JA3 Fingerprints

You can find further information about the JA3 fingerprint 17fd49722f8d11f3d76dce84f8e099a7, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:17fd49722f8d11f3d76dce84f8e099a7
First seen:2018-03-19 23:02:27 UTC
Last seen:2020-07-11 19:00:58 UTC
Status:Blacklisted
Malware samples:2'255
Destination IPs:1'295
Malware:Tofsee -
Listing date:2018-11-14 12:35:06

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 172.217.168.234:443
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 216.58.214.8:443
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 185.82.210.27:443
2020-07-10 06:47:24e05e74b5c7794e45303bddce7f59957bVirustotal results 50 / 71 (70.42%) 185.82.210.30:443
2020-07-10 06:42:21ed53d85324df339fe9d9623fb2937d9fVirustotal results 52 / 74 (70.27%) 185.82.210.30:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 172.217.168.42:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 172.217.168.8:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 172.217.17.74:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 172.217.20.72:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 172.217.20.72:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 185.82.210.24:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 172.217.17.138:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 185.82.210.24:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 216.58.208.106:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 216.58.211.104:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 185.82.210.30:443
2020-07-10 05:00:21e3f5f7c34cf4d460ed14a900b43b8089Virustotal results 51 / 72 (70.83%) 185.82.210.24:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 108.177.126.95:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 185.82.210.30:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 185.82.210.24:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 173.194.69.97:443
2020-07-09 14:55:08c70e8d76e1047400e6c12e5be34a363eVirustotal results 50 / 73 (68.49%) 185.82.210.30:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 172.217.168.8:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 172.217.168.42:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-09 06:08:268252853e3914ae5ad59ae4ad68a9a5dcVirustotal results 51 / 72 (70.83%) 185.82.210.27:443
2020-07-08 18:17:57798027bdbcde9ec4884fd65ecdaa2a7aVirustotal results 51 / 72 (70.83%) 185.82.210.27:443
2020-07-08 14:58:271b2467aecb6927335af812070fd76171Virustotal results 49 / 71 (69.01%) 185.82.210.24:443
2020-07-07 07:05:11a96698db71e392b00a9ba7ef5bbe8f4fVirustotal results 50 / 72 (69.44%) 185.82.210.30:443
2020-07-07 07:05:11a96698db71e392b00a9ba7ef5bbe8f4fVirustotal results 50 / 72 (69.44%) 173.194.79.95:443
2020-07-07 07:05:11a96698db71e392b00a9ba7ef5bbe8f4fVirustotal results 50 / 72 (69.44%) 172.217.17.136:443
2020-07-06 19:12:18821ccb1ba17469ad4cd2b2001997d96aVirustotal results 51 / 72 (70.83%) 185.82.210.24:443
2020-07-06 18:16:3848891c55426c2e0b2ad76f1bf548210bVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-07-06 18:02:2832d05e2f2232930fa26bbb91aa7d6a0fVirustotal results 51 / 72 (70.83%) 185.82.210.30:443
2020-07-05 19:22:129c04d14c8549a0cfdae3f6de42359565Virustotal results 51 / 72 (70.83%) 185.82.210.30:443
2020-07-05 18:19:283bb9d67dfc1ab97a2779dbfa50eeba95Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-05 18:04:34316a5ee9fbcc175f120cd4d643fd8d2fVirustotal results 51 / 72 (70.83%) 185.82.210.27:443
2020-07-04 10:34:1489ae7e11dc9c77693cb77e49da9999bdVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-07-03 17:32:4526350a52ffdcd7818e74e780f8682cbdVirustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-07-03 17:32:4526350a52ffdcd7818e74e780f8682cbdVirustotal results 50 / 72 (69.44%) 185.82.210.24:443
2020-07-03 17:32:4526350a52ffdcd7818e74e780f8682cbdVirustotal results 50 / 72 (69.44%) 172.217.168.8:443
2020-07-03 17:32:4526350a52ffdcd7818e74e780f8682cbdVirustotal results 50 / 72 (69.44%) 172.217.168.42:443
2020-07-03 16:50:50de1f7ea9c3528b8ff994cc1060226932Virustotal results 50 / 73 (68.49%) 185.82.210.30:443
2020-07-03 16:50:50de1f7ea9c3528b8ff994cc1060226932Virustotal results 50 / 73 (68.49%) 185.82.210.24:443
2020-07-01 20:16:2965dbca741411d9366220809f2b7d59e1Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-01 18:12:4216c4f3dda8497a2510b668f7fdbd3ea9Virustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-06-30 06:28:15b5e9484bf6b9049d25faf0368f572198Virustotal results 50 / 72 (69.44%) 185.82.210.30:443
2020-06-29 19:23:393a5c9a886f32810d168b5d727936ae61Virustotal results 49 / 72 (68.06%) 172.217.168.42:443
2020-06-29 19:23:393a5c9a886f32810d168b5d727936ae61Virustotal results 49 / 72 (68.06%) 172.217.168.40:443
2020-06-29 19:23:393a5c9a886f32810d168b5d727936ae61Virustotal results 49 / 72 (68.06%) 185.82.210.27:443
2020-06-29 19:23:383a5c9a886f32810d168b5d727936ae61Virustotal results 49 / 72 (68.06%) 185.82.210.30:443
2020-06-29 19:20:3138eda6157b659dd32ecd232cff2433c3Virustotal results 51 / 72 (70.83%) 172.217.20.74:443
2020-06-29 19:20:3138eda6157b659dd32ecd232cff2433c3Virustotal results 51 / 72 (70.83%) 172.217.17.136:443
2020-06-29 19:20:3138eda6157b659dd32ecd232cff2433c3Virustotal results 51 / 72 (70.83%) 185.82.210.30:443
2020-06-29 18:38:370c1ef8c8dee4980f97c726877b88ff8cVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-06-29 18:38:370c1ef8c8dee4980f97c726877b88ff8cVirustotal results 52 / 73 (71.23%) 172.217.18.106:443
2020-06-29 18:38:370c1ef8c8dee4980f97c726877b88ff8cVirustotal results 52 / 73 (71.23%) 216.58.205.232:443
2020-06-28 17:32:4336466222ca664c8219f75c733753b9f5Virustotal results 51 / 72 (70.83%) 172.217.168.42:443
2020-06-28 17:32:4336466222ca664c8219f75c733753b9f5Virustotal results 51 / 72 (70.83%) 185.82.210.30:443
2020-06-28 17:32:4336466222ca664c8219f75c733753b9f5Virustotal results 51 / 72 (70.83%) 172.217.168.72:443
2020-06-28 16:30:106bf76d63f272c344d09a2180fc51ff9cVirustotal results 35 / 52 (67.31%) 185.82.210.27:443
2020-06-27 21:35:150486ad7c5ae1f20e5b95eafdef42bc9eVirustotal results 51 / 72 (70.83%) 172.217.168.232:443
2020-06-27 21:35:150486ad7c5ae1f20e5b95eafdef42bc9eVirustotal results 51 / 72 (70.83%) 216.58.214.10:443
2020-06-27 21:35:150486ad7c5ae1f20e5b95eafdef42bc9eVirustotal results 51 / 72 (70.83%) 185.82.210.30:443
2020-06-27 12:09:527c077c2c7a685b6b20d7d806765fe2eeVirustotal results 50 / 73 (68.49%) 185.82.210.30:443
2020-06-26 16:39:2209030bf5d4a8d5201f138a894235e5b0Virustotal results 50 / 73 (68.49%) 216.58.212.138:443
2020-06-26 16:39:2209030bf5d4a8d5201f138a894235e5b0Virustotal results 50 / 73 (68.49%) 185.82.210.24:443
2020-06-26 16:39:2209030bf5d4a8d5201f138a894235e5b0Virustotal results 50 / 73 (68.49%) 172.217.18.8:443
2020-06-26 12:27:439482c6e4a5271d96a2cedf408812dba2Virustotal results 51 / 74 (68.92%) 52.1.9.16:443
2020-06-26 12:27:429482c6e4a5271d96a2cedf408812dba2Virustotal results 51 / 74 (68.92%) 34.194.129.215:443
2020-06-26 12:12:1691d7668d030bb6217856732c090e78b8Virustotal results 43 / 70 (61.43%) 52.54.47.132:443
2020-06-26 12:12:1491d7668d030bb6217856732c090e78b8Virustotal results 43 / 70 (61.43%) 107.20.228.27:443
2020-06-26 12:12:1391d7668d030bb6217856732c090e78b8Virustotal results 43 / 70 (61.43%) 54.211.209.169:443
2020-06-26 12:12:1391d7668d030bb6217856732c090e78b8Virustotal results 43 / 70 (61.43%) 52.201.86.242:443
2020-06-26 12:11:1692ea407fef1865705e349b63d9c7a331Virustotal results 47 / 74 (63.51%) 52.3.60.187:443
2020-06-26 12:11:1692ea407fef1865705e349b63d9c7a331Virustotal results 47 / 74 (63.51%) 23.23.191.161:443
2020-06-26 11:50:269141f6e8ca1b9b774eab72134d950ae5Virustotal results 31 / 72 (43.06%) 34.205.201.146:443
2020-06-26 11:46:2090bc56f63b894a0b0566a49acc79d77bVirustotal results 47 / 73 (64.38%) 54.85.180.130:443
2020-06-26 11:46:2090bc56f63b894a0b0566a49acc79d77bVirustotal results 47 / 73 (64.38%) 54.210.138.223:443
2020-06-26 11:46:1990bc56f63b894a0b0566a49acc79d77bVirustotal results 47 / 73 (64.38%) 54.211.247.4:443
2020-06-26 11:42:4690cc729ffbfa93996e708437954e427fVirustotal results 40 / 73 (54.79%) 18.233.127.172:443
2020-06-26 11:42:4690cc729ffbfa93996e708437954e427fVirustotal results 40 / 73 (54.79%) 54.88.3.65:443
2020-06-26 11:42:4590cc729ffbfa93996e708437954e427fVirustotal results 40 / 73 (54.79%) 18.211.242.156:443
2020-06-26 10:37:568b0b08a26e2d3409014d48b83aa31ba0Virustotal results 44 / 73 (60.27%) 34.194.73.30:443
2020-06-26 10:37:568b0b08a26e2d3409014d48b83aa31ba0Virustotal results 44 / 73 (60.27%) 52.86.76.246:443
2020-06-26 10:28:558a8bd1baca363a9fb105533fa615aea8Virustotal results 44 / 73 (60.27%) 34.205.201.146:443
2020-06-26 10:28:558a8bd1baca363a9fb105533fa615aea8Virustotal results 44 / 73 (60.27%) 54.175.145.247:443
2020-06-26 10:28:548a8bd1baca363a9fb105533fa615aea8Virustotal results 44 / 73 (60.27%) 54.209.235.205:443
2020-06-26 10:28:548a8bd1baca363a9fb105533fa615aea8Virustotal results 44 / 73 (60.27%) 34.197.206.104:443
2020-06-26 10:15:218956e6d420db62cd2712565bbfa3d02fVirustotal results 51 / 73 (69.86%) 34.236.49.4:443
2020-06-26 10:15:218956e6d420db62cd2712565bbfa3d02fVirustotal results 51 / 73 (69.86%) 54.88.3.65:443
2020-06-26 10:08:1188f767ca0ee519a416a43025ea4ae00eVirustotal results 47 / 74 (63.51%) 52.86.76.246:443
2020-06-26 10:08:1188f767ca0ee519a416a43025ea4ae00eVirustotal results 47 / 74 (63.51%) 54.209.235.205:443
2020-06-26 10:08:1088f767ca0ee519a416a43025ea4ae00eVirustotal results 47 / 74 (63.51%) 34.236.49.4:443
2020-06-26 09:48:2087cd229df1ab788bb71809ad98ed36b6Virustotal results 45 / 73 (61.64%) 52.23.121.216:443
2020-06-26 09:48:2087cd229df1ab788bb71809ad98ed36b6Virustotal results 45 / 73 (61.64%) 18.211.242.156:443
2020-06-26 09:48:2087cd229df1ab788bb71809ad98ed36b6Virustotal results 45 / 73 (61.64%) 34.194.129.215:443

# of entries: 100 (max: 100)