JA3 Fingerprints
You can find further information about the JA3 fingerprint 70a04365be5bbd4653698bebeb43ce68, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | 70a04365be5bbd4653698bebeb43ce68 |
|---|---|
| First seen: | 2019-07-02 06:26:56 UTC |
| Last seen: | 2020-05-30 04:19:00 UTC |
| Status: | Blacklisted |
| Malware samples: | 1'391 |
| Destination IPs: | 122 |
| Malware: | Tofsee  |
| Listing date: | 2020-01-09 14:20:16 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2020-05-30 04:19:00 | 70d12bc9d89785e3095e768fb2b10533 |  43 / 73 (58.90%)
| 172.217.23.132:443 |
| 2020-05-30 04:19:00 | 70d12bc9d89785e3095e768fb2b10533 | 43 / 73 (58.90%)
| 172.217.23.132:443 |
| 2020-05-29 23:39:02 | 3c43139fe11d77d4578ce7a103c2b270 | 39 / 73 (53.42%)
| 172.217.17.100:443 |
| 2020-05-29 23:39:02 | 3c43139fe11d77d4578ce7a103c2b270 | 39 / 73 (53.42%)
| 172.217.17.100:443 |
| 2020-05-29 23:39:01 | 3c43139fe11d77d4578ce7a103c2b270 | 39 / 73 (53.42%)
| 172.217.20.68:443 |
| 2020-05-29 23:39:01 | 3c43139fe11d77d4578ce7a103c2b270 | 39 / 73 (53.42%)
| 172.217.20.68:443 |
| 2020-05-29 19:24:59 | 0727c17c50d6510ef9324241ad001439 | 34 / 73 (46.58%)
| 172.217.17.36:443 |
| 2020-05-29 19:24:59 | 0727c17c50d6510ef9324241ad001439 | 34 / 73 (46.58%)
| 172.217.17.36:443 |
| 2020-05-29 18:42:12 | 1818543d2a2006ae9b498cdec8d1417d | 52 / 73 (71.23%)
| 172.217.168.196:443 |
| 2020-05-29 18:42:12 | 1818543d2a2006ae9b498cdec8d1417d | 52 / 73 (71.23%)
| 172.217.168.196:443 |
| 2020-05-28 07:06:36 | 4dd41c1bbce7c0b3ddc1543120720dd2 | 44 / 72 (61.11%)
| 216.58.205.228:443 |
| 2020-05-28 07:06:36 | 4dd41c1bbce7c0b3ddc1543120720dd2 | 44 / 72 (61.11%)
| 216.58.205.228:443 |
| 2020-05-27 20:42:41 | 42dafbd1c80c1e365f9531b94251cc84 | 42 / 72 (58.33%)
| 172.217.17.68:443 |
| 2020-05-27 20:42:41 | 42dafbd1c80c1e365f9531b94251cc84 | 42 / 72 (58.33%)
| 172.217.17.68:443 |
| 2020-05-25 18:58:09 | 186c95da68793cb3a44f0a0f2345058a | 43 / 71 (60.56%)
| 172.217.22.4:443 |
| 2020-05-25 18:58:09 | 186c95da68793cb3a44f0a0f2345058a | 43 / 71 (60.56%)
| 172.217.22.4:443 |
| 2020-05-24 05:29:39 | 70ac5436a28b279426146bb4e6903343 | 49 / 73 (67.12%)
| 172.217.17.36:443 |
| 2020-05-24 05:29:39 | 70ac5436a28b279426146bb4e6903343 | 49 / 73 (67.12%)
| 172.217.17.36:443 |
| 2020-05-23 21:11:27 | 5f115873fb6b326995fc21f752c4dd9d | 40 / 72 (55.56%)
| 172.217.17.68:443 |
| 2020-05-23 21:11:27 | 5f115873fb6b326995fc21f752c4dd9d | 40 / 72 (55.56%)
| 172.217.17.68:443 |
| 2020-05-23 18:43:15 | 5a1a11888f0f0931090d60e4f649f519 | 50 / 72 (69.44%)
| 216.58.205.228:443 |
| 2020-05-23 18:43:15 | 5a1a11888f0f0931090d60e4f649f519 | 50 / 72 (69.44%)
| 216.58.205.228:443 |
| 2020-04-16 05:21:30 | bbf841eb7a5a1be33296989686e29e94 | 49 / 73 (67.12%)
| 172.217.20.99:443 |
| 2020-04-16 05:21:30 | bbf841eb7a5a1be33296989686e29e94 | 49 / 73 (67.12%)
| 172.217.20.99:443 |
| 2020-04-16 05:21:29 | bbf841eb7a5a1be33296989686e29e94 | 49 / 73 (67.12%)
| 172.217.17.67:443 |
| 2020-04-16 05:21:29 | bbf841eb7a5a1be33296989686e29e94 | 49 / 73 (67.12%)
| 172.217.17.67:443 |
| 2020-04-15 10:25:22 | be659501e428d34ff2eafa282daeeed5 | 49 / 66 (74.24%)
| 172.217.20.99:443 |
| 2020-04-15 10:25:22 | be659501e428d34ff2eafa282daeeed5 | 49 / 66 (74.24%)
| 172.217.20.99:443 |
| 2020-04-14 19:38:38 | 18a79cf04e7726ac90e23d1133c66be0 | 57 / 73 (78.08%)
| 216.58.194.99:443 |
| 2020-04-14 19:38:38 | 18a79cf04e7726ac90e23d1133c66be0 | 57 / 73 (78.08%)
| 216.58.194.99:443 |
| 2020-04-11 03:47:19 | b52ef42e97e1645ed7bb15a72230bafa | 46 / 73 (63.01%)
| 172.217.17.67:443 |
| 2020-04-11 03:47:19 | b52ef42e97e1645ed7bb15a72230bafa | 46 / 73 (63.01%)
| 172.217.17.67:443 |
| 2020-04-11 00:26:49 | ad7af2a0453f66b89acbb4add75aa9aa | 46 / 73 (63.01%)
| 216.58.194.99:443 |
| 2020-04-11 00:26:49 | ad7af2a0453f66b89acbb4add75aa9aa | 46 / 73 (63.01%)
| 216.58.194.99:443 |
| 2020-04-09 03:46:28 | c38b6925bd83e1d548eb6d43759259cc | 54 / 72 (75.00%)
| 172.217.17.99:443 |
| 2020-04-09 03:46:28 | c38b6925bd83e1d548eb6d43759259cc | 54 / 72 (75.00%)
| 172.217.17.99:443 |
| 2020-04-08 14:40:47 | c192acaecb2d41271ad0e3022f808bb5 | 49 / 71 (69.01%)
| 216.58.215.227:443 |
| 2020-04-08 14:40:47 | c192acaecb2d41271ad0e3022f808bb5 | 49 / 71 (69.01%)
| 216.58.215.227:443 |
| 2020-04-07 07:01:43 | 607e2b02159d06fe393ff53bf2fbedf4 | n/a | 172.217.168.3:443 |
| 2020-04-07 07:01:43 | 607e2b02159d06fe393ff53bf2fbedf4 | n/a | 172.217.168.3:443 |
| 2020-04-07 06:56:22 | bbdac39b84c46b1e5c700da12252a374 | 55 / 73 (75.34%)
| 172.217.168.3:443 |
| 2020-04-07 06:56:22 | bbdac39b84c46b1e5c700da12252a374 | 55 / 73 (75.34%)
| 172.217.168.3:443 |
| 2020-04-07 06:48:16 | e11b6d57502097f45b952267a27a4c9f | n/a | 216.58.215.227:443 |
| 2020-04-07 06:48:16 | e11b6d57502097f45b952267a27a4c9f | n/a | 216.58.215.227:443 |
| 2020-04-07 06:39:52 | ef96067164e6bcb33439b5f68a97ce04 | n/a | 172.217.17.67:443 |
| 2020-04-07 06:39:52 | ef96067164e6bcb33439b5f68a97ce04 | n/a | 172.217.17.67:443 |
| 2020-04-06 19:45:12 | be15f4d76fc5f03f95bbe4cc7d560d93 | 35 / 71 (49.30%)
| 216.58.211.99:443 |
| 2020-04-06 19:45:12 | be15f4d76fc5f03f95bbe4cc7d560d93 | 35 / 71 (49.30%)
| 216.58.211.99:443 |
| 2020-04-06 19:45:04 | be15f4d76fc5f03f95bbe4cc7d560d93 | 35 / 71 (49.30%)
| 172.217.20.99:443 |
| 2020-04-06 19:45:04 | be15f4d76fc5f03f95bbe4cc7d560d93 | 35 / 71 (49.30%)
| 172.217.20.99:443 |
| 2020-04-06 13:42:20 | c526305deb4ccc957e2214546ab48516 | 42 / 72 (58.33%)
| 172.217.17.67:443 |
| 2020-04-06 13:42:20 | c526305deb4ccc957e2214546ab48516 | 42 / 72 (58.33%)
| 172.217.17.67:443 |
| 2020-04-05 14:09:38 | ac65e5b71679b7d3c447fb6e3fbaffa3 | 47 / 71 (66.20%)
| 172.217.20.99:443 |
| 2020-04-05 14:09:38 | ac65e5b71679b7d3c447fb6e3fbaffa3 | 47 / 71 (66.20%)
| 172.217.20.99:443 |
| 2020-04-05 05:48:25 | b4356e66d34b310f0e007d80d7244081 | 40 / 71 (56.34%)
| 172.217.168.35:443 |
| 2020-04-05 05:48:25 | b4356e66d34b310f0e007d80d7244081 | 40 / 71 (56.34%)
| 172.217.168.35:443 |
| 2020-04-03 22:16:02 | 47d64331af513502d4f5c6f4ab348ef6 | n/a | 74.125.28.94:443 |
| 2020-04-03 22:16:02 | 47d64331af513502d4f5c6f4ab348ef6 | n/a | 74.125.28.94:443 |
| 2020-04-03 22:01:28 | 3f8474528ca3cb2887e4686ee403906e | n/a | 216.58.211.99:443 |
| 2020-04-03 22:01:28 | 3f8474528ca3cb2887e4686ee403906e | n/a | 216.58.211.99:443 |
| 2020-04-03 21:31:55 | 7db2ca6e52c9a42b3dea23b633be393e | n/a | 74.125.28.94:443 |
| 2020-04-03 21:31:55 | 7db2ca6e52c9a42b3dea23b633be393e | n/a | 74.125.28.94:443 |
| 2020-04-03 21:30:52 | 33d2f7910f35b080aefde95fbe8a1068 | n/a | 172.217.168.35:443 |
| 2020-04-03 21:30:52 | 33d2f7910f35b080aefde95fbe8a1068 | n/a | 172.217.168.35:443 |
| 2020-04-03 21:24:56 | 3dc79f9ef9b3020de8df734864f9648f | n/a | 216.58.215.227:443 |
| 2020-04-03 21:24:56 | 3dc79f9ef9b3020de8df734864f9648f | n/a | 216.58.215.227:443 |
| 2020-04-03 21:03:09 | 114473afba7b60488dd1f3e141fbd888 | n/a | 172.217.168.35:443 |
| 2020-04-03 21:03:09 | 114473afba7b60488dd1f3e141fbd888 | n/a | 172.217.168.35:443 |
| 2020-04-03 19:28:58 | 768a4e253da69ffa972dc1b0b9728993 | n/a | 216.58.215.227:443 |
| 2020-04-03 19:28:58 | 768a4e253da69ffa972dc1b0b9728993 | n/a | 216.58.215.227:443 |
| 2020-04-03 07:31:00 | 6b33274e91e72a4b716cfc807baedd14 | n/a | 172.217.168.67:443 |
| 2020-04-03 07:31:00 | 6b33274e91e72a4b716cfc807baedd14 | n/a | 172.217.168.67:443 |
| 2020-03-27 21:44:55 | 4082e3cd8aa4fa38ef8b0d819bea7125 | 53 / 73 (72.60%)
| 216.58.215.227:443 |
| 2020-03-27 21:44:55 | 4082e3cd8aa4fa38ef8b0d819bea7125 | 53 / 73 (72.60%)
| 216.58.215.227:443 |
| 2020-03-26 08:29:14 | e555fd4b024defbad63d013da50c592d | n/a | 216.58.215.227:443 |
| 2020-03-26 08:29:14 | e555fd4b024defbad63d013da50c592d | n/a | 216.58.215.227:443 |
| 2020-03-26 07:09:15 | e9258526d540b0d6b7f7d5b00097da6d | 54 / 71 (76.06%)
| 172.217.20.99:443 |
| 2020-03-26 07:09:15 | e9258526d540b0d6b7f7d5b00097da6d | 54 / 71 (76.06%)
| 172.217.20.99:443 |
| 2020-03-26 06:40:49 | ce5cc15fd1d4421d551f0d834807c8e2 | n/a | 172.217.20.99:443 |
| 2020-03-26 06:40:49 | ce5cc15fd1d4421d551f0d834807c8e2 | n/a | 172.217.20.99:443 |
| 2020-03-25 08:25:52 | e4927c69ab20efd10f8ad729a209001c | n/a | 172.217.168.35:443 |
| 2020-03-25 08:25:52 | e4927c69ab20efd10f8ad729a209001c | n/a | 172.217.168.35:443 |
| 2020-03-25 08:09:49 | 2873d63754529ef748ec57511dc83309 | 53 / 71 (74.65%)
| 216.58.208.99:443 |
| 2020-03-25 08:09:49 | 2873d63754529ef748ec57511dc83309 | 53 / 71 (74.65%)
| 216.58.208.99:443 |
| 2020-03-24 17:35:17 | 03388e4249259a52fb8ecbd834071e33 | n/a | 172.217.17.67:443 |
| 2020-03-24 17:35:17 | 03388e4249259a52fb8ecbd834071e33 | n/a | 172.217.17.67:443 |
| 2020-03-24 15:03:48 | c09cd8de896d1a6d9615da2ed39698ea | 54 / 72 (75.00%)
| 172.217.20.99:443 |
| 2020-03-24 15:03:48 | c09cd8de896d1a6d9615da2ed39698ea | 54 / 72 (75.00%)
| 172.217.20.99:443 |
| 2020-03-24 07:22:05 | fb5d99056bbec8b5c63a601e354fc338 | n/a | 172.217.168.3:443 |
| 2020-03-24 07:22:05 | fb5d99056bbec8b5c63a601e354fc338 | n/a | 172.217.168.3:443 |
| 2020-03-24 02:30:21 | bccbe9a729c1266b744b2474206cb1b5 | n/a | 172.217.20.99:443 |
| 2020-03-24 02:30:21 | bccbe9a729c1266b744b2474206cb1b5 | n/a | 172.217.20.99:443 |
| 2020-03-24 01:39:14 | b4f86261b0f670996e3565eb26f75d66 | n/a | 216.58.215.227:443 |
| 2020-03-24 01:39:14 | b4f86261b0f670996e3565eb26f75d66 | n/a | 216.58.215.227:443 |
| 2020-03-24 00:43:19 | 498712c2e86e43156e61b25b00ff4391 | n/a | 172.217.18.99:443 |
| 2020-03-24 00:43:19 | 498712c2e86e43156e61b25b00ff4391 | n/a | 172.217.18.99:443 |
| 2020-03-24 00:43:18 | 498712c2e86e43156e61b25b00ff4391 | n/a | 172.217.22.4:443 |
| 2020-03-24 00:43:18 | 498712c2e86e43156e61b25b00ff4391 | n/a | 172.217.22.4:443 |
| 2020-03-24 00:43:16 | 498712c2e86e43156e61b25b00ff4391 | n/a | 216.58.205.228:443 |
| 2020-03-24 00:43:16 | 498712c2e86e43156e61b25b00ff4391 | n/a | 216.58.205.228:443 |
# of entries: 100 (max: 100)