JA3 Fingerprints

You can find further information about the JA3 fingerprint 17fd49722f8d11f3d76dce84f8e099a7, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:17fd49722f8d11f3d76dce84f8e099a7
First seen:2018-03-19 23:02:27 UTC
Last seen:2020-08-13 06:40:00 UTC
Status:Blacklisted
Malware samples:2'289
Destination IPs:1'296
Malware:Tofsee -
Listing date:2018-11-14 12:35:06

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-08-13 06:40:00fae913ab02f47581c3879358ae27c455Virustotal results 50 / 71 (70.42%) 185.82.210.27:443
2020-08-13 05:25:18f8fb3a721f97ac8772b89a998f562fedVirustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-08-12 15:51:15f4bfa08391f5637a5be8d8b5d0cd48cbVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-08-10 18:09:51cfe3d02416d7a4eb092920c3f26ef4cfVirustotal results 49 / 72 (68.06%) 185.82.210.30:443
2020-08-10 18:09:51cfe3d02416d7a4eb092920c3f26ef4cfVirustotal results 49 / 72 (68.06%) 185.82.210.27:443
2020-08-10 18:09:51cfe3d02416d7a4eb092920c3f26ef4cfVirustotal results 49 / 72 (68.06%) 172.217.168.10:443
2020-08-10 18:09:50cfe3d02416d7a4eb092920c3f26ef4cfVirustotal results 49 / 72 (68.06%) 172.217.168.72:443
2020-08-01 23:21:162c9ac930c2fbc14252cbbc5b6eb5823eVirustotal results 48 / 71 (67.61%) 172.217.168.8:443
2020-08-01 23:21:162c9ac930c2fbc14252cbbc5b6eb5823eVirustotal results 48 / 71 (67.61%) 172.217.168.42:443
2020-08-01 23:21:162c9ac930c2fbc14252cbbc5b6eb5823eVirustotal results 48 / 71 (67.61%) 185.82.210.27:443
2020-08-01 22:55:4319ced9d07a9d6c7c5da438ab2595f461Virustotal results 49 / 69 (71.01%) 185.82.210.27:443
2020-08-01 22:55:4319ced9d07a9d6c7c5da438ab2595f461Virustotal results 49 / 69 (71.01%) 185.82.210.30:443
2020-07-31 13:08:42e5835f0d4f2e5625ecfbe29f41242a12Virustotal results 49 / 71 (69.01%) 185.82.210.27:443
2020-07-31 08:37:26dcc51fc80f181044ccef3f999b6227e9Virustotal results 47 / 70 (67.14%) 216.58.214.8:443
2020-07-31 08:37:26dcc51fc80f181044ccef3f999b6227e9Virustotal results 47 / 70 (67.14%) 172.217.20.106:443
2020-07-31 08:37:26dcc51fc80f181044ccef3f999b6227e9Virustotal results 47 / 70 (67.14%) 185.82.210.30:443
2020-07-31 07:14:59d1ac78ee9420aad02a59ae2239a1caf1Virustotal results 50 / 72 (69.44%) 185.82.210.24:443
2020-07-30 03:15:187bb414ff1822f6a5045f252c8f2b2eadVirustotal results 49 / 70 (70.00%) 185.82.210.24:443
2020-07-30 03:15:187bb414ff1822f6a5045f252c8f2b2eadVirustotal results 49 / 70 (70.00%) 172.217.168.42:443
2020-07-30 03:15:187bb414ff1822f6a5045f252c8f2b2eadVirustotal results 49 / 70 (70.00%) 216.58.215.232:443
2020-07-29 23:56:33581c912077928a5b3dee54ccda613bcaVirustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-07-29 12:14:5319da8d2f7a20c6166fd86c162c251e2bVirustotal results 47 / 68 (69.12%) 185.82.210.27:443
2020-07-29 09:41:0914b0fa86e7f67671b59fad3ffdc4fd9dVirustotal results 50 / 71 (70.42%) 185.82.210.30:443
2020-07-26 20:49:44c79e9f66affaa686067dc4806f170ebdVirustotal results 48 / 70 (68.57%) 185.82.210.30:443
2020-07-25 20:51:132d18e8da69b666c221013343f3f8e2beVirustotal results 50 / 72 (69.44%) 185.82.210.24:443
2020-07-25 20:51:132d18e8da69b666c221013343f3f8e2beVirustotal results 50 / 72 (69.44%) 172.217.168.72:443
2020-07-25 20:51:132d18e8da69b666c221013343f3f8e2beVirustotal results 50 / 72 (69.44%) 216.58.215.234:443
2020-07-23 18:19:339a3f409a40e8b9524c7d83d3a49891aeVirustotal results 50 / 71 (70.42%) 185.82.210.27:443
2020-07-23 18:11:068bd66a6da187dcf444db0b5e7356e12cVirustotal results 49 / 70 (70.00%) 172.217.17.106:443
2020-07-23 18:11:068bd66a6da187dcf444db0b5e7356e12cVirustotal results 49 / 70 (70.00%) 185.82.210.30:443
2020-07-23 18:11:068bd66a6da187dcf444db0b5e7356e12cVirustotal results 49 / 70 (70.00%) 185.82.210.24:443
2020-07-23 18:11:068bd66a6da187dcf444db0b5e7356e12cVirustotal results 49 / 70 (70.00%) 172.217.168.232:443
2020-07-23 17:55:28816579ba08e60142077b7d8b77627345Virustotal results 47 / 69 (68.12%) 172.217.168.234:443
2020-07-23 17:55:28816579ba08e60142077b7d8b77627345Virustotal results 47 / 69 (68.12%) 172.217.17.72:443
2020-07-23 17:55:27816579ba08e60142077b7d8b77627345Virustotal results 47 / 69 (68.12%) 185.82.210.24:443
2020-07-23 17:14:504627774640479bdd502549a4f97ed81aVirustotal results 50 / 71 (70.42%) 172.217.168.10:443
2020-07-23 17:14:504627774640479bdd502549a4f97ed81aVirustotal results 50 / 71 (70.42%) 185.82.210.27:443
2020-07-23 17:14:504627774640479bdd502549a4f97ed81aVirustotal results 50 / 71 (70.42%) 172.217.168.40:443
2020-07-23 16:48:16245f270cf2a42625f48385f6158c3d5aVirustotal results 49 / 70 (70.00%) 185.82.210.27:443
2020-07-23 06:28:29a3b5ac63128aba06f8ab7690dcaa87a1Virustotal results 50 / 72 (69.44%) 172.217.168.8:443
2020-07-23 06:28:29a3b5ac63128aba06f8ab7690dcaa87a1Virustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-07-23 06:28:29a3b5ac63128aba06f8ab7690dcaa87a1Virustotal results 50 / 72 (69.44%) 172.217.168.42:443
2020-07-23 01:30:108fcc72564ad8cd4ca7b155f7f89db9d9Virustotal results 49 / 70 (70.00%) 185.82.210.27:443
2020-07-23 01:30:108fcc72564ad8cd4ca7b155f7f89db9d9Virustotal results 49 / 70 (70.00%) 185.82.210.30:443
2020-07-23 01:25:028cf60ae9898c1de201fb2d8e962b40c2Virustotal results 49 / 70 (70.00%) 172.217.168.74:443
2020-07-23 01:25:028cf60ae9898c1de201fb2d8e962b40c2Virustotal results 49 / 70 (70.00%) 172.217.168.40:443
2020-07-23 01:25:028cf60ae9898c1de201fb2d8e962b40c2Virustotal results 49 / 70 (70.00%) 185.82.210.24:443
2020-07-23 01:25:028cf60ae9898c1de201fb2d8e962b40c2Virustotal results 49 / 70 (70.00%) 185.82.210.30:443
2020-07-23 00:57:357732de1a758afdd7863c4515fbd895e3Virustotal results 49 / 71 (69.01%) 185.82.210.30:443
2020-07-23 00:57:357732de1a758afdd7863c4515fbd895e3Virustotal results 49 / 71 (69.01%) 172.217.168.200:443
2020-07-23 00:57:357732de1a758afdd7863c4515fbd895e3Virustotal results 49 / 71 (69.01%) 172.217.168.234:443
2020-07-22 04:25:5091d6748b150dc670d4bdd941746cf303Virustotal results 50 / 73 (68.49%) 185.82.210.27:443
2020-07-22 03:01:0273c169579a333e0ab91d68767a6c7b43Virustotal results 49 / 71 (69.01%) 185.82.210.24:443
2020-07-18 14:54:56113ddbe6738150b99305cf2921e62769Virustotal results 50 / 71 (70.42%) 185.82.210.27:443
2020-07-17 18:59:33523d0fcdfc20b9a2aa3b02a2fc91649cVirustotal results 51 / 72 (70.83%) 216.58.208.106:443
2020-07-17 18:59:32523d0fcdfc20b9a2aa3b02a2fc91649cVirustotal results 51 / 72 (70.83%) 172.217.19.200:443
2020-07-17 18:59:32523d0fcdfc20b9a2aa3b02a2fc91649cVirustotal results 51 / 72 (70.83%) 185.82.210.24:443
2020-07-16 21:15:22d60baa47fe2052f57f317f215354ce5eVirustotal results 49 / 71 (69.01%) 185.82.210.27:443
2020-07-16 21:02:30d189ad6b7920957752021dc6cf555bebVirustotal results 47 / 72 (65.28%) 185.82.210.27:443
2020-07-16 21:02:30d189ad6b7920957752021dc6cf555bebVirustotal results 47 / 72 (65.28%) 172.217.17.72:443
2020-07-16 21:02:30d189ad6b7920957752021dc6cf555bebVirustotal results 47 / 72 (65.28%) 216.58.214.10:443
2020-07-16 17:33:34558fd2ae8a5b21876a3de8460806f901Virustotal results 49 / 71 (69.01%) 185.82.210.30:443
2020-07-14 20:55:557ab84bf029d503bbeb65669831e559daVirustotal results 45 / 72 (62.50%) 185.82.210.24:443
2020-07-14 19:41:17019ee7bced22a010876125d6a94cfc90Virustotal results 45 / 71 (63.38%) 185.82.210.30:443
2020-07-13 21:28:447ee9d789b23b3c804dd00083cdafc543Virustotal results 45 / 73 (61.64%) 172.217.19.202:443
2020-07-13 21:28:447ee9d789b23b3c804dd00083cdafc543Virustotal results 45 / 73 (61.64%) 172.217.17.40:443
2020-07-13 21:28:447ee9d789b23b3c804dd00083cdafc543Virustotal results 45 / 73 (61.64%) 185.82.210.24:443
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 172.217.168.234:443
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 216.58.214.8:443
2020-07-11 19:00:5897fa670ff502142a9e99c7b2b4bb00bbVirustotal results 48 / 72 (66.67%) 185.82.210.27:443
2020-07-10 06:47:24e05e74b5c7794e45303bddce7f59957bVirustotal results 50 / 71 (70.42%) 185.82.210.30:443
2020-07-10 06:42:21ed53d85324df339fe9d9623fb2937d9fVirustotal results 52 / 74 (70.27%) 185.82.210.30:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 172.217.168.42:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-10 06:38:00e487532139a7023143c7793cd7486358Virustotal results 52 / 73 (71.23%) 172.217.168.8:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 172.217.17.74:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 185.82.210.30:443
2020-07-10 06:36:25ebb846410dcb4595d076785643f899efVirustotal results 52 / 73 (71.23%) 172.217.20.72:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 172.217.20.72:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 185.82.210.27:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 185.82.210.24:443
2020-07-10 05:32:53ed0f5b59933f42ab9a6cdb2c68f38a77Virustotal results 50 / 72 (69.44%) 172.217.17.138:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 185.82.210.24:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 216.58.208.106:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 216.58.211.104:443
2020-07-10 05:12:24d2e42e75b58099b1d78fba9fafaaa50fVirustotal results 51 / 73 (69.86%) 185.82.210.30:443
2020-07-10 05:00:21e3f5f7c34cf4d460ed14a900b43b8089Virustotal results 51 / 72 (70.83%) 185.82.210.24:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 108.177.126.95:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 185.82.210.30:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 185.82.210.24:443
2020-07-09 18:29:14c4232811c085b0d13c25af75dd40e295Virustotal results 50 / 71 (70.42%) 173.194.69.97:443
2020-07-09 14:55:08c70e8d76e1047400e6c12e5be34a363eVirustotal results 50 / 73 (68.49%) 185.82.210.30:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 172.217.168.8:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 172.217.168.42:443
2020-07-09 12:31:12c6084bc28509af36869f36d1151e5a40Virustotal results 52 / 73 (71.23%) 185.82.210.27:443
2020-07-09 06:08:268252853e3914ae5ad59ae4ad68a9a5dcVirustotal results 51 / 72 (70.83%) 185.82.210.27:443
2020-07-08 18:17:57798027bdbcde9ec4884fd65ecdaa2a7aVirustotal results 51 / 72 (70.83%) 185.82.210.27:443
2020-07-08 14:58:271b2467aecb6927335af812070fd76171Virustotal results 49 / 71 (69.01%) 185.82.210.24:443
2020-07-07 07:05:11a96698db71e392b00a9ba7ef5bbe8f4fVirustotal results 50 / 72 (69.44%) 185.82.210.30:443
2020-07-07 07:05:11a96698db71e392b00a9ba7ef5bbe8f4fVirustotal results 50 / 72 (69.44%) 173.194.79.95:443

# of entries: 100 (max: 100)