JA3 Fingerprints

You can find further information about the JA3 fingerprint 70a04365be5bbd4653698bebeb43ce68, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:70a04365be5bbd4653698bebeb43ce68
First seen:2019-07-02 06:26:56 UTC
Last seen:2020-04-05 05:48:25 UTC
Status:Blacklisted
Malware samples:1'367
Destination IPs:118
Malware:Tofsee -
Listing date:2020-01-09 14:20:16

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-04-05 05:48:25b4356e66d34b310f0e007d80d7244081Virustotal results 40 / 71 (56.34%) 172.217.168.35:443
2020-04-03 22:16:0247d64331af513502d4f5c6f4ab348ef6n/a74.125.28.94:443
2020-04-03 22:01:283f8474528ca3cb2887e4686ee403906en/a216.58.211.99:443
2020-04-03 21:31:557db2ca6e52c9a42b3dea23b633be393en/a74.125.28.94:443
2020-04-03 21:30:5233d2f7910f35b080aefde95fbe8a1068n/a172.217.168.35:443
2020-04-03 21:24:563dc79f9ef9b3020de8df734864f9648fn/a216.58.215.227:443
2020-04-03 21:03:09114473afba7b60488dd1f3e141fbd888n/a172.217.168.35:443
2020-04-03 19:28:58768a4e253da69ffa972dc1b0b9728993n/a216.58.215.227:443
2020-04-03 07:31:006b33274e91e72a4b716cfc807baedd14n/a172.217.168.67:443
2020-03-27 21:44:554082e3cd8aa4fa38ef8b0d819bea7125Virustotal results 53 / 73 (72.60%) 216.58.215.227:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.227:443
2020-03-26 07:09:15e9258526d540b0d6b7f7d5b00097da6dVirustotal results 54 / 71 (76.06%) 172.217.20.99:443
2020-03-26 06:40:49ce5cc15fd1d4421d551f0d834807c8e2n/a172.217.20.99:443
2020-03-25 08:25:52e4927c69ab20efd10f8ad729a209001cn/a172.217.168.35:443
2020-03-25 08:09:492873d63754529ef748ec57511dc83309Virustotal results 53 / 71 (74.65%) 216.58.208.99:443
2020-03-24 17:35:1703388e4249259a52fb8ecbd834071e33n/a172.217.17.67:443
2020-03-24 15:03:48c09cd8de896d1a6d9615da2ed39698eaVirustotal results 54 / 72 (75.00%) 172.217.20.99:443
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.3:443
2020-03-24 02:30:21bccbe9a729c1266b744b2474206cb1b5n/a172.217.20.99:443
2020-03-24 01:39:14b4f86261b0f670996e3565eb26f75d66n/a216.58.215.227:443
2020-03-24 00:43:19498712c2e86e43156e61b25b00ff4391n/a172.217.18.99:443
2020-03-24 00:43:18498712c2e86e43156e61b25b00ff4391n/a172.217.22.4:443
2020-03-24 00:43:16498712c2e86e43156e61b25b00ff4391n/a216.58.205.228:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a172.217.16.163:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.67:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.99:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.35:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.3:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.3:443
2020-03-22 06:57:233406c4398121a897f25d4e67023e7259n/a172.217.18.99:443
2020-03-22 06:56:4870c4c1cf0348043dda74b21fb5ae38e6n/a172.217.168.3:443
2020-03-22 06:52:441e2b1f625c92dd88611fc31bfa9e2b85n/a172.217.168.35:443
2020-03-22 06:52:431e2b1f625c92dd88611fc31bfa9e2b85n/a172.217.168.67:443
2020-03-21 21:48:03b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.3:443
2020-03-21 20:40:08589e063d6dff968d7f91908a8789ba24n/a216.58.215.227:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.38.117:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.34.117:443
2020-03-21 06:04:17a4bf21a69fb30c57ec8688cbd7e3cf89Virustotal results 54 / 73 (73.97%) 74.125.195.94:443
2020-03-20 20:16:29ae411dc63a6870e14d9a70460c5bf6c7Virustotal results 54 / 71 (76.06%) 172.217.18.99:443
2020-03-20 19:37:15beb3cbf2b96369f4e1a940548312ad09Virustotal results 52 / 73 (71.23%) 172.217.20.99:443
2020-03-20 18:47:57c839e7df2dd538ad2021e6a37bbcf8c0Virustotal results 57 / 73 (78.08%) 172.217.168.3:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a172.217.168.3:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a172.217.168.67:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a172.217.168.35:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 06:01:45a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-19 18:31:5709e05ceb5a88f23167fbcd5c2eb275fen/a216.58.215.227:443
2020-03-19 11:10:32b3c4dd0e7793b5ae6d08eca7d8b2a764Virustotal results 53 / 73 (72.60%) 172.217.20.99:443
2020-03-19 03:37:341f20eca1556c0485144ab642d07a9c0fVirustotal results 55 / 72 (76.39%) 172.217.168.35:443
2020-03-16 01:57:370cdad438301d86f0c776378cfa031e1bn/a216.58.211.99:443
2020-03-13 15:26:569819687801bccef3353063a751c733b1n/a172.217.20.99:443
2020-03-13 14:53:03e82950a1504736fa91f07926a4085982n/a172.217.168.35:443
2020-03-13 14:32:48b33eb01eb1160fb5795ece9dcb4af963n/a172.217.17.67:443
2020-03-13 14:32:48b33eb01eb1160fb5795ece9dcb4af963n/a172.217.20.99:443
2020-03-13 04:42:062e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.16.196:443
2020-03-13 04:41:582e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 216.58.207.68:443
2020-03-13 04:41:562e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.23.100:443
2020-03-13 04:41:402e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.18.4:443
2020-03-12 07:57:15ad156c5dbb416a2b85c1c31747285c74n/a172.217.20.99:443
2020-03-10 15:07:29218c928491cc6b4cab86838bb097612bn/a172.217.17.67:443
2020-03-10 14:53:29ee81881f7b68b90d1a771a3438552ea1n/a216.58.215.227:443
2020-03-10 14:42:340dddafcd190b8271e67fea946cba1c8cn/a74.125.197.94:443
2020-03-10 14:33:261ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 216.58.208.99:443
2020-03-10 14:33:251ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 172.217.20.99:443
2020-03-10 14:22:44df2567766706d8196a970dd06e138055n/a172.217.168.3:443
2020-03-09 18:10:17568dc5960385c0f5c552243725d8149fn/a172.217.20.99:443
2020-03-09 17:35:39893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 16:47:00980322fcc4ba63d32948f64dfffd3d0bn/a172.217.23.163:443
2020-03-08 15:08:50bb4da39a16a11d147b73b56980c7bbdan/a172.217.20.99:443
2020-03-08 12:30:45046607bba932850fdd26867b61126208n/a216.58.215.227:443
2020-03-08 12:17:302fc33023cc4c164d2f3fc49cae7193ebn/a216.58.215.227:443
2020-03-08 12:12:409bcd8aa537fc641cad31f9fdd996f973n/a172.217.20.99:443
2020-03-08 12:09:266bac2afa46efaa62a6e546f1bda22efbn/a172.217.168.67:443
2020-03-08 12:01:121f2d34be5ea8adef5155c384920b8890Virustotal results 55 / 72 (76.39%) 172.217.168.67:443
2020-03-08 03:08:033a0cbb947d31924795d51a881f4987e0n/a216.239.34.117:443
2020-03-08 03:08:023a0cbb947d31924795d51a881f4987e0n/a172.217.17.67:443
2020-03-08 03:07:13779ed3b6ab8dad6fd230170c0d5a147an/a216.58.215.227:443
2020-03-08 03:04:504b846c4595e9d64880e2ddf6a3f61955n/a172.217.20.99:443
2020-03-08 03:03:1727fa25d9b6af7689e195d39ab676f406n/a172.217.168.3:443
2020-03-06 16:41:35bdfca0447a67924ba0e21c00c047410dn/a172.217.20.99:443
2020-03-06 15:13:29e6d95eff5c9b6042548f536e7796c8abn/a172.217.20.99:443
2020-03-06 10:03:31b8d8d116b02e2cd83a6904d0b77f5400Virustotal results 38 / 73 (52.05%) 74.125.195.94:443
2020-03-05 14:10:356f97a1d9901d0339b1177cc9383fb860n/a172.217.20.99:443
2020-03-05 13:20:44612f1f54240628307b00b74bf7337a1cn/a172.217.23.163:443
2020-03-04 14:40:596bc3b81c1fab85abf87e29aaf98d3712n/a172.217.23.163:443
2020-03-04 14:37:19cf575cb3c451534a2baab0461b0cba6bn/a216.58.215.227:443
2020-03-04 14:35:51b6998cb5462145b9e41c7ae11c82c91dVirustotal results 50 / 69 (72.46%) 216.58.215.227:443
2020-03-04 14:30:56300b04c5dab0fbb309e4dd55b16858e3n/a172.217.20.99:443
2020-03-04 09:52:407f500fd53344df1736b41e5a5b2f5827n/a74.125.195.94:443
2020-03-04 09:33:34fdc12551e363fac57c6acacea07dcbc3n/a216.58.208.99:443
2020-03-04 09:24:202fb4632b47629daee0df94b10ad3ff16n/a172.217.23.163:443
2020-03-04 08:58:10cc34bdd5ab3cd0e2ddd66ab6a585388cn/a172.217.23.163:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 216.239.36.117:443
2020-03-01 12:17:090c87fb34a642e9e33c4ee715adaa8c1dVirustotal results 55 / 73 (75.34%) 172.217.20.99:443
2020-03-01 11:57:55552537a706d497dd46fb488adb5ffaban/a172.217.20.99:443
2020-03-01 11:57:55552537a706d497dd46fb488adb5ffaban/a216.58.208.99:443
2020-03-01 11:29:34b8b9ad8b6caff7d8f362aae15f874a1dn/a216.239.38.117:443
2020-03-01 11:29:34b8b9ad8b6caff7d8f362aae15f874a1dn/a172.217.168.3:443
2020-03-01 11:29:33b8b9ad8b6caff7d8f362aae15f874a1dn/a172.217.168.35:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a216.58.215.227:443

# of entries: 100 (max: 100)