SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint fcf57e831a5fe834b0cd2540d1c19af71baf21a1.

Database Entry


SHA1 Fingerprint:fcf57e831a5fe834b0cd2540d1c19af71baf21a1
Certificate Common Name (CN):example.com
Issuer Distinguished Name (DN):example.com
TLS Version:TLS 1.2
First seen:2018-01-18 11:17:46 UTC
Last seen:2018-01-18 19:22:05 UTC
Status:Blacklisted
Listing reason:TrickBot C&C
Listing date:2018-01-18 12:27:29
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-01-18 19:22:051cd51aa2798d914ef31d173e885f1ae5Virustotal results 36/66 (54.55%) TrickBot 94.250.252.22:443
2018-01-18 19:22:051cd51aa2798d914ef31d173e885f1ae5Virustotal results 36/66 (54.55%) TrickBot 94.250.252.22:443
2018-01-18 19:22:051cd51aa2798d914ef31d173e885f1ae5Virustotal results 36/66 (54.55%) TrickBot 94.250.252.22:443
2018-01-18 19:22:051cd51aa2798d914ef31d173e885f1ae5Virustotal results 36/66 (54.55%) TrickBot 94.250.252.22:443
2018-01-18 11:17:463a5ec84759551e63f9e9500d2351cc04Virustotal results 31/68 (45.59%) TrickBot 94.250.252.22:443
2018-01-18 11:17:463a5ec84759551e63f9e9500d2351cc04Virustotal results 31/68 (45.59%) TrickBot 94.250.252.22:443
2018-01-18 11:17:463a5ec84759551e63f9e9500d2351cc04Virustotal results 31/68 (45.59%) TrickBot 94.250.252.22:443
2018-01-18 11:17:463a5ec84759551e63f9e9500d2351cc04Virustotal results 31/68 (45.59%) TrickBot 94.250.252.22:443

# of entries: 8 (max: 100)