JA3 Fingerprints

You can find further information about the JA3 fingerprint 57f3642b4e37e28f5cbe3020c9331b4c, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:57f3642b4e37e28f5cbe3020c9331b4c
First seen:2018-08-28 15:54:53 UTC
Last seen:2019-09-16 08:35:05 UTC
Status:Blacklisted
Malware samples:2'698
Destination IPs:180
Malware:Gozi -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-09-16 08:35:05a1e685032c1ff8873a1cf5c52b09f27dn/a72.21.81.200:443
2019-09-16 06:39:55a44cb205138dc8e6423c30b447734ab5Virustotal results 57 / 70 (81.43%) 152.199.19.161:443
2019-09-16 05:58:15a3e15b15c78916b9f2557194e03a3e71n/a72.21.81.200:443
2019-09-16 04:52:25a267555ce3bcbe0bea857053604e4f95Virustotal results 14 / 41 (34.15%) 13.79.247.219:443
2019-09-16 03:42:13a4c6dd64dd5b42ef8ac4c93aa71d41d4Virustotal results 57 / 69 (82.61%) 152.199.19.161:443
2019-09-16 03:17:25a2242d2f8db4f32d4603aa287c9a7ab0Virustotal results 62 / 69 (89.86%) 152.199.19.161:443
2019-09-16 02:22:20a29966b0f2be58ef2297508791fb79een/a72.21.81.200:443
2019-09-15 20:15:20e7da1c7a7a7ee2dd2a6496ecead9b42en/a72.21.81.200:443
2019-09-15 16:55:493811510a6b0b96edd7af15c58a501883n/a152.199.19.161:443
2019-09-15 13:42:264330927c21ef9384442a6ee2bbe27061n/a152.199.19.161:443
2019-09-15 13:15:008ba325c4c7b4facf0a223cd2f368e422Virustotal results 30 / 69 (43.48%) 72.21.81.200:443
2019-09-15 10:07:49a08a530a3419bf61a8faf4990e333378n/a152.199.19.161:443
2019-09-15 02:48:32a05738c3169ec91419dca3a8bc8e954eVirustotal results 54 / 68 (79.41%) 152.199.19.161:443
2019-09-15 01:00:55a386687fadd96a551bc10e8dee1d652an/a152.199.19.161:443
2019-09-14 22:54:5769e98eb45ae2794a9c7ebde77a8a3bf3n/a152.199.19.161:443
2019-09-14 20:32:55a486640ffc2382a8c652c11f982686ffn/a152.199.19.161:443
2019-09-14 19:31:54a32b0c9332fc7b31c1dd92b9b1e4fdbdn/a152.199.19.161:443
2019-09-14 18:47:52a45a38e05ee4bf035b73192e4a756894Virustotal results 54 / 70 (77.14%) 152.199.19.161:443
2019-09-14 12:57:54a3f7fe8cecc79826d7e0e45c3ad68c45n/a72.21.81.200:443
2019-09-14 12:21:44a2fe51a1983c2e86d53222c8378f692fn/a152.199.19.161:443
2019-09-14 09:43:254f0c15395080eca7b419c2fc0f5527b2n/a152.199.19.161:443
2019-09-14 09:34:04a2a6e64c3dfbae73d88281406e2d71c1Virustotal results 56 / 67 (83.58%) 72.21.81.200:443
2019-09-14 09:20:37a30c973278a9f6adbeaafe12d0a714c2Virustotal results 43 / 69 (62.32%) 152.199.19.161:443
2019-09-14 05:33:40a089d37b140f46b40fc123c0bfe8000cn/a152.199.19.161:443
2019-09-13 12:25:10a2a07f83881e5f44ae134b74df1d5dedVirustotal results 55 / 67 (82.09%) 152.199.19.161:443
2019-09-13 08:21:35a041d1ecab2d776e92b27a78cd3f525eVirustotal results 58 / 71 (81.69%) 72.21.81.200:443
2019-09-13 07:17:163df94dd815024bc177576c88b2bc5cddVirustotal results 26 / 68 (38.24%) 152.199.19.161:443
2019-09-13 07:01:47a0aeea4858e671a6187ad6d26e135a47n/a72.21.81.200:443
2019-09-13 06:15:48a39546fe1dd789ba64def1191b5877e3n/a152.199.19.161:443
2019-09-13 06:06:39a07bd9e46356ba4e898d2d4d8d4d9684n/a152.199.19.161:443
2019-09-13 06:01:36a0109809768c6ae7bbcce6ef48f21f60n/a72.21.81.200:443
2019-09-13 05:04:02ef14d14fd4b381dd3f9890a375b71cc3n/a72.21.81.200:443
2019-09-12 21:20:43a2028253af0256d07e471c1e3c4fb80dn/a152.199.19.161:443
2019-09-12 14:08:29a401cfab353e21d6ec883975971c0984n/a152.199.19.161:443
2019-09-12 14:08:05a2430aeb7a90bb45e49ecf078f363623n/a52.166.3.234:443
2019-09-12 11:57:42a02b2ea31702b3707542b08b89b1f06cn/a152.199.19.161:443
2019-09-12 11:41:56d2904c522448640ac1fecc4e2cf8db8cVirustotal results 24 / 70 (34.29%) 152.199.19.161:443
2019-09-12 09:07:49a1748565288c38eff40b5cf2c59a35f7n/a152.199.19.161:443
2019-09-12 06:33:22a0214240e827f67ab4b49a797c6f23dbVirustotal results 57 / 69 (82.61%) 152.199.19.161:443
2019-09-12 05:02:35fa489a46cd94f4838f8a63c6d401db5cVirustotal results 62 / 71 (87.32%) 217.74.76.129:443
2019-09-11 22:16:15a210eb14fa4a86bbb18738de7d1b82ffVirustotal results 60 / 69 (86.96%) 157.7.107.111:443
2019-09-11 21:30:38a0341b8a26fd6c0edda7cc755819d9c3n/a152.199.19.161:443
2019-09-11 21:09:45a0ccba34422577aff9a8a0d2fc442c96n/a152.199.19.161:443
2019-09-11 20:27:39a3517d77b99e8d5e6fbad90b1d2f62d6n/a72.21.81.200:443
2019-09-11 10:39:19a1fd63989cb4040c41da7249092d1e4bn/a152.199.19.161:443
2019-09-11 10:32:33d9f253a06a3aeef577435af7f5789556Virustotal results 43 / 71 (60.56%) 72.21.81.200:443
2019-09-11 07:50:12a2173e8db54218334b40389a038e6039n/a152.199.19.161:443
2019-09-10 18:06:46a17dac44dbeb65a52b20de057fba70fbn/a152.199.19.161:443
2019-09-10 16:14:33a09b6fb0da736ce38ed6637a5fd3aca2Virustotal results 62/70 (88.57%) 67.227.183.123:443
2019-09-10 16:14:32a09b6fb0da736ce38ed6637a5fd3aca2Virustotal results 62/70 (88.57%) 116.203.159.155:443
2019-09-10 14:56:59dc33ab9caea6d0703173ff06557a7480n/a85.143.223.150:443
2019-09-10 14:56:59dc33ab9caea6d0703173ff06557a7480n/a172.217.14.69:443
2019-09-10 14:56:58dc33ab9caea6d0703173ff06557a7480n/a172.217.4.142:443
2019-09-10 14:40:57a10a9c5c099817ef12928b6b85140548Virustotal results 61/69 (88.41%) 116.203.159.155:443
2019-09-10 14:40:57a10a9c5c099817ef12928b6b85140548Virustotal results 61/69 (88.41%) 67.227.183.123:443
2019-09-10 09:49:33a06c7435cfb4055cfcb55eb109f35cfdVirustotal results 46/69 (66.67%) 152.199.19.161:443
2019-09-10 09:33:49659e91c42c28059889e8244b088d69a2n/a152.199.19.161:443
2019-09-10 09:11:11a33f88c1595510d5d5096b086f7222b0Virustotal results 57 / 69 (82.61%) 152.199.19.161:443
2019-09-10 05:44:55a393d71a07971ffa71cb71047cc95663Virustotal results 54 / 66 (81.82%) 152.199.19.161:443
2019-09-10 05:27:38a2f8759a6694a425a451dd110065b4e6Virustotal results 43/68 (63.24%) 152.199.19.161:443
2019-09-10 05:14:35a2e1b8b7c646350f6d8f0ab41a178c0fVirustotal results 54/67 (80.60%) 152.199.19.161:443
2019-09-10 04:40:16a09986ed72f220ec28b59e599b45143cVirustotal results 48 / 61 (78.69%) 152.199.19.161:443
2019-09-10 04:05:31a0c1d75e6f6c35bce61850156afb734cVirustotal results 50/63 (79.37%) 152.199.19.161:443
2019-09-09 20:28:20a240c9f38e1c379a82d171580dfa8587Virustotal results 47/68 (69.12%) 152.199.19.161:443
2019-09-09 19:49:23a0c3a8a6af04eb262b1317443219da32Virustotal results 49/62 (79.03%) 152.199.19.161:443
2019-09-09 19:22:25a041a2bcbcec75d024114503e440d3a8Virustotal results 58 / 70 (82.86%) 152.199.19.161:443
2019-09-09 16:43:43a146742926ecefcccbd4c4b96f868a9aVirustotal results 58 / 71 (81.69%) 152.199.19.161:443
2019-09-09 15:46:15a08059c12ac22ecf5f5ba8e400545242Virustotal results 55/67 (82.09%) 152.199.19.161:443
2019-09-09 14:16:586dcaae31b813669539df2ef205c9d8f7n/a85.143.223.150:443
2019-09-09 14:16:586dcaae31b813669539df2ef205c9d8f7n/a216.58.206.14:443
2019-09-09 14:16:586dcaae31b813669539df2ef205c9d8f7n/a216.58.210.5:443
2019-09-09 07:58:35006b81baff057a60f7d64a571ab883c8n/a152.199.19.161:443
2019-09-09 07:43:02054ab46ca86a61a60a627118c254fbcaVirustotal results 42 / 70 (60.00%) 152.199.19.161:443
2019-09-09 07:21:15c5fd5d6cc5e791fbb5546ae13ff5e74aVirustotal results 45 / 68 (66.18%) 152.199.19.161:443
2019-09-09 07:15:460edd9e5e0293e661562760cd04b7aea3n/a152.199.19.161:443
2019-09-09 04:21:154d16060da0448af9b0373538c7670189n/a152.199.19.161:443
2019-09-09 03:29:24a0db537b3c2dd41cdf3ec2ee485757c0n/a152.199.19.161:443
2019-09-09 01:50:16fc08e966996eb94c4e6cc923eb45088bVirustotal results 57 / 67 (85.07%) 152.199.19.161:443
2019-09-08 18:59:20a22c9644a2a481b69ac9c4de324d309bVirustotal results 61 / 70 (87.14%) 152.199.19.161:443
2019-09-08 18:55:00a0351305312eea2d8a329a7708fb4c0cn/a152.199.19.161:443
2019-09-08 18:31:363382c5d05532e156d067cfcd646ae1cen/a152.199.19.161:443
2019-09-08 18:00:02a0ce79e3421abb6557fed84206cdaafbVirustotal results 58 / 71 (81.69%) 152.199.19.161:443
2019-09-08 17:39:21a1290c028466ca91fea662e7a568f8cbn/a152.199.19.161:443
2019-09-08 17:22:01cd8286c637da2a885d27f2c2ae5d7743Virustotal results 40 / 66 (60.61%) 152.199.19.161:443
2019-09-08 16:55:19e2aacca687f825be9d961a1966526ce2n/a185.127.27.238:443
2019-09-08 16:55:19e2aacca687f825be9d961a1966526ce2n/a172.217.22.78:443
2019-09-08 16:55:18e2aacca687f825be9d961a1966526ce2n/a216.58.210.5:443
2019-09-08 10:33:0677ca1a76d66969c35465a85d115ae986n/a152.199.19.161:443
2019-09-08 04:47:1351fbf7b2b1124924f2a5aa6429aa8fc0Virustotal results 23 / 69 (33.33%) 216.58.215.238:443
2019-09-08 04:47:1351fbf7b2b1124924f2a5aa6429aa8fc0Virustotal results 23 / 69 (33.33%) 172.217.168.69:443
2019-09-08 01:31:551df96238d33f2ccde3be08adbd684f9cVirustotal results 21 / 66 (31.82%) 152.199.19.161:443
2019-09-08 00:46:10a1ce534423d917cfb047cf29609af0b8n/a185.69.194.129:443
2019-09-07 22:26:35a2122224fb7cfed8dce6af67cb91ba6fn/a152.199.19.161:443
2019-09-07 21:32:12cbebaeecd86ab047f4cd2a8bacfdda21Virustotal results 57 / 70 (81.43%) 152.199.19.161:443
2019-09-07 21:08:15f05b74c21d83fcb429c2a8bc2c0efe5fVirustotal results 52 / 70 (74.29%) 152.199.19.161:443
2019-09-07 20:51:59b383dc4e30e2d96ee31a804aa69421f1n/a172.217.4.142:443
2019-09-07 20:51:59b383dc4e30e2d96ee31a804aa69421f1n/a172.217.14.69:443
2019-09-07 20:51:59b383dc4e30e2d96ee31a804aa69421f1n/a85.143.223.150:443
2019-09-07 20:50:55f5622db87a850e2f6a4e4f0e2df679edVirustotal results 57 / 70 (81.43%) 152.199.19.161:443
2019-09-07 20:44:50a171c88bfaf93d41c91dcf3fc3fbb72cn/a152.199.19.161:443

# of entries: 100 (max: 100)