SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint e7ad528a97a48086ccd53a37bcdd91d46dfeb2d0.
Database Entry
| SHA1 Fingerprint: | e7ad528a97a48086ccd53a37bcdd91d46dfeb2d0 |
|---|---|
| Certificate Common Name (CN): | vofjvkawq.org |
| Issuer Distinguished Name (DN): | vofjvkawq.org |
| TLS Version: | TLS 1.2 |
| First seen: | 2016-04-15 20:37:29 UTC |
| Last seen: | 2016-04-19 02:14:38 UTC |
| Status: | Blacklisted |
| Listing reason: | Quakbot C&C |
| Listing date: | 2016-04-16 07:16:01 |
| Malware samples: | 10 |
| Botnet C&Cs: | 5 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-04-19 02:14:38 | a1c925136b8b831915363b1f92dd758e |  40/57 (70.18%)
| Quakbot | 104.223.125.163:443 |
| 2016-04-19 02:14:38 | a1c925136b8b831915363b1f92dd758e | 40/57 (70.18%)
| Quakbot | 104.223.125.163:443 |
| 2016-04-18 05:20:16 | 2502e34a99b18b13dafc95953deb89cd | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-18 05:20:16 | 2502e34a99b18b13dafc95953deb89cd | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-17 08:35:18 | 3fc15b68f92e6568d6f0663d0ccbfd23 | n/a | Quakbot | 136.243.124.143:443 |
| 2016-04-17 08:35:18 | 3fc15b68f92e6568d6f0663d0ccbfd23 | n/a | Quakbot | 136.243.124.143:443 |
| 2016-04-16 14:57:23 | dccd53430d48611a21a33888e083d5bb | n/a | Quakbot | 168.235.89.81:443 |
| 2016-04-16 14:57:23 | dccd53430d48611a21a33888e083d5bb | n/a | Quakbot | 168.235.89.81:443 |
| 2016-04-16 14:55:59 | d57cffb3aca061628b52ee9a648a88b3 | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-16 14:55:59 | d57cffb3aca061628b52ee9a648a88b3 | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-16 10:23:53 | 1691a774898f5ceed0ccd9c6ec04d7bc | n/a | Quakbot | 162.217.248.241:443 |
| 2016-04-16 10:23:53 | 1691a774898f5ceed0ccd9c6ec04d7bc | n/a | Quakbot | 162.217.248.241:443 |
| 2016-04-16 09:56:22 | 43c337dd2c506d58a2f9d6d35dd9e63e | 30/57 (52.63%)
| Quakbot | 204.44.102.217:443 |
| 2016-04-16 09:56:22 | 43c337dd2c506d58a2f9d6d35dd9e63e | 30/57 (52.63%)
| Quakbot | 204.44.102.217:443 |
| 2016-04-16 08:26:16 | 199f2f7c044dde00beda714ee86223e1 | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-16 08:26:16 | 199f2f7c044dde00beda714ee86223e1 | n/a | Quakbot | 104.223.125.163:443 |
| 2016-04-16 08:20:33 | 3d13e03541c2d6e6e05c8216347ed573 | n/a | Quakbot | 204.44.102.217:443 |
| 2016-04-16 08:20:33 | 3d13e03541c2d6e6e05c8216347ed573 | n/a | Quakbot | 204.44.102.217:443 |
| 2016-04-15 20:37:29 | 7e52b9c94308e4b9138f483c7b041bb7 | n/a | Quakbot | 204.44.102.217:443 |
| 2016-04-15 20:37:29 | 7e52b9c94308e4b9138f483c7b041bb7 | n/a | Quakbot | 204.44.102.217:443 |
# of entries: 20 (max: 100)