JA3 Fingerprints

You can find further information about the JA3 fingerprint 0cc1e84568e471aa1d62ad4158ade6b5, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:0cc1e84568e471aa1d62ad4158ade6b5
First seen:2018-06-24 10:50:47 UTC
Last seen:2021-06-21 02:35:57 UTC
Status:Blacklisted
Malware samples:51
Destination IPs:86
Malware:Tofsee -
Listing date:2018-11-14 12:52:01

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2022-05-08 05:29:37be90c44a1cdda8e4c89174db05aeaa99n/a76.223.44.67:443
2022-04-07 20:55:24a0d646cc231402b26abb580a45e808c9n/a79.133.177.251:443
2022-04-07 20:55:24a0d646cc231402b26abb580a45e808c9n/a163.181.56.193:443
2022-04-04 05:01:39a74d20a8e69a08f548ec0389f3f5c738n/a13.107.42.11:443
2022-04-04 05:01:39a74d20a8e69a08f548ec0389f3f5c738n/a40.126.28.18:443
2022-03-18 09:07:02ba2f523f3449635d359ed0a1adedb285n/a13.248.190.80:443
2022-02-09 23:57:15b31ca599c1d2715cdeaf7b62ba377356Virustotal results 45 / 69 (65.22%) 74.208.232.61:443
2022-02-09 23:57:14b31ca599c1d2715cdeaf7b62ba377356Virustotal results 45 / 69 (65.22%) 82.165.229.59:443
2022-02-09 23:57:14b31ca599c1d2715cdeaf7b62ba377356Virustotal results 45 / 69 (65.22%) 74.208.232.4:443
2022-02-09 23:57:13b31ca599c1d2715cdeaf7b62ba377356Virustotal results 45 / 69 (65.22%) 74.208.232.8:443
2021-06-21 02:35:5796b68c1217d1e1bc658e92f7f2c5baa3Virustotal results 1 / 63 (1.59%) 216.119.146.27:443
2021-06-21 02:35:5796b68c1217d1e1bc658e92f7f2c5baa3Virustotal results 1 / 63 (1.59%) 52.206.2.0:443
2021-06-21 02:35:5796b68c1217d1e1bc658e92f7f2c5baa3Virustotal results 1 / 63 (1.59%) 216.119.146.27:443
2021-06-21 02:35:5796b68c1217d1e1bc658e92f7f2c5baa3Virustotal results 1 / 63 (1.59%) 52.206.2.0:443
2021-03-08 11:29:55053635ac6eb91d4874e73fc445808f7eVirustotal results 32 / 68 (47.06%) 50.17.98.4:443
2021-03-08 11:29:55053635ac6eb91d4874e73fc445808f7eVirustotal results 32 / 68 (47.06%) 50.17.98.4:443
2021-02-10 21:48:57076139c0c2e55b0d4a1ccd61b6c8c3dfVirustotal results 12 / 68 (17.65%) 52.58.15.198:443
2021-02-10 21:48:57076139c0c2e55b0d4a1ccd61b6c8c3dfVirustotal results 12 / 68 (17.65%) 52.58.15.198:443
2021-01-10 08:36:33ab348fafce292b6eb511275b46460e1cVirustotal results 9 / 65 (13.85%) 52.58.15.198:443
2021-01-10 08:36:33ab348fafce292b6eb511275b46460e1cVirustotal results 9 / 65 (13.85%) 52.58.15.198:443
2020-12-20 01:02:07945031534f0156c6fc5481de30ee963eVirustotal results 4 / 68 (5.88%) 47.246.43.251:443
2020-12-20 01:02:07945031534f0156c6fc5481de30ee963eVirustotal results 4 / 68 (5.88%) 47.246.43.251:443
2020-12-19 21:05:4587447a141dd439cab3e23b8647030110Virustotal results 31 / 70 (44.29%) 65.9.73.60:443
2020-12-19 21:05:4587447a141dd439cab3e23b8647030110Virustotal results 31 / 70 (44.29%) 65.9.73.60:443
2020-11-24 14:41:00acf8ba9e7351196d9b4d264dde4ce35cVirustotal results 4 / 69 (5.80%) 13.224.93.25:443
2020-11-24 14:41:00acf8ba9e7351196d9b4d264dde4ce35cVirustotal results 4 / 69 (5.80%) 13.224.93.25:443
2020-11-23 05:37:48a600d63715d346bbf7ac1204edac8a04Virustotal results 4 / 70 (5.71%) 99.86.7.48:443
2020-11-23 05:37:48a600d63715d346bbf7ac1204edac8a04Virustotal results 4 / 70 (5.71%) 99.86.7.48:443
2020-11-22 00:37:3690dd46e218472bb9150ce5dd73924888Virustotal results 25 / 71 (35.21%) 13.224.102.68:443
2020-11-22 00:37:3690dd46e218472bb9150ce5dd73924888Virustotal results 25 / 71 (35.21%) 13.224.102.68:443
2020-11-17 06:06:155c258e928eb936b5a1db6264f02da22fVirustotal results 8 / 72 (11.11%) 47.246.43.252:443
2020-11-17 06:06:155c258e928eb936b5a1db6264f02da22fVirustotal results 8 / 72 (11.11%) 47.246.43.252:443
2020-10-28 13:09:06f48260a7fc69fd78d267a2d99b3060c7Virustotal results 4 / 69 (5.80%) 13.224.102.9:443
2020-10-28 13:09:06f48260a7fc69fd78d267a2d99b3060c7Virustotal results 4 / 69 (5.80%) 13.224.102.9:443
2020-10-28 07:01:40ef1cd5dde235716a534d73bf0962d632Virustotal results 28 / 70 (40.00%) 54.192.86.107:443
2020-10-28 07:01:40ef1cd5dde235716a534d73bf0962d632Virustotal results 28 / 70 (40.00%) 54.192.86.107:443
2020-10-23 19:09:3759e9109a96fecb2e29f098d5707bdc06Virustotal results 6 / 69 (8.70%) 13.32.240.101:443
2020-10-23 19:09:3759e9109a96fecb2e29f098d5707bdc06Virustotal results 6 / 69 (8.70%) 13.32.240.101:443
2020-04-03 09:34:43baa9d14a9906fabc30a9afe068f1e269Virustotal results 21 / 73 (28.77%) 59.83.204.12:443
2020-04-03 09:34:43baa9d14a9906fabc30a9afe068f1e269Virustotal results 21 / 73 (28.77%) 59.83.204.12:443
2020-04-01 04:20:39b146cb88c122938efe0044426657fcafVirustotal results 15 / 72 (20.83%) 103.100.209.25:443
2020-04-01 04:20:39b146cb88c122938efe0044426657fcafVirustotal results 15 / 72 (20.83%) 103.100.209.25:443
2020-03-31 00:19:44ba59eba37e080f954ad97f859673a9deVirustotal results 17 / 72 (23.61%) 103.100.209.25:443
2020-03-31 00:19:44ba59eba37e080f954ad97f859673a9deVirustotal results 17 / 72 (23.61%) 103.100.209.25:443
2020-03-27 13:54:188815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 40.90.23.247:443
2020-03-27 13:54:188815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 40.90.23.247:443
2020-03-27 13:54:178815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 13.107.42.22:443
2020-03-27 13:54:178815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 13.107.42.11:443
2020-03-27 13:54:178815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 13.107.42.22:443
2020-03-27 13:54:178815daa15c9acd80b0c2940ce1d276acVirustotal results 24 / 72 (33.33%) 13.107.42.11:443
2020-03-26 21:13:42803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 40.90.23.154:443
2020-03-26 21:13:42803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 40.90.23.154:443
2020-03-26 21:13:41803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 40.90.137.126:443
2020-03-26 21:13:41803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 13.107.42.11:443
2020-03-26 21:13:41803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 40.90.137.126:443
2020-03-26 21:13:41803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 13.107.42.11:443
2020-03-26 21:13:40803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 13.107.42.22:443
2020-03-26 21:13:40803c7e7340e9f2e3c492662eadc5afa6Virustotal results 22 / 73 (30.14%) 13.107.42.22:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 40.90.137.127:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 20.190.128.4:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 13.107.42.22:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 40.90.137.127:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 20.190.128.4:443
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 13.107.42.22:443
2020-03-26 13:57:58d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 20.190.128.6:443
2020-03-26 13:57:58d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 20.190.128.6:443
2020-03-26 13:57:57d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 13.107.42.11:443
2020-03-26 13:57:57d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 13.107.42.11:443
2020-03-25 16:19:5139b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 13.107.42.11:443
2020-03-25 16:19:5139b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 13.107.42.11:443
2020-03-25 16:19:4939b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 13.107.42.22:443
2020-03-25 16:19:4939b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 13.107.42.22:443
2020-03-25 16:19:4739b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 40.90.137.125:443
2020-03-25 16:19:4739b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 40.90.137.125:443
2020-03-25 16:19:4239b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 40.90.23.206:443
2020-03-25 16:19:4239b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 40.90.23.206:443
2020-03-13 15:51:1687ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 13.107.42.11:443
2020-03-13 15:51:1687ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 13.107.42.11:443
2020-03-13 15:51:1487ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 20.190.128.4:443
2020-03-13 15:51:1487ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 20.190.128.4:443
2020-03-13 15:51:1387ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 20.190.128.3:443
2020-03-13 15:51:1387ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 20.190.128.3:443
2020-03-13 15:51:1287ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 40.90.22.188:443
2020-03-13 15:51:1287ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 40.90.22.191:443
2020-03-13 15:51:1287ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 40.90.22.188:443
2020-03-13 15:51:1287ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 40.90.22.191:443
2020-03-13 15:51:1087ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 13.107.42.22:443
2020-03-13 15:51:1087ddb4a46f4099cf156c9107e4bd3feaVirustotal results 19 / 72 (26.39%) 13.107.42.22:443
2018-10-16 08:59:4449e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 40.126.1.166:443
2018-10-16 08:59:4449e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 40.126.1.166:443
2018-10-16 08:59:4349e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 23.45.96.252:443
2018-10-16 08:59:4349e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 40.124.13.195:443
2018-10-16 08:59:4349e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 23.45.96.252:443
2018-10-16 08:59:4349e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 40.124.13.195:443
2018-10-16 08:59:4049e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 13.107.42.11:443
2018-10-16 08:59:4049e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 13.107.42.11:443
2018-10-16 08:59:3949e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 65.55.163.78:443
2018-10-16 08:59:3949e432e58bd163f1ed814f54b7bed9f3Virustotal results 37/67 (55.22%) 65.55.163.78:443
2018-10-15 06:28:025f783acdf0e680cb05df27c9101090ean/a13.107.42.11:443
2018-10-15 06:28:025f783acdf0e680cb05df27c9101090ean/a13.107.42.11:443

# of entries: 100 (max: 100)