SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d0b3d0f104339bb28ef3f16e6a321f44613411a7.

Database Entry


SHA1 Fingerprint:d0b3d0f104339bb28ef3f16e6a321f44613411a7
Certificate Common Name (CN):dedeasoumeb.nc
Issuer Distinguished Name (DN):dedeasoumeb.nc
TLS Version:SSLv3
First seen:2015-07-21 19:48:19 UTC
Last seen:2015-07-22 08:56:55 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-07-22 06:05:20
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-22 08:56:5562becdcdba98de451a8f9a0c91c0e06fVirustotal results 6/55 (10.91%) Dridex 68.169.49.213:448
2015-07-22 08:56:5562becdcdba98de451a8f9a0c91c0e06fVirustotal results 6/55 (10.91%) Dridex 68.169.49.213:448
2015-07-21 19:48:19c21c3949af559dccd2ef2d548c6ea0a7Virustotal results 31/56 (55.36%) Dridex 68.169.49.213:448
2015-07-21 19:48:19c21c3949af559dccd2ef2d548c6ea0a7Virustotal results 31/56 (55.36%) Dridex 68.169.49.213:448

# of entries: 4 (max: 100)