JA3 Fingerprints

You can find further information about the JA3 fingerprint 49ed2ef3f1321e5f044f1e71b0e6fdd5, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:49ed2ef3f1321e5f044f1e71b0e6fdd5
First seen:2018-10-02 18:04:17 UTC
Last seen:2021-08-08 22:08:01 UTC
Status:Blacklisted
Malware samples:6'144
Destination IPs:486
Malware:TrickBot -
Listing date:2020-01-09 14:19:59

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2022-06-07 08:42:384d085cc86645ecfa736779f90cecb830n/a62.109.29.28:443
2022-06-07 08:42:384d085cc86645ecfa736779f90cecb830n/a37.230.114.248:443
2022-05-31 11:01:01e092999ecd374b85f808c8ce9754fb0dn/a82.146.61.180:443
2022-05-24 08:50:03b9487ceb260a6c6477dc932d911c6342n/a192.42.96.202:443
2022-05-24 08:50:01b9487ceb260a6c6477dc932d911c6342n/a50.22.27.2:443
2022-05-24 08:49:59b9487ceb260a6c6477dc932d911c6342n/a101.128.4.51:443
2022-05-07 15:45:251cfaa5e53402e2e98a955dd30ddb9cd4n/a51.38.134.203:8080
2022-05-03 23:19:31de1fc5aeffcc1322d65ac5c9107693f8n/a51.38.134.203:8080
2022-05-01 00:16:238b2ccdcb4a4b08b1448292ec7ab86902n/a51.38.134.203:8080
2022-05-01 00:14:448802017f54df6c24f18e7d537ad2faf6n/a51.38.134.203:8080
2022-04-30 05:53:4370e6cbdefe4a492fc2671e8b0f739eb9n/a45.142.215.235:443
2022-04-30 05:47:226c760969136a8c9877a004e4314ae378n/a45.142.215.235:443
2022-04-29 22:15:390ec8511eb37d995bbf5e23d60a3b9900Virustotal results 54 / 69 (78.26%) 51.38.134.203:8080
2022-04-25 01:01:21c166d3386a4217658a0ca323d38d34ffn/a139.162.146.59:443
2022-04-24 18:41:1909dd0d1f4c3897f21ef4e338e1c1f56an/a51.38.134.203:8080
2022-04-20 16:11:213113a84dd05081a1af357b2c5c0b9cc5Virustotal results 29 / 64 (45.31%) 91.219.236.120:443
2022-04-20 14:26:54b3f071029641c6a84be69e279c829afdn/a122.50.6.122:449
2022-04-08 15:56:47ea2973df32ce76c46e489da6738669c2n/a139.162.146.59:443
2022-04-03 16:06:27014f640a495cc8568369c323b8a2effaVirustotal results 34 / 70 (48.57%) 1.1.1.1:80
2022-04-03 10:15:56a9ea88551f3db7144e2574750371e0dan/a91.219.236.120:443
2022-04-03 07:45:55038e0ecf5e72493f5fbe722b56815f92n/a91.219.236.120:443
2022-04-03 04:30:32f3cbc36da896016555ef1915ebebfe5bn/a91.219.236.120:443
2022-04-03 03:43:51f22872b10acbf5bb5a8364cfa8b0f509n/a91.219.236.120:443
2022-03-30 07:19:07ab9ba9e634285951b21646aa0d17b3bbn/a92.38.171.54:443
2022-03-26 19:05:508f22d42d63b8106a5fa2a9877a9c5cd2n/a5.34.180.173:443
2022-03-20 06:58:20aaf583963581d4a20aaaf1ad9bafb174Virustotal results 49 / 67 (73.13%) 122.50.6.122:449
2022-03-19 13:08:2096bfd0a3a4363ee617c1431402fb46can/a66.42.57.149:443
2022-03-19 12:50:398294a6b55521a84ea76423775be8c043n/a66.42.57.149:443
2022-03-19 09:47:03aaf7f3fbe82beb5c204f02346b15644cn/a66.42.57.149:443
2022-03-19 09:29:228b648f96963000fdfb3931a90027aa8fn/a66.42.57.149:443
2022-03-19 09:07:5161cd1176aa070e03b50c8c4d8c1e3ed4n/a66.42.57.149:443
2022-03-19 08:59:345022fada1f6954d690637391f86631ddn/a66.42.57.149:443
2022-03-18 21:11:51bbd1d84840663dcc252fbfab187883e8n/a66.42.57.149:443
2022-03-18 19:12:31dec7840cd649308e89a4c13edebf649cn/a66.42.57.149:443
2022-03-18 18:13:25876ec6da02ae6e6cf2a5c772455eedf5Virustotal results 20 / 68 (29.41%) 66.42.57.149:443
2022-03-18 18:04:19596884d6ce9412b17a4cee222a78d93en/a66.42.57.149:443
2022-03-18 17:38:2547ea3823fc1b7b375de3a53ce2f44db6n/a66.42.57.149:443
2022-03-18 17:09:03344ca201235d2c2d90effef3682c5418n/a66.42.57.149:443
2022-03-18 16:05:37252558cec000dd53faffbef6d1b70c5aVirustotal results 10 / 65 (15.38%) 66.42.57.149:443
2022-03-18 14:39:45e7a1418854c55e8ae86ba6e7b5da804fn/a66.42.57.149:443
2022-03-18 11:50:3867d8cd869ab8b024905931eefbf2f52an/a66.42.57.149:443
2022-03-18 10:24:57c7ceb496f1789da2dc3d54e2dbe230fdn/a66.42.57.149:443
2022-03-18 09:40:065e303d582e7d48a71fd39574f4e784e5n/a66.42.57.149:443
2022-03-18 09:11:222085383660402c79760a9aa83c478991n/a66.42.57.149:443
2022-03-18 06:31:41ea4fdf3a4a6129e572714493026f910bn/a66.42.57.149:443
2022-03-18 06:17:16fe72bbd577e233da61ddb401b6f70f6an/a66.42.57.149:443
2022-03-17 18:52:387c8d6cd2d83c7495bf86eeb6904ca6can/a66.42.57.149:443
2022-03-17 18:44:45c3d345d52e6338d705e77e6a68466842n/a66.42.57.149:443
2022-03-17 18:35:258e3033ecc55cb5f1f6320628a440b64dn/a66.42.57.149:443
2022-03-17 14:42:3652d712f9833c36818f5353da22edecacn/a66.42.57.149:443
2022-03-17 14:34:200463718e6e18557ee2a028af25c2c93aVirustotal results 11 / 68 (16.18%) 66.42.57.149:443
2022-03-17 14:25:50c6d9f047b33b1b6d59e18af0d33abf4en/a66.42.57.149:443
2022-03-17 12:01:555bd73837b5e84a4ca0183231b82e7f8bn/a66.42.57.149:443
2022-03-17 11:53:0811f87b8617cf244d8bf3a5090e8baa46n/a66.42.57.149:443
2022-03-17 11:28:416df32cbda3384e5c3da6925a61463d36n/a66.42.57.149:443
2022-03-17 01:14:4298e6d023cc380864390ed511c8f6f3edn/a103.75.32.173:443
2022-03-17 00:21:176157cd031395d992f6e9e5fbd754884cn/a103.75.32.173:443
2022-03-16 23:01:362ddfe904c24d29a19ea9603ef65bd8ccn/a103.75.32.173:443
2022-03-16 23:01:362ddfe904c24d29a19ea9603ef65bd8ccn/a103.9.188.78:443
2022-03-16 14:42:17730f7e3fd30d20d35a4ba25694a0aaa9n/a122.50.6.122:449
2022-03-16 14:02:2955d3786a4cf5512dbb2d3cd8d026497dn/a122.50.6.122:449
2022-03-16 12:30:36145542671672b21261f6a371d475082en/a23.94.3.13:443
2022-03-16 12:30:36145542671672b21261f6a371d475082en/a185.99.2.242:443
2022-03-10 15:59:48e10673a3684ea257619f861739ed1c39n/a82.146.61.180:443
2022-03-04 19:40:030524ab2a86696fe43b1237660413d1c8n/a45.142.215.235:443
2022-03-02 03:18:45e3667359884c4a17e75e67db68deef34n/a185.14.29.4:443
2022-03-01 14:09:42b6c64766199ecc6fda6eaf6406dee9ban/a194.87.145.86:443
2022-02-27 20:16:348f2c6911f89b38502e84297a1be02e4cn/a190.214.13.2:449
2022-02-27 19:16:1360969508a1aacc69ed2518292bca0b71n/a190.214.13.2:449
2022-02-27 00:38:41ca45e7604b42ba97248c20295d88dfdcn/a185.14.29.4:443
2022-02-26 11:17:50b5442e7f1d6a0cc86a876c529cd89072n/a190.214.13.2:449
2022-02-23 16:18:37ebd106ece5ea120bb9b6e7aab5cb56f6n/a103.9.188.78:443
2022-02-23 14:17:41e7ab341405311e0e1a2ad36496d97e18n/a122.50.6.122:449
2022-02-18 10:42:139a23d259556771a1d906520bebd2d5bfn/a190.214.13.2:449
2022-02-18 09:32:01871a950acd72abcd77adf31456fa8aadn/a122.50.6.122:449
2022-02-18 06:50:535d197c383ecb50753d5b2aa28ae034d1n/a122.50.6.122:449
2022-02-18 04:28:123a8cc336637b7404c5e8ee99c03c9aafn/a190.214.13.2:449
2022-02-15 23:53:268b44f123385c1f4035b8e44f7afeef03n/a190.214.13.2:449
2022-02-10 16:04:50c520be382bf8d454d000329790b576c7Virustotal results 42 / 57 (73.68%) 185.186.77.216:443
2022-02-10 16:04:50c520be382bf8d454d000329790b576c7Virustotal results 42 / 57 (73.68%) 45.142.215.235:443
2022-02-07 20:42:5446001deba1e51f66aab89c851efbb738Virustotal results 51 / 62 (82.26%) 185.186.77.216:443
2022-02-06 19:16:225564df86fbf8678738a94f791fd49b06Virustotal results 51 / 67 (76.12%) 190.214.13.2:449
2021-12-31 00:25:169ccef64b6794cd9de12fe4d25ab9376en/a85.204.116.139:443
2021-12-30 11:57:434ad401887ba36da4b60962e280f7c0fen/a187.95.113.110:443
2021-12-30 07:51:285c0d52296ff4773c97ceb77bf8d4330en/a187.95.113.110:443
2021-12-29 16:16:06d1b9219383e79d4d92a55e6cbaf8abcfn/a187.95.113.110:443
2021-12-29 08:38:374f5d89b35dea45975fc2742c7939451fn/a187.95.113.110:443
2021-12-28 15:27:18e064eb6cbce1709309864a24833f7b1en/a45.142.215.235:443
2021-12-16 08:21:28fb2527d6bb442a9ff1c47c375bca3791n/a187.95.113.110:443
2021-12-16 02:09:57541a03c47b7d24e68b8a8f0d6e437c87n/a103.9.188.78:443
2021-12-13 23:58:429fcaae26f276236e42d6d59ad531eba3n/a194.32.73.45:443
2021-12-11 10:14:05ddcfe6225e92362f72cab407057117f6n/a187.95.113.110:443
2021-12-10 10:16:13e4a045d3c034f0db5ffcd80d77b02ea0n/a85.204.116.139:443
2021-12-09 13:12:06e672294f7e816be19e35ec841e91c179n/a45.36.99.184:443
2021-12-08 19:45:435d1b9505fc4ed9eca77d3395f90aeb47n/a85.204.116.139:443
2021-12-07 15:59:1030b31a91fbb259922c69a4a9d21f34bdVirustotal results 34 / 68 (50.00%) 202.183.12.124:443
2021-12-06 21:15:25a268c9ef8c52cb87f1c432c56d5aca49n/a85.204.116.139:443
2021-12-06 10:42:53f16d676c4b9aa6b9ffca482983be8710n/a51.38.134.203:8080
2021-12-05 18:05:04212ec4aece859ad1e3f360f4a9e02192Virustotal results 58 / 68 (85.29%) 51.38.134.203:8080
2021-12-05 17:57:0346e2f5c87557b90410bceb0680251256Virustotal results 55 / 68 (80.88%) 51.38.134.203:8080

# of entries: 100 (max: 100)