JA3 Fingerprints

Here you can browse a list of malicious JA3 fingerprints identified by SSLBL. JA3 is an open source tool used to fingerprint SSL/TLS client applications. In the best case, you can use JA3 to identify malware traffic that is leveraging SSL/TLS.

Caution!

The JA3 fingerprints below have been collected by analysing more than 25,000,000 PCAPs generated by malware samples. These fingerprints have not been tested against known good traffic yet and may cause a significant amount of FPs!

Listing Date (UTC)	JA3 Fingerprint	Listing Reason	Malware Samples
2021-08-03 14:33:44	fc54e0d16d9764783542f0146a98b300	AsyncRAT	25'048
2021-05-27 07:03:24	8515076cbbca9dce33151b798f782456	BitRAT	1'129
2020-04-09 06:48:14	8916410db85077a5460817142dcbc8de	TrickBot	58'110
2020-01-09 14:32:18	fc2299d5b2964cd242c5a2c8c531a5f0	Tofsee	3'866
2020-01-09 14:32:01	c2b4710c6888a5d47befe865c8e6fb19	Tofsee	821
2020-01-09 14:30:41	25d74b7b4b779eb1efd4b31d26d651c6	Tofsee	150
2020-01-09 14:30:27	a50a861119aceb0ccc74902e8fddb618	Tofsee	113
2020-01-09 14:30:05	ffefafdb86336d057eda5fdf02b3d5ce	Tofsee	216
2020-01-09 14:29:48	70722097d1fe1d78d8c2164640ab6df4	Tofsee	3'940
2020-01-09 14:29:30	bffa4501966196d3d6e90cee1f88fc89	Tofsee	173
2020-01-09 14:29:15	534ce2dbc413c68e908363b5df0ae5e0	TrickBot	166
2020-01-09 14:28:57	da949afd9bd6df820730f8f171584a71	Tofsee	231
2020-01-09 14:28:36	c0220cd64849a629397a9cb68f78a0ea	Tofsee	2'854
2020-01-09 14:28:09	08a8a4e85b25ac42e1490bc85cfdb5ce	Tofsee	686
2020-01-09 14:28:00	8f52d1ce303fb4a6515836aec3cc16b1	TrickBot	236
2020-01-09 14:27:48	32926ca3e59f0413d0b98725454594f5	Tofsee	538
2020-01-09 14:27:20	dff8a0aa1c904aaea76c5bf624e88333	Tofsee	678
2020-01-09 14:27:02	d81d654effb94714a4086734fa0adad9	Tofsee	850
2020-01-09 14:26:40	52c7396a501e4fecbdfa99c5408334ac	Tofsee	269
2020-01-09 14:24:44	c5deb9465d47232dd48772f9c4d14679	Tofsee	593
2020-01-09 14:24:31	1aee0238942d453d679fc1e37a303387	Tofsee	763
2020-01-09 14:22:48	807fca46d9d0cf63adf4e5e80e414bbe	Tofsee	1'028
2020-01-09 14:20:16	70a04365be5bbd4653698bebeb43ce68	Tofsee	1'391
2020-01-09 14:19:59	49ed2ef3f1321e5f044f1e71b0e6fdd5	TrickBot	6'636
2020-01-09 14:19:47	e7643725fcff971e3051fe0e47fc2c71	Tofsee	1'477
2020-01-09 14:18:54	1fe4c7a3544eb27afec2adfb3a3dbf60	Tofsee	6'437
2020-01-09 14:17:18	f735bbc6b69723b9df7b0e7ef27872af	TrickBot	7'122
2020-01-09 14:15:15	40adfd923eb82b89d8836ba37a19bca1	CoinMiner	16'668
2019-06-20 14:09:25	1aa7bf8b97e540ca5edd75f7b8384bfa	TrickBot	1'735
2019-05-20 05:19:27	3cda52da4ade09f1f781ad2e82dcfa20	Quakbot	272
2019-05-19 07:24:04	7dd50e112cd23734a310b90f6f44a7cd	Quakbot	25'018
2019-02-22 07:10:33	1be3ecebe5aa9d3654e6e703d81f6928	Ransomware.Troldesh	3'077
2019-02-20 16:10:52	c5235d3a8b9934b7fbbd204d50bc058d	Gootkit	97
2019-02-15 14:07:00	e62a5f4d538cbf169c2af71bec2399b4	TrickBot	30'348
2019-02-14 13:25:15	d2935c58fe676744fecc8614ee5356c7	Adwind	5'244
2018-12-31 07:25:54	decfb48a53789ebe081b88aabb58ee34	Adwind	483
2018-12-17 07:47:19	51c64c77e60f3980eea90869b68c58a8	Dridex	306'756
2018-12-08 09:42:54	cb98a24ee4b9134448ffb5714fd870ac	Dridex	5'145
2018-11-19 11:34:28	34f14a69ad7009ca5863379218af17f3	Tofsee	9
2018-11-19 11:34:25	d76ee64fb7273733cbe455ac81c292e6	Tofsee	2
2018-11-19 11:33:52	8f6c918dcb585ebbea05e2cc94530e3d	Tofsee	12
2018-11-14 12:52:51	1d095e68489d3c535297cd8dffb06cb9	Tofsee	87
2018-11-14 12:52:32	f22bdd57e3a52de86cda40da2d84e83b	Tofsee	49
2018-11-14 12:52:12	fb58831f892190644fe44e25bc830b45	Adware	125
2018-11-14 12:52:01	0cc1e84568e471aa1d62ad4158ade6b5	Tofsee	489
2018-11-14 12:51:34	2092e1fffb45d7e4a19a57f9bc5e203a	Adware	33
2018-11-14 12:51:08	d18a4da84af59e1108862a39bae7c9d4	Tofsee	113
2018-11-14 12:51:05	a61299f9b501adcf680b9275d79d4ac6	Tofsee	50
2018-11-14 12:50:14	b386946a5a44d1ddcc843bc75336dfce	Dridex	10'857
2018-11-14 12:47:08	8991a387e4cc841740f25d6f5139f92d	Adware	28'519
2018-11-14 12:46:40	3d89c0dfb1fa44911b8fa7523ef8dedb	Adware	7'456
2018-11-14 12:46:32	e330bca99c8a5256ae126a55c4c725c5	Adware	5'201
2018-11-14 12:46:21	83e04bc58d402f9633983cbf22724b02	Adware	4'563
2018-11-14 12:46:04	b8f81673c0e1d29908346f3bab892b9b	Adware	4'280
2018-11-14 12:45:56	d551fafc4f40f1dec2bb45980bfa9492	Adware	4'160
2018-11-14 12:45:48	29085f03f8e8a03f0b399c5c7cf0b0b8	Adware	33'883
2018-11-14 12:44:38	51a7ad14509fd614c7bb3a50c4982b8c	JBifrost	2'952
2018-11-14 12:43:48	bc6c386f480ee97b9d9e52d472b772d8	Adware	3'707
2018-11-14 12:43:28	b13d01846ad7a14a70bf030a16775c78	Adware	6'544