JA3 Fingerprints

You can find further information about the JA3 fingerprint 70a04365be5bbd4653698bebeb43ce68, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:70a04365be5bbd4653698bebeb43ce68
First seen:2019-07-02 06:26:56 UTC
Last seen:2020-05-30 04:19:00 UTC
Status:Blacklisted
Malware samples:1'391
Destination IPs:122
Malware:Tofsee -
Listing date:2020-01-09 14:20:16

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-05-30 04:19:0070d12bc9d89785e3095e768fb2b10533Virustotal results 43 / 73 (58.90%) 172.217.23.132:443
2020-05-29 23:39:023c43139fe11d77d4578ce7a103c2b270Virustotal results 39 / 73 (53.42%) 172.217.17.100:443
2020-05-29 23:39:013c43139fe11d77d4578ce7a103c2b270Virustotal results 39 / 73 (53.42%) 172.217.20.68:443
2020-05-29 19:24:590727c17c50d6510ef9324241ad001439Virustotal results 34 / 73 (46.58%) 172.217.17.36:443
2020-05-29 18:42:121818543d2a2006ae9b498cdec8d1417dVirustotal results 52 / 73 (71.23%) 172.217.168.196:443
2020-05-28 07:06:364dd41c1bbce7c0b3ddc1543120720dd2Virustotal results 44 / 72 (61.11%) 216.58.205.228:443
2020-05-27 20:42:4142dafbd1c80c1e365f9531b94251cc84Virustotal results 42 / 72 (58.33%) 172.217.17.68:443
2020-05-25 18:58:09186c95da68793cb3a44f0a0f2345058aVirustotal results 43 / 71 (60.56%) 172.217.22.4:443
2020-05-24 05:29:3970ac5436a28b279426146bb4e6903343Virustotal results 49 / 73 (67.12%) 172.217.17.36:443
2020-05-23 21:11:275f115873fb6b326995fc21f752c4dd9dVirustotal results 40 / 72 (55.56%) 172.217.17.68:443
2020-05-23 18:43:155a1a11888f0f0931090d60e4f649f519Virustotal results 50 / 72 (69.44%) 216.58.205.228:443
2020-04-16 05:21:30bbf841eb7a5a1be33296989686e29e94Virustotal results 49 / 73 (67.12%) 172.217.20.99:443
2020-04-16 05:21:29bbf841eb7a5a1be33296989686e29e94Virustotal results 49 / 73 (67.12%) 172.217.17.67:443
2020-04-15 10:25:22be659501e428d34ff2eafa282daeeed5Virustotal results 49 / 66 (74.24%) 172.217.20.99:443
2020-04-14 19:38:3818a79cf04e7726ac90e23d1133c66be0Virustotal results 57 / 73 (78.08%) 216.58.194.99:443
2020-04-11 03:47:19b52ef42e97e1645ed7bb15a72230bafaVirustotal results 46 / 73 (63.01%) 172.217.17.67:443
2020-04-11 00:26:49ad7af2a0453f66b89acbb4add75aa9aaVirustotal results 46 / 73 (63.01%) 216.58.194.99:443
2020-04-09 03:46:28c38b6925bd83e1d548eb6d43759259ccVirustotal results 54 / 72 (75.00%) 172.217.17.99:443
2020-04-08 14:40:47c192acaecb2d41271ad0e3022f808bb5Virustotal results 49 / 71 (69.01%) 216.58.215.227:443
2020-04-07 07:01:43607e2b02159d06fe393ff53bf2fbedf4n/a172.217.168.3:443
2020-04-07 06:56:22bbdac39b84c46b1e5c700da12252a374Virustotal results 55 / 73 (75.34%) 172.217.168.3:443
2020-04-07 06:48:16e11b6d57502097f45b952267a27a4c9fn/a216.58.215.227:443
2020-04-07 06:39:52ef96067164e6bcb33439b5f68a97ce04n/a172.217.17.67:443
2020-04-06 19:45:12be15f4d76fc5f03f95bbe4cc7d560d93Virustotal results 35 / 71 (49.30%) 216.58.211.99:443
2020-04-06 19:45:04be15f4d76fc5f03f95bbe4cc7d560d93Virustotal results 35 / 71 (49.30%) 172.217.20.99:443
2020-04-06 13:42:20c526305deb4ccc957e2214546ab48516Virustotal results 42 / 72 (58.33%) 172.217.17.67:443
2020-04-05 14:09:38ac65e5b71679b7d3c447fb6e3fbaffa3Virustotal results 47 / 71 (66.20%) 172.217.20.99:443
2020-04-05 05:48:25b4356e66d34b310f0e007d80d7244081Virustotal results 40 / 71 (56.34%) 172.217.168.35:443
2020-04-03 22:16:0247d64331af513502d4f5c6f4ab348ef6n/a74.125.28.94:443
2020-04-03 22:01:283f8474528ca3cb2887e4686ee403906en/a216.58.211.99:443
2020-04-03 21:31:557db2ca6e52c9a42b3dea23b633be393en/a74.125.28.94:443
2020-04-03 21:30:5233d2f7910f35b080aefde95fbe8a1068n/a172.217.168.35:443
2020-04-03 21:24:563dc79f9ef9b3020de8df734864f9648fn/a216.58.215.227:443
2020-04-03 21:03:09114473afba7b60488dd1f3e141fbd888n/a172.217.168.35:443
2020-04-03 19:28:58768a4e253da69ffa972dc1b0b9728993n/a216.58.215.227:443
2020-04-03 07:31:006b33274e91e72a4b716cfc807baedd14n/a172.217.168.67:443
2020-03-27 21:44:554082e3cd8aa4fa38ef8b0d819bea7125Virustotal results 53 / 73 (72.60%) 216.58.215.227:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.227:443
2020-03-26 07:09:15e9258526d540b0d6b7f7d5b00097da6dVirustotal results 54 / 71 (76.06%) 172.217.20.99:443
2020-03-26 06:40:49ce5cc15fd1d4421d551f0d834807c8e2n/a172.217.20.99:443
2020-03-25 08:25:52e4927c69ab20efd10f8ad729a209001cn/a172.217.168.35:443
2020-03-25 08:09:492873d63754529ef748ec57511dc83309Virustotal results 53 / 71 (74.65%) 216.58.208.99:443
2020-03-24 17:35:1703388e4249259a52fb8ecbd834071e33n/a172.217.17.67:443
2020-03-24 15:03:48c09cd8de896d1a6d9615da2ed39698eaVirustotal results 54 / 72 (75.00%) 172.217.20.99:443
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.3:443
2020-03-24 02:30:21bccbe9a729c1266b744b2474206cb1b5n/a172.217.20.99:443
2020-03-24 01:39:14b4f86261b0f670996e3565eb26f75d66n/a216.58.215.227:443
2020-03-24 00:43:19498712c2e86e43156e61b25b00ff4391n/a172.217.18.99:443
2020-03-24 00:43:18498712c2e86e43156e61b25b00ff4391n/a172.217.22.4:443
2020-03-24 00:43:16498712c2e86e43156e61b25b00ff4391n/a216.58.205.228:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a172.217.16.163:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.67:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.99:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.35:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.3:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.3:443
2020-03-22 06:57:233406c4398121a897f25d4e67023e7259n/a172.217.18.99:443
2020-03-22 06:56:4870c4c1cf0348043dda74b21fb5ae38e6n/a172.217.168.3:443
2020-03-22 06:52:441e2b1f625c92dd88611fc31bfa9e2b85n/a172.217.168.35:443
2020-03-22 06:52:431e2b1f625c92dd88611fc31bfa9e2b85n/a172.217.168.67:443
2020-03-21 21:48:03b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.3:443
2020-03-21 20:40:08589e063d6dff968d7f91908a8789ba24n/a216.58.215.227:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.38.117:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.34.117:443
2020-03-21 06:04:17a4bf21a69fb30c57ec8688cbd7e3cf89Virustotal results 54 / 73 (73.97%) 74.125.195.94:443
2020-03-20 20:16:29ae411dc63a6870e14d9a70460c5bf6c7Virustotal results 54 / 71 (76.06%) 172.217.18.99:443
2020-03-20 19:37:15beb3cbf2b96369f4e1a940548312ad09Virustotal results 52 / 73 (71.23%) 172.217.20.99:443
2020-03-20 18:47:57c839e7df2dd538ad2021e6a37bbcf8c0Virustotal results 57 / 73 (78.08%) 172.217.168.3:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a172.217.168.3:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a172.217.168.67:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a172.217.168.35:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 06:01:45a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-19 18:31:5709e05ceb5a88f23167fbcd5c2eb275fen/a216.58.215.227:443
2020-03-19 11:10:32b3c4dd0e7793b5ae6d08eca7d8b2a764Virustotal results 53 / 73 (72.60%) 172.217.20.99:443
2020-03-19 03:37:341f20eca1556c0485144ab642d07a9c0fVirustotal results 55 / 72 (76.39%) 172.217.168.35:443
2020-03-16 01:57:370cdad438301d86f0c776378cfa031e1bn/a216.58.211.99:443
2020-03-13 15:26:569819687801bccef3353063a751c733b1n/a172.217.20.99:443
2020-03-13 14:53:03e82950a1504736fa91f07926a4085982n/a172.217.168.35:443
2020-03-13 14:32:48b33eb01eb1160fb5795ece9dcb4af963n/a172.217.17.67:443
2020-03-13 14:32:48b33eb01eb1160fb5795ece9dcb4af963n/a172.217.20.99:443
2020-03-13 04:42:062e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.16.196:443
2020-03-13 04:41:582e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 216.58.207.68:443
2020-03-13 04:41:562e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.23.100:443
2020-03-13 04:41:402e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.18.4:443
2020-03-12 07:57:15ad156c5dbb416a2b85c1c31747285c74n/a172.217.20.99:443
2020-03-10 15:07:29218c928491cc6b4cab86838bb097612bn/a172.217.17.67:443
2020-03-10 14:53:29ee81881f7b68b90d1a771a3438552ea1n/a216.58.215.227:443
2020-03-10 14:42:340dddafcd190b8271e67fea946cba1c8cn/a74.125.197.94:443
2020-03-10 14:33:261ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 216.58.208.99:443
2020-03-10 14:33:251ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 172.217.20.99:443
2020-03-10 14:22:44df2567766706d8196a970dd06e138055n/a172.217.168.3:443
2020-03-09 18:10:17568dc5960385c0f5c552243725d8149fn/a172.217.20.99:443
2020-03-09 17:35:39893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 16:47:00980322fcc4ba63d32948f64dfffd3d0bn/a172.217.23.163:443
2020-03-08 15:08:50bb4da39a16a11d147b73b56980c7bbdan/a172.217.20.99:443
2020-03-08 12:30:45046607bba932850fdd26867b61126208n/a216.58.215.227:443
2020-03-08 12:17:302fc33023cc4c164d2f3fc49cae7193ebn/a216.58.215.227:443
2020-03-08 12:12:409bcd8aa537fc641cad31f9fdd996f973n/a172.217.20.99:443
2020-03-08 12:09:266bac2afa46efaa62a6e546f1bda22efbn/a172.217.168.67:443

# of entries: 100 (max: 100)