JA3 Fingerprints

You can find further information about the JA3 fingerprint 52c7396a501e4fecbdfa99c5408334ac, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:52c7396a501e4fecbdfa99c5408334ac
First seen:2018-09-18 00:29:04 UTC
Last seen:2019-12-03 17:24:02 UTC
Status:Blacklisted
Malware samples:269
Destination IPs:107
Malware:Tofsee -
Listing date:2020-01-09 14:26:40

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-12-03 17:24:02554ddf44813511bad67bae754c255c1cVirustotal results 30 / 69 (43.48%) 172.217.168.67:443
2019-12-03 17:24:02554ddf44813511bad67bae754c255c1cVirustotal results 30 / 69 (43.48%) 172.217.168.67:443
2019-11-30 06:34:395d6eb5501333aacce00160e7842c6573n/a172.217.168.3:443
2019-11-30 06:34:395d6eb5501333aacce00160e7842c6573n/a172.217.168.3:443
2019-11-26 22:41:33cd86e2496c878ef6730759e7ffb2580en/a172.217.19.195:443
2019-11-26 22:41:33cd86e2496c878ef6730759e7ffb2580en/a172.217.19.195:443
2019-11-24 02:14:415b72a40febed89a2fc9d7f788b247f6fn/a172.217.21.228:443
2019-11-24 02:14:415b72a40febed89a2fc9d7f788b247f6fn/a172.217.21.228:443
2019-11-24 02:14:255b72a40febed89a2fc9d7f788b247f6fn/a172.217.16.195:443
2019-11-24 02:14:255b72a40febed89a2fc9d7f788b247f6fn/a172.217.16.195:443
2019-11-24 01:23:398e9b103c83f61de14626d0991e51c721n/a172.217.168.3:443
2019-11-24 01:23:398e9b103c83f61de14626d0991e51c721n/a172.217.168.3:443
2019-11-24 01:23:388e9b103c83f61de14626d0991e51c721n/a172.217.168.36:443
2019-11-24 01:23:388e9b103c83f61de14626d0991e51c721n/a172.217.168.36:443
2019-11-24 01:15:41ec408db63fe2486b2ed5b08b0df805b7n/a172.217.168.3:443
2019-11-24 01:15:41ec408db63fe2486b2ed5b08b0df805b7n/a172.217.168.3:443
2019-11-24 01:15:38ec408db63fe2486b2ed5b08b0df805b7n/a216.58.215.228:443
2019-11-24 01:15:38ec408db63fe2486b2ed5b08b0df805b7n/a216.58.215.228:443
2019-11-24 00:52:433e64b133642534ac6dc4838b24484b5fn/a172.217.17.132:443
2019-11-24 00:52:433e64b133642534ac6dc4838b24484b5fn/a172.217.17.132:443
2019-11-24 00:52:363e64b133642534ac6dc4838b24484b5fn/a172.217.20.99:443
2019-11-24 00:52:363e64b133642534ac6dc4838b24484b5fn/a172.217.20.99:443
2019-11-23 07:34:32268bb11bd099d56f662ee47a7595c128n/a172.217.17.67:443
2019-11-23 07:34:32268bb11bd099d56f662ee47a7595c128n/a172.217.17.67:443
2019-11-23 07:34:31268bb11bd099d56f662ee47a7595c128n/a172.217.168.196:443
2019-11-23 07:34:31268bb11bd099d56f662ee47a7595c128n/a172.217.168.196:443
2019-11-18 00:45:18683707292f48af81a477b6775d904632Virustotal results 11 / 71 (15.49%) 172.217.20.99:443
2019-11-18 00:45:18683707292f48af81a477b6775d904632Virustotal results 11 / 71 (15.49%) 172.217.19.196:443
2019-11-18 00:45:18683707292f48af81a477b6775d904632Virustotal results 11 / 71 (15.49%) 172.217.20.99:443
2019-11-18 00:45:18683707292f48af81a477b6775d904632Virustotal results 11 / 71 (15.49%) 172.217.19.196:443
2019-11-17 22:35:242c3eaf1e7c8138d7edf3051d9189aadfVirustotal results 39/71 (54.93%) 172.217.20.99:443
2019-11-17 22:35:242c3eaf1e7c8138d7edf3051d9189aadfVirustotal results 39/71 (54.93%) 172.217.20.99:443
2019-11-10 09:03:310152aead2ee4bfccd380aff121fd1db0Virustotal results 49/72 (68.06%) 172.217.168.35:443
2019-11-10 09:03:310152aead2ee4bfccd380aff121fd1db0Virustotal results 49/72 (68.06%) 172.217.168.35:443
2019-11-08 00:39:26c8eeb2e2458c9ebb67015a72cb1e73a0Virustotal results 36 / 70 (51.43%) 74.125.21.94:443
2019-11-08 00:39:26c8eeb2e2458c9ebb67015a72cb1e73a0Virustotal results 36 / 70 (51.43%) 74.125.136.105:443
2019-11-08 00:39:26c8eeb2e2458c9ebb67015a72cb1e73a0Virustotal results 36 / 70 (51.43%) 74.125.21.94:443
2019-11-08 00:39:26c8eeb2e2458c9ebb67015a72cb1e73a0Virustotal results 36 / 70 (51.43%) 74.125.136.105:443
2019-11-04 04:06:271ea872b960829db349e27cef3c366f11Virustotal results 24 / 69 (34.78%) 172.217.168.195:443
2019-11-04 04:06:271ea872b960829db349e27cef3c366f11Virustotal results 24 / 69 (34.78%) 172.217.168.195:443
2019-11-04 01:32:506aa006a4bb272ad1ff73a4fe700d6322Virustotal results 49/72 (68.06%) 216.58.198.195:443
2019-11-04 01:32:506aa006a4bb272ad1ff73a4fe700d6322Virustotal results 49/72 (68.06%) 216.58.198.195:443
2019-11-04 01:32:496aa006a4bb272ad1ff73a4fe700d6322Virustotal results 49/72 (68.06%) 172.217.19.228:443
2019-11-04 01:32:496aa006a4bb272ad1ff73a4fe700d6322Virustotal results 49/72 (68.06%) 172.217.19.228:443
2019-11-04 00:25:016b640f0359620b6fd2e1502afa891ddaVirustotal results 24 / 70 (34.29%) 172.217.17.67:443
2019-11-04 00:25:016b640f0359620b6fd2e1502afa891ddaVirustotal results 24 / 70 (34.29%) 172.217.17.67:443
2019-11-03 06:38:34a90776593139a2f29f1cf59e69f0bdaeVirustotal results 28 / 68 (41.18%) 172.217.17.132:443
2019-11-03 06:38:34a90776593139a2f29f1cf59e69f0bdaeVirustotal results 28 / 68 (41.18%) 172.217.168.195:443
2019-11-03 06:38:34a90776593139a2f29f1cf59e69f0bdaeVirustotal results 28 / 68 (41.18%) 172.217.17.132:443
2019-11-03 06:38:34a90776593139a2f29f1cf59e69f0bdaeVirustotal results 28 / 68 (41.18%) 172.217.168.195:443
2019-11-03 03:19:14d8dc780a873d5bc30214938e6c23f8b3Virustotal results 45 / 71 (63.38%) 172.217.21.196:443
2019-11-03 03:19:14d8dc780a873d5bc30214938e6c23f8b3Virustotal results 45 / 71 (63.38%) 172.217.21.196:443
2019-11-03 03:19:13d8dc780a873d5bc30214938e6c23f8b3Virustotal results 45 / 71 (63.38%) 216.58.208.35:443
2019-11-03 03:19:13d8dc780a873d5bc30214938e6c23f8b3Virustotal results 45 / 71 (63.38%) 216.58.208.35:443
2019-10-31 21:29:01c7f6cf2f19a205816494a0a35c5fb558Virustotal results 27 / 71 (38.03%) 172.217.168.35:443
2019-10-31 21:29:01c7f6cf2f19a205816494a0a35c5fb558Virustotal results 27 / 71 (38.03%) 172.217.168.4:443
2019-10-31 21:29:01c7f6cf2f19a205816494a0a35c5fb558Virustotal results 27 / 71 (38.03%) 172.217.168.35:443
2019-10-31 21:29:01c7f6cf2f19a205816494a0a35c5fb558Virustotal results 27 / 71 (38.03%) 172.217.168.4:443
2019-10-30 09:59:46f2eb82250094a823669da8fd11bc1183n/a172.217.17.67:443
2019-10-30 09:59:46f2eb82250094a823669da8fd11bc1183n/a172.217.17.68:443
2019-10-30 09:59:46f2eb82250094a823669da8fd11bc1183n/a172.217.17.67:443
2019-10-30 09:59:46f2eb82250094a823669da8fd11bc1183n/a172.217.17.68:443
2019-10-30 05:44:39c6e407084c00793efde802124937da44n/a172.217.17.67:443
2019-10-30 05:44:39c6e407084c00793efde802124937da44n/a172.217.17.67:443
2019-10-28 01:48:595c2a28e341f2565d5a3f16bb89bace62n/a172.217.17.36:443
2019-10-28 01:48:595c2a28e341f2565d5a3f16bb89bace62n/a172.217.17.67:443
2019-10-28 01:48:595c2a28e341f2565d5a3f16bb89bace62n/a172.217.17.36:443
2019-10-28 01:48:595c2a28e341f2565d5a3f16bb89bace62n/a172.217.17.67:443
2019-10-28 01:34:208436649d2481604ce126d74440eb5004n/a64.233.177.99:443
2019-10-28 01:34:208436649d2481604ce126d74440eb5004n/a172.217.3.227:443
2019-10-28 01:34:208436649d2481604ce126d74440eb5004n/a64.233.177.99:443
2019-10-28 01:34:208436649d2481604ce126d74440eb5004n/a172.217.3.227:443
2019-10-28 01:34:03fe3f9787da17d00753c75673776fd42en/a172.217.168.228:443
2019-10-28 01:34:03fe3f9787da17d00753c75673776fd42en/a172.217.168.228:443
2019-10-28 01:34:02fe3f9787da17d00753c75673776fd42en/a172.217.168.195:443
2019-10-28 01:34:02fe3f9787da17d00753c75673776fd42en/a172.217.168.195:443
2019-10-28 01:22:060afc26595ce9b3f18995e4eef525ab34n/a172.217.19.196:443
2019-10-28 01:22:060afc26595ce9b3f18995e4eef525ab34n/a172.217.19.196:443
2019-10-28 01:22:050afc26595ce9b3f18995e4eef525ab34n/a172.217.17.35:443
2019-10-28 01:22:050afc26595ce9b3f18995e4eef525ab34n/a172.217.17.35:443
2019-10-27 13:39:07b49accf598e4074b17c0d3fe8eef8493Virustotal results 48 / 68 (70.59%) 216.58.204.99:443
2019-10-27 13:39:07b49accf598e4074b17c0d3fe8eef8493Virustotal results 48 / 68 (70.59%) 216.58.201.228:443
2019-10-27 13:39:07b49accf598e4074b17c0d3fe8eef8493Virustotal results 48 / 68 (70.59%) 216.58.204.99:443
2019-10-27 13:39:07b49accf598e4074b17c0d3fe8eef8493Virustotal results 48 / 68 (70.59%) 216.58.201.228:443
2019-10-27 13:36:36bad1a9e5fd6f4c474835eb19f2ecb8d6Virustotal results 51 / 70 (72.86%) 172.217.168.35:443
2019-10-27 13:36:36bad1a9e5fd6f4c474835eb19f2ecb8d6Virustotal results 51 / 70 (72.86%) 172.217.168.68:443
2019-10-27 13:36:36bad1a9e5fd6f4c474835eb19f2ecb8d6Virustotal results 51 / 70 (72.86%) 172.217.168.35:443
2019-10-27 13:36:36bad1a9e5fd6f4c474835eb19f2ecb8d6Virustotal results 51 / 70 (72.86%) 172.217.168.68:443
2019-10-27 13:35:423c37ad8cca0d453d791f440f22f0bbc4n/a172.217.168.68:443
2019-10-27 13:35:424366a5e1479f86514c86b3716307cf74n/a172.217.23.99:443
2019-10-27 13:35:424366a5e1479f86514c86b3716307cf74n/a216.58.210.4:443
2019-10-27 13:35:423c37ad8cca0d453d791f440f22f0bbc4n/a172.217.168.68:443
2019-10-27 13:35:424366a5e1479f86514c86b3716307cf74n/a172.217.23.99:443
2019-10-27 13:35:424366a5e1479f86514c86b3716307cf74n/a216.58.210.4:443
2019-10-27 13:35:413c37ad8cca0d453d791f440f22f0bbc4n/a172.217.168.35:443
2019-10-27 13:35:413c37ad8cca0d453d791f440f22f0bbc4n/a172.217.168.35:443
2019-10-27 13:33:23908d7430ab817e5ab93e91ccefc9815dn/a216.58.215.228:443
2019-10-27 13:33:23908d7430ab817e5ab93e91ccefc9815dn/a216.58.215.228:443
2019-10-27 13:33:22908d7430ab817e5ab93e91ccefc9815dn/a216.58.215.227:443
2019-10-27 13:33:22908d7430ab817e5ab93e91ccefc9815dn/a216.58.215.227:443

# of entries: 100 (max: 100)