dade4fd0987a67c3c860Virustotal results 36/57 (63.16%) Qadars 105.228.99.40:443
2016-10-26 23:27:175237553d53ae88e02184819a2f317fb3Virustotal results 19/56 (33.93%) Qadars 187.199.114.3:443
2016-10-26 23:27:175237553d53ae88e02184819a2f317fb3Virustotal results 19/56 (33.93%) Qadars 187.199.114.3:443
2016-10-25 19:09:16ce520c23e2349802e555851bfdabacf8Virustotal results 4/57 (7.02%) Qadars 151.237.6.68:443
2016-10-25 19:09:16ce520c23e2349802e555851bfdabacf8Virustotal results 4/57 (7.02%) Qadars 151.237.6.68:443
2016-10-25 08:05:257f4ac06b764fe9be49870dddbc606fa0Virustotal results 26/57 (45.61%) Qadars 182.72.222.14:443
2016-10-25 08:05:257f4ac06b764fe9be49870dddbc606fa0Virustotal results 26/57 (45.61%) Qadars 182.72.222.14:443
2016-10-25 05:20:241ec85843d06afd7dc359e4523dbd8772Virustotal results 34/56 (60.71%) Qadars 82.77.104.71:443
2016-10-25 05:20:241ec85843d06afd7dc359e4523dbd8772Virustotal results 34/56 (60.71%) Qadars 82.77.104.71:443
2016-10-25 03:38:370b13acfe900a2b1a9cb4d7d7553a2377Virustotal results 38/57 (66.67%) Qadars 178.149.68.20:443
2016-10-25 03:38:370b13acfe900a2b1a9cb4d7d7553a2377Virustotal results 38/57 (66.67%) Qadars 178.149.68.20:443
2016-10-24 20:18:5088c1ee553486175b82df8660d6b0d834Virustotal results 40/57 (70.18%) Qadars 2.176.118.127:443
2016-10-24 20:18:5088c1ee553486175b82df8660d6b0d834Virustotal results 40/57 (70.18%) Qadars 2.176.118.127:443
2016-10-21 03:47:17e1a13bc49ff020cdd493145cf8e2ff6bVirustotal results 10/56 (17.86%) Qadars 91.244.19.186:443
2016-10-21 03:47:17e1a13bc49ff020cdd493145cf8e2ff6bVirustotal results 10/56 (17.86%) Qadars 91.244.19.186:443
2016-10-10 22:41:41dbf530bb862393e0917c5cc738a39d51Virustotal results 25/56 (44.64%) Qadars 189.49.185.126:443
2016-10-10 22:41:41dbf530bb862393e0917c5cc738a39d51Virustotal results 25/56 (44.64%) Qadars 189.49.185.126:443
2016-10-02 21:02:3562b0788149b545e88d88b31333a5e89dVirustotal results 25/57 (43.86%) Qadars 173.89.28.70:443
2016-10-02 21:02:3562b0788149b545e88d88b31333a5e89dVirustotal results 25/57 (43.86%) Qadars 173.89.28.70:443
2016-10-02 16:10:10a93f1c37371a012ed73e4fa3a0c27faaVirustotal results 30/57 (52.63%) Qadars 31.43.41.51:443
2016-10-02 16:10:10a93f1c37371a012ed73e4fa3a0c27faaVirustotal results 30/57 (52.63%) Qadars 31.43.41.51:443
2016-09-25 14:30:56d6e0d558f6a6179bc362e4114f330c58Virustotal results 16/57 (28.07%) Qadars 190.161.133.235:443
2016-09-25 14:30:56d6e0d558f6a6179bc362e4114f330c58Virustotal results 16/57 (28.07%) Qadars 190.161.133.235:443
2016-09-25 01:08:07e0cd44b4b2491cafa3a7d49f03e804edVirustotal results 31/56 (55.36%) Qadars 188.246.91.173:443
2016-09-25 01:08:07e0cd44b4b2491cafa3a7d49f03e804edVirustotal results 31/56 (55.36%) Qadars 188.246.91.173:443
2016-09-22 09:08:081b572ea217d94157689fa137fcbb38c7Virustotal results 6/56 (10.71%) Qadars 151.237.6.68:443
2016-09-22 09:08:081b572ea217d94157689fa137fcbb38c7Virustotal results 6/56 (10.71%) Qadars 151.237.6.68:443
2016-09-20 19:43:548c482d0f981a97e761f96c8fd6aa8ae4Virustotal results 29/56 (51.79%) Qadars 186.176.140.17:443
2016-09-20 19:43:548c482d0f981a97e761f96c8fd6aa8ae4Virustotal results 29/56 (51.79%) Qadars 186.176.140.17:443

# of entries: 100 (max: 100)