JA3 Fingerprints
You can find further information about the JA3 fingerprint 0cc1e84568e471aa1d62ad4158ade6b5, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | 0cc1e84568e471aa1d62ad4158ade6b5 |
|---|---|
| First seen: | 2018-06-24 10:50:47 UTC |
| Last seen: | 2021-06-21 02:35:57 UTC |
| Status: | Blacklisted |
| Malware samples: | 298 |
| Destination IPs: | 197 |
| Malware: | Tofsee  |
| Listing date: | 2018-11-14 12:52:01 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2024-04-14 10:30:37 | fee22d83afd92b6fff8544cc976c347a | n/a | 193.246.8.224:443 |
| 2024-04-14 10:30:37 | fee22d83afd92b6fff8544cc976c347a | n/a | 68.232.34.200:443 |
| 2024-04-14 10:30:37 | fee22d83afd92b6fff8544cc976c347a | n/a | 15.197.228.107:443 |
| 2024-04-14 00:32:57 | e6534cfaa4d4b0bd34398060855c0ac7 | n/a | 104.166.182.99:443 |
| 2024-04-14 00:32:57 | e6534cfaa4d4b0bd34398060855c0ac7 | n/a | 163.181.49.250:443 |
| 2024-04-13 16:28:38 | d1f8c0c7eaf024f84b11d7f19c9920c9 | n/a | 13.107.42.22:443 |
| 2024-04-03 12:17:32 | 055ec270285537f6f89d9b5c94333404 |  2 / 70 (2.86%)
| 152.199.23.214:443 |
| 2024-04-01 16:21:54 | 07d0100bdf118829e41188a22ebded65 | 14 / 70 (20.00%)
| 184.30.158.37:443 |
| 2024-04-01 16:21:54 | 07d0100bdf118829e41188a22ebded65 | 14 / 70 (20.00%)
| 68.232.34.200:443 |
| 2024-04-01 16:21:54 | 07d0100bdf118829e41188a22ebded65 | 14 / 70 (20.00%)
| 3.33.231.75:443 |
| 2024-04-01 12:15:11 | 1f5a70ee02b8187e1778b75eb5065ff2 | 15 / 70 (21.43%)
| 15.197.228.107:443 |
| 2024-04-01 12:15:11 | 1f5a70ee02b8187e1778b75eb5065ff2 | 15 / 70 (21.43%)
| 193.246.8.224:443 |
| 2024-04-01 12:15:11 | 1f5a70ee02b8187e1778b75eb5065ff2 | 15 / 70 (21.43%)
| 68.232.34.200:443 |
| 2024-03-21 12:51:16 | 21193bb6223e3f0b4159d075435f8364 | n/a | 15.197.228.107:443 |
| 2024-03-21 12:51:16 | 21193bb6223e3f0b4159d075435f8364 | n/a | 104.99.233.107:443 |
| 2024-03-21 12:51:15 | 21193bb6223e3f0b4159d075435f8364 | n/a | 68.232.34.200:443 |
| 2024-03-10 07:46:58 | 0e330056919e29e52db1725df201144e | 14 / 69 (20.29%)
| 104.99.233.107:443 |
| 2024-03-10 07:46:57 | 0e330056919e29e52db1725df201144e | 14 / 69 (20.29%)
| 68.232.34.200:443 |
| 2024-03-10 07:46:57 | 0e330056919e29e52db1725df201144e | 14 / 69 (20.29%)
| 3.33.231.75:443 |
| 2024-02-29 04:54:18 | 32d50550012464e12e6dd28b5c8fe81e | 1 / 70 (1.43%)
| 152.199.23.214:443 |
| 2024-02-25 20:22:38 | 083fb90ab388b557702eca8b9e023241 | 12 / 66 (18.18%)
| 104.99.233.107:443 |
| 2024-02-25 20:22:37 | 083fb90ab388b557702eca8b9e023241 | 12 / 66 (18.18%)
| 15.197.228.107:443 |
| 2024-02-24 08:31:21 | 21ce67a1b9496664a685c1915c9dcc45 | n/a | 104.99.233.107:443 |
| 2024-02-24 08:31:21 | 21ce67a1b9496664a685c1915c9dcc45 | n/a | 15.197.228.107:443 |
| 2024-02-23 21:32:46 | 135b56ce49be027a6ef7dfb242b69a91 | 14 / 69 (20.29%)
| 3.33.231.75:443 |
| 2024-02-23 21:32:46 | 135b56ce49be027a6ef7dfb242b69a91 | 14 / 69 (20.29%)
| 193.246.8.224:443 |
| 2024-02-22 05:48:18 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 3.33.231.75:443 |
| 2024-02-22 05:48:18 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 3.33.231.75:443 |
| 2024-02-22 05:48:18 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 3.33.231.75:443 |
| 2024-02-22 05:48:17 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 193.246.8.224:443 |
| 2024-02-22 05:48:17 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 193.246.8.224:443 |
| 2024-02-22 05:48:17 | 047c2f1c3e1d407f75742055ac3e7574 | 17 / 71 (23.94%)
| 193.246.8.224:443 |
| 2024-02-21 10:53:29 | a9a10b607d56608f9ef7d1d17cafa955 | n/a | 3.33.231.75:443 |
| 2024-02-21 10:53:29 | a9a10b607d56608f9ef7d1d17cafa955 | n/a | 104.99.233.107:443 |
| 2024-02-19 06:11:56 | 16d8f5db29fa8ff6f8e8766aa4661879 | n/a | 15.197.228.107:443 |
| 2024-02-19 06:11:55 | 16d8f5db29fa8ff6f8e8766aa4661879 | n/a | 23.212.89.111:443 |
| 2024-02-19 03:56:29 | 04df9ddf56c84311948e2baea7177d70 | n/a | 184.86.80.163:443 |
| 2024-02-19 03:56:29 | 04df9ddf56c84311948e2baea7177d70 | n/a | 15.197.228.107:443 |
| 2024-02-19 03:56:29 | 04df9ddf56c84311948e2baea7177d70 | n/a | 184.86.80.163:443 |
| 2024-02-19 03:56:29 | 04df9ddf56c84311948e2baea7177d70 | n/a | 15.197.228.107:443 |
| 2024-02-18 22:22:57 | 31db2fdfee094d551ca8a6777df028db | n/a | 104.99.233.107:443 |
| 2024-02-18 22:22:56 | 31db2fdfee094d551ca8a6777df028db | n/a | 3.33.231.75:443 |
| 2024-02-09 00:10:51 | 016d6734db47f4de144cb565a9682576 | n/a | 15.197.228.107:443 |
| 2024-02-09 00:10:50 | 016d6734db47f4de144cb565a9682576 | n/a | 104.99.233.107:443 |
| 2024-02-08 21:54:18 | a7e39d219fa4abf0af5d83933ab5a42e | n/a | 3.33.231.75:443 |
| 2024-02-08 21:54:18 | a7e39d219fa4abf0af5d83933ab5a42e | n/a | 193.246.8.224:443 |
| 2024-01-31 04:32:15 | 096b9187dbff1be5dc8c018beea07f02 | 16 / 69 (23.19%)
| 23.35.228.223:443 |
| 2024-01-31 04:32:14 | 096b9187dbff1be5dc8c018beea07f02 | 16 / 69 (23.19%)
| 15.197.228.107:443 |
| 2024-01-31 02:41:54 | 044041b9b93370affca14c5f35ff3f67 | n/a | 15.197.228.107:443 |
| 2024-01-31 02:41:53 | 044041b9b93370affca14c5f35ff3f67 | n/a | 2.17.220.195:443 |
| 2024-01-23 11:08:14 | a15a6d945affb1cb4bcd1a031e592c36 | n/a | 76.223.44.67:443 |
| 2024-01-23 05:10:06 | 0ea57cf3d7a29a80fd42a8f557d91766 | 13 / 67 (19.40%)
| 15.197.228.107:443 |
| 2024-01-23 05:10:05 | 0ea57cf3d7a29a80fd42a8f557d91766 | 13 / 67 (19.40%)
| 193.246.8.224:443 |
| 2024-01-17 12:53:59 | 2bbd60274dca8509bbcaf724c585ab92 | n/a | 15.197.228.107:443 |
| 2024-01-17 12:53:59 | 2bbd60274dca8509bbcaf724c585ab92 | n/a | 23.212.89.111:443 |
| 2024-01-16 07:25:35 | 1c285addecadc2d602f23c7d07cfe40e | n/a | 3.33.231.75:443 |
| 2024-01-16 07:25:35 | 1c285addecadc2d602f23c7d07cfe40e | n/a | 193.246.8.224:443 |
| 2024-01-14 09:20:13 | d4bb820e83fdbf7e8a58147abd5953f2 | n/a | 3.33.231.75:443 |
| 2024-01-14 09:20:13 | d4bb820e83fdbf7e8a58147abd5953f2 | n/a | 193.246.8.224:443 |
| 2024-01-11 15:30:31 | b7dca4e6cf536da3a52ed7dd24bf7802 | n/a | 193.246.8.224:443 |
| 2024-01-11 15:30:31 | b7dca4e6cf536da3a52ed7dd24bf7802 | n/a | 3.33.231.75:443 |
| 2024-01-10 11:31:00 | a9de0a607fe69150f03fbbf17c23e592 | n/a | 3.33.231.75:443 |
| 2024-01-10 11:31:00 | a9de0a607fe69150f03fbbf17c23e592 | n/a | 193.246.8.224:443 |
| 2024-01-08 21:06:35 | 076071cf04c058c6b3b1d62a02ffc617 | 13 / 67 (19.40%)
| 1.1.1.1:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 52.96.88.82:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 13.107.42.22:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 40.97.4.6:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 40.126.7.35:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 40.126.28.23:443 |
| 2024-01-06 06:40:32 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 13.107.213.38:443 |
| 2024-01-06 06:40:31 | a3630bb5d96beee9c25a8c3c223b8706 | n/a | 52.96.111.82:443 |
| 2024-01-04 05:17:58 | a1a1fbed8ff723f14e23fe10a5e81114 | n/a | 23.35.228.223:443 |
| 2024-01-04 05:17:58 | a1a1fbed8ff723f14e23fe10a5e81114 | n/a | 3.33.231.75:443 |
| 2023-12-30 14:59:57 | c9793a905f1603e58231fd722ef48882 | n/a | 104.99.233.107:443 |
| 2023-12-30 14:59:57 | c9793a905f1603e58231fd722ef48882 | n/a | 3.33.231.75:443 |
| 2023-12-21 17:07:31 | fd10b52d49bd6f1e6faa279821f6d034 | n/a | 3.33.231.75:443 |
| 2023-12-21 17:07:31 | fd10b52d49bd6f1e6faa279821f6d034 | n/a | 104.99.233.107:443 |
| 2023-12-19 19:25:03 | a282111088414c8c60e96779afee0eaf | 16 / 71 (22.54%)
| 193.246.8.224:443 |
| 2023-12-19 19:25:03 | a282111088414c8c60e96779afee0eaf | 16 / 71 (22.54%)
| 3.33.231.75:443 |
| 2023-12-19 04:20:48 | b76607d81bf02feb94c2cb09e539e29c | n/a | 104.99.233.107:443 |
| 2023-12-19 04:20:48 | b76607d81bf02feb94c2cb09e539e29c | n/a | 3.33.231.75:443 |
| 2023-12-17 09:58:00 | ea3b804c5cc03ba99a74701616a93a7c | n/a | 13.107.42.22:443 |
| 2023-12-17 09:57:59 | ea3b804c5cc03ba99a74701616a93a7c | n/a | 40.99.204.130:443 |
| 2023-12-17 09:57:59 | ea3b804c5cc03ba99a74701616a93a7c | n/a | 52.97.176.34:443 |
| 2023-12-17 04:51:46 | b55b27ee3b1d4b0abeb1337a57745ac8 | n/a | 40.101.83.194:443 |
| 2023-12-17 04:51:45 | b55b27ee3b1d4b0abeb1337a57745ac8 | n/a | 52.97.135.114:443 |
| 2023-12-17 04:51:44 | b55b27ee3b1d4b0abeb1337a57745ac8 | n/a | 40.99.204.162:443 |
| 2023-12-17 04:51:44 | b55b27ee3b1d4b0abeb1337a57745ac8 | n/a | 13.107.42.22:443 |
| 2023-12-17 03:27:23 | 29f86c0e61a16b50570a98b13c3a54b3 | n/a | 52.97.176.2:443 |
| 2023-12-17 03:27:21 | 29f86c0e61a16b50570a98b13c3a54b3 | n/a | 40.99.204.2:443 |
| 2023-12-17 03:27:21 | 29f86c0e61a16b50570a98b13c3a54b3 | n/a | 13.107.42.22:443 |
| 2023-12-17 00:01:52 | c43940095ea9398b60ff0188cdd2a23b | n/a | 13.107.42.22:443 |
| 2023-12-17 00:01:51 | c43940095ea9398b60ff0188cdd2a23b | n/a | 52.97.186.114:443 |
| 2023-12-16 23:32:41 | a26291d17d9c77e2e7a1527749dfd38b | 13 / 70 (18.57%)
| 193.246.8.224:443 |
| 2023-12-16 23:32:40 | a26291d17d9c77e2e7a1527749dfd38b | 13 / 70 (18.57%)
| 15.197.228.107:443 |
| 2023-12-16 13:01:45 | 93dbc9a9f4cc9b0ba36261c0cb57c08e | n/a | 40.99.204.82:443 |
| 2023-12-16 13:01:45 | 93dbc9a9f4cc9b0ba36261c0cb57c08e | n/a | 52.97.201.114:443 |
| 2023-12-16 13:01:44 | 93dbc9a9f4cc9b0ba36261c0cb57c08e | n/a | 13.107.42.22:443 |
| 2023-12-16 13:01:44 | 93dbc9a9f4cc9b0ba36261c0cb57c08e | n/a | 52.97.201.82:443 |
| 2023-12-16 13:00:21 | b6889664efaedc338d37cc8d16588d5d | n/a | 52.98.179.210:443 |
# of entries: 100 (max: 100)