SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint d5f034953ca1c9e50a6c0c45473ae021d6fe7e93.
Database Entry
| SHA1 Fingerprint: | d5f034953ca1c9e50a6c0c45473ae021d6fe7e93 |
|---|---|
| Certificate Common Name (CN): | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd |
| Issuer Distinguished Name (DN): | C=AU, ST=Some-State, O=Internet Widgits Pty Ltd |
| TLS Version: | TLSv1 |
| First seen: | 2015-05-14 10:43:09 UTC |
| Last seen: | 2015-05-18 05:28:09 UTC |
| Status: | Blacklisted |
| Listing reason: | Ransomware C&C |
| Listing date: | 2015-05-14 14:43:36 |
| Malware samples: | 10 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-05-18 05:28:09 | 32cbc91a7ddb24a1a1d7762036c32223 | n/a | 146.120.110.147:443 | |
| 2015-05-18 05:28:09 | 32cbc91a7ddb24a1a1d7762036c32223 | n/a | 146.120.110.147:443 | |
| 2015-05-18 05:27:28 | 17d12cb8a3675f47816fad136574cf5d |  1/57 (1.75%)
| 146.120.110.147:443 | |
| 2015-05-18 05:27:28 | 17d12cb8a3675f47816fad136574cf5d | 1/57 (1.75%)
| 146.120.110.147:443 | |
| 2015-05-17 17:51:42 | 68b2a3f016aa51970c6a561b5fde4d9a | n/a | 146.120.110.147:443 | |
| 2015-05-17 17:51:42 | 68b2a3f016aa51970c6a561b5fde4d9a | n/a | 146.120.110.147:443 | |
| 2015-05-17 17:44:53 | 2d91e516eb4ea85d768d6bf31f2f515c | 27/57 (47.37%)
| 146.120.110.147:443 | |
| 2015-05-17 17:44:53 | 2d91e516eb4ea85d768d6bf31f2f515c | 27/57 (47.37%)
| 146.120.110.147:443 | |
| 2015-05-17 13:06:44 | 7135cbd0e518b292bacd2e6ad8cdb163 | 32/57 (56.14%)
| 146.120.110.147:443 | |
| 2015-05-17 13:06:44 | 7135cbd0e518b292bacd2e6ad8cdb163 | 32/57 (56.14%)
| 146.120.110.147:443 | |
| 2015-05-16 16:04:11 | a2c2ef9ebcd685ce70690196dc4d9ca9 | 25/57 (43.86%)
| 146.120.110.147:443 | |
| 2015-05-16 16:04:11 | a2c2ef9ebcd685ce70690196dc4d9ca9 | 25/57 (43.86%)
| 146.120.110.147:443 | |
| 2015-05-16 14:28:11 | 67c3aa6ae715e1e1450ec94e547ed8fa | 30/56 (53.57%)
| Ransomware | 146.120.110.147:443 |
| 2015-05-16 14:28:11 | 67c3aa6ae715e1e1450ec94e547ed8fa | 30/56 (53.57%)
| Ransomware | 146.120.110.147:443 |
| 2015-05-16 10:31:23 | 2a6ff5de0acc38413554d51572235d10 | 35/57 (61.40%)
| 146.120.110.147:443 | |
| 2015-05-16 10:31:23 | 2a6ff5de0acc38413554d51572235d10 | 35/57 (61.40%)
| 146.120.110.147:443 | |
| 2015-05-15 10:08:00 | f7198b3453133658dd9300c957c0e85c | 29/56 (51.79%)
| 146.120.110.147:443 | |
| 2015-05-15 10:08:00 | f7198b3453133658dd9300c957c0e85c | 29/56 (51.79%)
| 146.120.110.147:443 | |
| 2015-05-14 10:43:09 | ef113e53ac990e12d2b7ae0d87c4d7af | 19/57 (33.33%)
| Ransomware | 146.120.110.147:443 |
| 2015-05-14 10:43:09 | ef113e53ac990e12d2b7ae0d87c4d7af | 19/57 (33.33%)
| Ransomware | 146.120.110.147:443 |
# of entries: 20 (max: 100)