JA3 Fingerprints

You can find further information about the JA3 fingerprint 911479ac8a0813ed1241b3686ccdade9, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:911479ac8a0813ed1241b3686ccdade9
First seen:2018-03-19 23:24:59 UTC
Last seen:2020-03-30 04:09:18 UTC
Status:Blacklisted
Malware samples:285
Destination IPs:126
Malware:Tofsee -
Listing date:2018-11-14 12:39:46

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-03-30 04:09:18c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.35:443
2020-03-30 04:09:18c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.35:443
2020-03-30 04:09:17c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.67:443
2020-03-30 04:09:17c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.67:443
2020-03-29 19:59:493fbdd253b9cf04880b507036cf4f7006n/a216.58.215.227:443
2020-03-29 19:59:493fbdd253b9cf04880b507036cf4f7006n/a216.58.215.227:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a216.58.215.227:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a172.217.168.3:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a216.58.215.227:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a172.217.168.3:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.228:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a172.217.168.35:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.228:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a172.217.168.35:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.3:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.68:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.3:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.68:443
2020-03-24 17:33:4633eec12ec46b73bad66ed066f856d6b4n/a216.58.215.227:443
2020-03-24 17:33:4633eec12ec46b73bad66ed066f856d6b4n/a216.58.215.227:443
2020-03-24 07:22:06fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.4:443
2020-03-24 07:22:06fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.4:443
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.35:443
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.35:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.19.196:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.168.195:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.19.196:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.168.195:443
2020-03-22 06:52:451e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.227:443
2020-03-22 06:52:451e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.227:443
2020-03-22 06:52:441e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.228:443
2020-03-22 06:52:441e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.228:443
2020-03-21 21:48:03b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.36:443
2020-03-21 21:48:03b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.36:443
2020-03-21 21:48:02b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.35:443
2020-03-21 21:48:02b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.35:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a172.217.168.3:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a172.217.168.3:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a172.217.168.68:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a172.217.168.68:443
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-20 06:01:46a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.4:443
2020-03-20 06:01:46a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.4:443
2020-03-12 14:23:10cb0231ad35c0f171854e0cd454e4380bn/a172.217.168.35:443
2020-03-12 14:23:10cb0231ad35c0f171854e0cd454e4380bn/a172.217.168.35:443
2020-03-10 15:07:28218c928491cc6b4cab86838bb097612bn/a172.217.20.99:443
2020-03-10 15:07:28218c928491cc6b4cab86838bb097612bn/a172.217.20.99:443
2020-03-10 15:07:27218c928491cc6b4cab86838bb097612bn/a172.217.17.132:443
2020-03-10 15:07:27218c928491cc6b4cab86838bb097612bn/a172.217.17.132:443
2020-03-10 14:22:45df2567766706d8196a970dd06e138055n/a172.217.168.35:443
2020-03-10 14:22:45df2567766706d8196a970dd06e138055n/a172.217.168.35:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.68:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.68:443
2020-03-05 13:20:44612f1f54240628307b00b74bf7337a1cn/a216.239.32.117:443
2020-03-05 13:20:44612f1f54240628307b00b74bf7337a1cn/a216.239.32.117:443
2020-03-05 13:20:43612f1f54240628307b00b74bf7337a1cn/a216.58.207.67:443
2020-03-05 13:20:43612f1f54240628307b00b74bf7337a1cn/a216.58.207.67:443
2020-03-04 09:24:212fb4632b47629daee0df94b10ad3ff16n/a216.58.207.67:443
2020-03-04 09:24:212fb4632b47629daee0df94b10ad3ff16n/a216.58.207.67:443
2020-03-04 09:24:202fb4632b47629daee0df94b10ad3ff16n/a216.58.208.36:443
2020-03-04 09:24:202fb4632b47629daee0df94b10ad3ff16n/a216.58.208.36:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a216.58.211.100:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.168.195:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.20.99:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a216.58.211.100:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.168.195:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.20.99:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 172.217.168.68:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 216.239.36.117:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 172.217.168.68:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 216.239.36.117:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.68:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.3:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.68:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.3:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.4:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.67:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.4:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.67:443
2020-03-01 09:36:42bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.3:443
2020-03-01 09:36:42bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.3:443
2020-02-29 11:30:43b0638dd093b2c82a9f9cccf870fbe130n/a172.217.16.164:443
2020-02-29 11:30:43b0638dd093b2c82a9f9cccf870fbe130n/a172.217.16.164:443
2020-02-29 11:30:42b0638dd093b2c82a9f9cccf870fbe130n/a216.58.207.35:443
2020-02-29 11:30:42b0638dd093b2c82a9f9cccf870fbe130n/a216.58.207.35:443
2020-02-29 06:36:2138a7ff2c09e9bef0ad18aa48cc78c1ban/a172.217.168.68:443
2020-02-29 06:36:2138a7ff2c09e9bef0ad18aa48cc78c1ban/a172.217.168.68:443
2020-02-29 06:36:2038a7ff2c09e9bef0ad18aa48cc78c1ban/a216.58.215.227:443
2020-02-29 06:36:2038a7ff2c09e9bef0ad18aa48cc78c1ban/a216.58.215.227:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.4:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.67:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.4:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.67:443
2020-02-28 23:57:249b44ebbaf69ff3b4577f80fb93debebbn/a216.58.207.35:443
2020-02-28 23:57:249b44ebbaf69ff3b4577f80fb93debebbn/a216.58.207.35:443

# of entries: 100 (max: 100)