SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint b22eb2d8681247bcfc5153bf3a7bdaf511e55af5.
Database Entry
| SHA1 Fingerprint: | b22eb2d8681247bcfc5153bf3a7bdaf511e55af5 |
|---|---|
| Certificate Common Name (CN): | brendtsewai.gt |
| Issuer Distinguished Name (DN): | brendtsewai.gt |
| TLS Version: | TLSv1 |
| First seen: | 2015-11-30 16:31:00 UTC |
| Last seen: | 2015-12-08 05:52:07 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-11-30 16:39:42 |
| Malware samples: | 5 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-12-08 05:52:07 | 68f89bf47f74e7804815aa800d4a385a |  27/54 (50.00%)
| Dridex | 42.117.2.85:443 |
| 2015-12-08 05:52:07 | 68f89bf47f74e7804815aa800d4a385a | 27/54 (50.00%)
| Dridex | 42.117.2.85:443 |
| 2015-12-07 15:16:55 | 9b203d747a992990c75d610ae53adc6b | 1/55 (1.82%)
| Dridex | 42.117.2.85:443 |
| 2015-12-07 15:16:55 | 9b203d747a992990c75d610ae53adc6b | 1/55 (1.82%)
| Dridex | 42.117.2.85:443 |
| 2015-12-07 11:14:55 | 44cbd39c6581342252ce1cdd238b2975 | 38/56 (67.86%)
| Dridex | 42.117.2.85:443 |
| 2015-12-07 11:14:55 | 44cbd39c6581342252ce1cdd238b2975 | 38/56 (67.86%)
| Dridex | 42.117.2.85:443 |
| 2015-12-04 14:50:42 | 048b5140b6fe2a84d69859667919d860 | 4/52 (7.69%)
| Dridex | 200.49.169.94:444 |
| 2015-12-04 14:50:42 | 048b5140b6fe2a84d69859667919d860 | 4/52 (7.69%)
| Dridex | 200.49.169.94:444 |
| 2015-11-30 16:31:00 | f41c59b82e16c18b57bdd47844e53414 | 39/55 (70.91%)
| Dridex | 42.117.2.85:443 |
| 2015-11-30 16:31:00 | f41c59b82e16c18b57bdd47844e53414 | 39/55 (70.91%)
| Dridex | 42.117.2.85:443 |
# of entries: 10 (max: 100)