JA3 Fingerprints
You can find further information about the JA3 fingerprint 906004246f3ba5e755b043c057254a29, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | 906004246f3ba5e755b043c057254a29 |
|---|---|
| First seen: | 2018-03-11 08:25:38 UTC |
| Last seen: | 2018-04-14 00:59:16 UTC |
| Status: | Blacklisted |
| Malware samples: | 170 |
| Destination IPs: | 133 |
| Malware: | Tofsee  |
| Listing date: | 2018-11-14 00:00:00 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 |  40/68 (58.82%)
| 173.194.220.94:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 173.194.220.147:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 173.194.220.99:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 173.194.220.99:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 64.233.162.94:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 173.194.220.94:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 173.194.220.147:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 64.233.162.104:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 64.233.162.104:443 |
| 2018-04-14 00:59:16 | d51a772f31ffe6046867ffdd2a9e97a8 | 40/68 (58.82%)
| 64.233.162.94:443 |
| 2018-04-13 21:38:55 | d7dd466784512bd4e0e0cf83bfb90e45 | 48/67 (71.64%)
| 173.194.222.99:443 |
| 2018-04-13 21:38:55 | d7dd466784512bd4e0e0cf83bfb90e45 | 48/67 (71.64%)
| 173.194.222.99:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.104:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.106:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 64.233.162.94:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 64.233.162.147:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.94:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 64.233.162.94:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 64.233.162.147:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.106:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.104:443 |
| 2018-04-13 09:40:30 | e1a443ff663c0f75ce35533afc2982c8 | 12/65 (18.46%)
| 74.125.205.94:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 179.60.192.36:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 172.217.13.228:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 173.194.221.147:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 172.217.13.228:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 173.194.221.147:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 179.60.192.36:443 |
| 2018-04-12 10:51:05 | b994137c4138e279331495fbe9b11233 | 20/67 (29.85%)
| 64.233.164.106:443 |
| 2018-04-12 10:51:05 | b994137c4138e279331495fbe9b11233 | 20/67 (29.85%)
| 64.233.164.106:443 |
| 2018-04-12 01:52:02 | b32a55d26693c6c9fa732a84cd50acca | 46/67 (68.66%)
| 173.255.204.90:443 |
| 2018-04-12 01:52:02 | b32a55d26693c6c9fa732a84cd50acca | 46/67 (68.66%)
| 173.255.204.90:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.94:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.106:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.162.94:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.162.103:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.103:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.106:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.162.94:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.94:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.162.103:443 |
| 2018-04-12 00:23:30 | b454de3696010873b63ed033f64e97db | 11/46 (23.91%)
| 64.233.165.103:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 64.233.161.147:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 172.217.15.68:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 172.217.15.67:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 172.217.15.67:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 172.217.15.68:443 |
| 2018-04-10 20:08:35 | d7feba0df94d3e721fa8c46a3a437921 | 38/63 (60.32%)
| 64.233.161.147:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.105:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.147:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.94:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.99:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.104:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.106:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.103:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.94:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.105:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.94:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.105:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.94:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.103:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.105:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.104:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.106:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 64.233.162.99:443 |
| 2018-04-10 19:28:14 | b4ecb57dd07f9ca72f448edeffdbde0e | 34/68 (50.00%)
| 173.194.220.147:443 |
| 2018-04-10 19:19:11 | ed4740733417d0dc349b012de0ab4245 | 46/64 (71.88%)
| 173.194.222.104:443 |
| 2018-04-10 19:19:11 | ed4740733417d0dc349b012de0ab4245 | 46/64 (71.88%)
| 172.217.15.68:443 |
| 2018-04-10 19:19:11 | ed4740733417d0dc349b012de0ab4245 | 46/64 (71.88%)
| 173.194.222.104:443 |
| 2018-04-10 19:19:11 | ed4740733417d0dc349b012de0ab4245 | 46/64 (71.88%)
| 172.217.15.68:443 |
| 2018-04-10 19:15:58 | e4ba7610673b76090814109bce0c0652 | n/a | 173.194.222.94:443 |
| 2018-04-10 19:15:58 | e4ba7610673b76090814109bce0c0652 | n/a | 173.194.222.94:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 64.233.162.94:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.99:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.103:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.94:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 64.233.162.103:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.94:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 64.233.162.94:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.99:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 64.233.162.103:443 |
| 2018-04-10 17:15:02 | bc9b2dbfe3b13eff179f73bcb77345b9 | 15/68 (22.06%)
| 74.125.205.103:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.103:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.94:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.94:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.106:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.147:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.105:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.104:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.94:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.104:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.147:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.103:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.105:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 64.233.164.106:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 173.194.222.94:443 |
| 2018-04-10 14:09:19 | d77537c2211d0f0b5fa687d214cc5a69 | 41/67 (61.19%)
| 173.194.220.103:443 |
| 2018-04-10 14:09:19 | d77537c2211d0f0b5fa687d214cc5a69 | 41/67 (61.19%)
| 64.233.161.94:443 |
| 2018-04-10 14:09:19 | d77537c2211d0f0b5fa687d214cc5a69 | 41/67 (61.19%)
| 173.194.220.94:443 |
| 2018-04-10 14:09:19 | d77537c2211d0f0b5fa687d214cc5a69 | 41/67 (61.19%)
| 173.194.220.103:443 |
# of entries: 100 (max: 100)