SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint e8cc06a8b19072660db72229be2c80b48336852e.

Database Entry


SHA1 Fingerprint:e8cc06a8b19072660db72229be2c80b48336852e
Certificate Common Name (CN):nexuslogger.com
Issuer Distinguished Name (DN):Let's Encrypt Authority X3
TLS Version:TLSv1
First seen:2017-08-17 03:15:20 UTC
Last seen:2017-09-01 12:35:33 UTC
Status:Blacklisted
Listing reason:Nexuslogger C&C
Listing date:2017-08-29 09:30:31
Malware samples:5
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2017-09-01 12:35:33c9601ad9e6be1b598780f7aa31dbc512Virustotal results 46/65 (70.77%) Nexuslogger185.153.229.59:443
2017-09-01 12:35:33c9601ad9e6be1b598780f7aa31dbc512Virustotal results 46/65 (70.77%) Nexuslogger185.153.229.59:443
2017-08-30 14:50:337adff34317cd4a8362508a001937ed89Virustotal results 26/65 (40.00%) Nexuslogger185.153.229.59:443
2017-08-30 14:50:337adff34317cd4a8362508a001937ed89Virustotal results 26/65 (40.00%) Nexuslogger185.153.229.59:443
2017-08-29 17:13:35afa2ddd477e2a407833c5bcc8e84ead5Virustotal results 29/64 (45.31%) Nexuslogger185.153.229.59:443
2017-08-29 17:13:35afa2ddd477e2a407833c5bcc8e84ead5Virustotal results 29/64 (45.31%) Nexuslogger185.153.229.59:443
2017-08-21 03:11:19da4100ee401f2fe899de87820f878a94Virustotal results 22/64 (34.38%) Nexuslogger185.153.229.59:443
2017-08-21 03:11:19da4100ee401f2fe899de87820f878a94Virustotal results 22/64 (34.38%) Nexuslogger185.153.229.59:443
2017-08-17 03:16:022993f76b2200697200e5c6f28ffbb513Virustotal results 37/63 (58.73%) Nexuslogger185.153.229.59:443
2017-08-17 03:16:022993f76b2200697200e5c6f28ffbb513Virustotal results 37/63 (58.73%) Nexuslogger185.153.229.59:443

# of entries: 10 (max: 100)