JA3 Fingerprints

Here you can browse a list of malicious JA3 fingerprints identified by SSLBL. JA3 is an open source tool used to fingerprint SSL/TLS client applications. In the best case, you can use JA3 to identify malware traffic that is leveraging SSL/TLS.

Listing Date (UTC)JA3 FingerprintListing ReasonMalware Samples
2021-08-03 14:33:44fc54e0d16d9764783542f0146a98b300AsyncRAT4'704
2021-05-27 07:03:248515076cbbca9dce33151b798f782456BitRAT896
2020-04-09 06:48:148916410db85077a5460817142dcbc8deTrickBot47'234
2020-01-09 14:32:18fc2299d5b2964cd242c5a2c8c531a5f0Tofsee3'865
2020-01-09 14:32:01c2b4710c6888a5d47befe865c8e6fb19Tofsee632
2020-01-09 14:30:4125d74b7b4b779eb1efd4b31d26d651c6Tofsee150
2020-01-09 14:30:27a50a861119aceb0ccc74902e8fddb618Tofsee113
2020-01-09 14:30:05ffefafdb86336d057eda5fdf02b3d5ceTofsee216
2020-01-09 14:29:4870722097d1fe1d78d8c2164640ab6df4Tofsee3'905
2020-01-09 14:29:30bffa4501966196d3d6e90cee1f88fc89Tofsee173
2020-01-09 14:29:15534ce2dbc413c68e908363b5df0ae5e0TrickBot166
2020-01-09 14:28:57da949afd9bd6df820730f8f171584a71Tofsee230
2020-01-09 14:28:36c0220cd64849a629397a9cb68f78a0eaTofsee2'608
2020-01-09 14:28:0908a8a4e85b25ac42e1490bc85cfdb5ceTofsee686
2020-01-09 14:28:008f52d1ce303fb4a6515836aec3cc16b1TrickBot236
2020-01-09 14:27:4832926ca3e59f0413d0b98725454594f5Tofsee538
2020-01-09 14:27:20dff8a0aa1c904aaea76c5bf624e88333Tofsee678