JA3 Fingerprints

You can find further information about the JA3 fingerprint 911479ac8a0813ed1241b3686ccdade9, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:911479ac8a0813ed1241b3686ccdade9
First seen:2018-03-19 23:24:59 UTC
Last seen:2020-03-30 04:09:18 UTC
Status:Blacklisted
Malware samples:285
Destination IPs:126
Malware:Tofsee -
Listing date:2018-11-14 12:39:46

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-03-30 04:09:18c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.35:443
2020-03-30 04:09:17c675ba5435b448c26e22d0f156faeb9dVirustotal results 53 / 73 (72.60%) 172.217.168.67:443
2020-03-29 19:59:493fbdd253b9cf04880b507036cf4f7006n/a216.58.215.227:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a216.58.215.227:443
2020-03-28 18:42:03f5261daf2935d35dfb5ec60fd074c2a2n/a172.217.168.3:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.228:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a172.217.168.35:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.3:443
2020-03-25 18:08:07617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.68:443
2020-03-24 17:33:4633eec12ec46b73bad66ed066f856d6b4n/a216.58.215.227:443
2020-03-24 07:22:06fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.4:443
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a172.217.168.35:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.19.196:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.168.195:443
2020-03-22 06:52:451e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.227:443
2020-03-22 06:52:441e2b1f625c92dd88611fc31bfa9e2b85n/a216.58.215.228:443
2020-03-21 21:48:03b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.36:443
2020-03-21 21:48:02b7eb8fc37f271ff0d74466cc21b18b51n/a172.217.168.35:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a172.217.168.3:443
2020-03-20 07:41:4804c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a172.217.168.68:443
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-20 06:01:46a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.4:443
2020-03-12 14:23:10cb0231ad35c0f171854e0cd454e4380bn/a172.217.168.35:443
2020-03-10 15:07:28218c928491cc6b4cab86838bb097612bn/a172.217.20.99:443
2020-03-10 15:07:27218c928491cc6b4cab86838bb097612bn/a172.217.17.132:443
2020-03-10 14:22:45df2567766706d8196a970dd06e138055n/a172.217.168.35:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 17:35:38893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.68:443
2020-03-05 13:20:44612f1f54240628307b00b74bf7337a1cn/a216.239.32.117:443
2020-03-05 13:20:43612f1f54240628307b00b74bf7337a1cn/a216.58.207.67:443
2020-03-04 09:24:212fb4632b47629daee0df94b10ad3ff16n/a216.58.207.67:443
2020-03-04 09:24:202fb4632b47629daee0df94b10ad3ff16n/a216.58.208.36:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a216.58.211.100:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.168.195:443
2020-03-03 08:17:12cd7c4eb5bb984cc22b0c10426049a064n/a172.217.20.99:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 172.217.168.68:443
2020-03-03 07:00:21af351ac5f2b441472cd7b6ae4d11d393Virustotal results 54 / 72 (75.00%) 216.239.36.117:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.68:443
2020-03-01 12:51:18bb94fdb841462c232054949eb2550d37Virustotal results 54 / 73 (73.97%) 172.217.168.3:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.4:443
2020-03-01 09:36:43bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.67:443
2020-03-01 09:36:42bb1e570d71b9a8e14f528ccd5887f5dan/a172.217.168.3:443
2020-02-29 11:30:43b0638dd093b2c82a9f9cccf870fbe130n/a172.217.16.164:443
2020-02-29 11:30:42b0638dd093b2c82a9f9cccf870fbe130n/a216.58.207.35:443
2020-02-29 06:36:2138a7ff2c09e9bef0ad18aa48cc78c1ban/a172.217.168.68:443
2020-02-29 06:36:2038a7ff2c09e9bef0ad18aa48cc78c1ban/a216.58.215.227:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.4:443
2020-02-29 04:00:55481c78c691f256e77c3968b0e0f0ed62n/a172.217.168.67:443
2020-02-28 23:57:249b44ebbaf69ff3b4577f80fb93debebbn/a216.58.207.35:443
2020-02-28 23:57:239b44ebbaf69ff3b4577f80fb93debebbn/a216.58.207.68:443
2020-02-28 14:44:292d31d105143c9812dfbc78f7324bf472n/a216.239.32.117:443
2020-02-26 11:59:3300d1d4336e0d303a046563091653b688Virustotal results 39 / 72 (54.17%) 172.217.168.4:443
2020-02-26 11:59:3300d1d4336e0d303a046563091653b688Virustotal results 39 / 72 (54.17%) 172.217.168.35:443
2020-02-26 11:59:3200d1d4336e0d303a046563091653b688Virustotal results 39 / 72 (54.17%) 172.217.168.3:443
2020-02-24 15:30:1553df4330e35929465be73df8a4b67567n/a172.217.20.99:443
2020-02-24 15:30:1553df4330e35929465be73df8a4b67567n/a216.58.211.100:443
2020-02-24 13:02:04aaaf98b4a2b1dfeeb9261a3ab708eed0n/a172.217.168.68:443
2020-02-24 13:02:03aaaf98b4a2b1dfeeb9261a3ab708eed0n/a172.217.168.3:443
2020-02-24 12:13:40b86b1948fd4d133fba15c71bae22caf8n/a172.217.168.35:443
2020-02-24 12:13:40b86b1948fd4d133fba15c71bae22caf8n/a172.217.168.68:443
2020-02-23 05:52:17a95b2e8d48b4b319f07d8362bc2bfe41n/a172.217.168.68:443
2020-02-23 05:52:17a95b2e8d48b4b319f07d8362bc2bfe41n/a172.217.168.3:443
2020-02-22 20:38:0123fbd7920fc354bd6a810f10ad4a0320n/a172.217.168.36:443
2020-02-22 20:38:0123fbd7920fc354bd6a810f10ad4a0320n/a172.217.168.35:443
2020-02-22 20:36:27022fb6a59d4c5e9776f074e248cf8bc1n/a216.58.213.131:443
2020-02-22 20:36:27022fb6a59d4c5e9776f074e248cf8bc1n/a216.58.215.36:443
2020-02-22 20:29:50444c5243fc4da6ac0ced7944f8710aa2n/a172.217.22.36:443
2020-02-22 20:29:49444c5243fc4da6ac0ced7944f8710aa2n/a172.217.20.99:443
2020-02-22 19:34:5018ed8f08d5ce845e668a2086dcdf3144n/a172.217.168.67:443
2020-02-22 19:34:4918ed8f08d5ce845e668a2086dcdf3144n/a216.58.215.228:443
2020-02-22 19:27:0087edba8fc274fd8dda4d53aa96ad4e3cn/a172.217.168.35:443
2020-02-22 19:27:0087edba8fc274fd8dda4d53aa96ad4e3cn/a172.217.168.68:443
2020-02-20 06:00:446eddec9806490977e5773b9c4086a3d0n/a172.217.20.99:443
2020-02-18 15:32:52a0c68d5256a4017cd25d6e887379d995n/a172.217.20.99:443
2020-02-18 15:32:50a0c68d5256a4017cd25d6e887379d995n/a172.217.19.196:443
2020-02-18 10:16:17feabcc4ec27833fb19d3dc546945884bn/a172.217.168.195:443
2020-02-18 10:16:16feabcc4ec27833fb19d3dc546945884bn/a216.58.205.68:443
2020-02-18 10:16:16feabcc4ec27833fb19d3dc546945884bn/a172.217.20.99:443
2020-02-15 14:27:52f520b03b0c759d3a88cfa5dfc1c8d3cen/a172.217.168.3:443
2020-02-15 14:27:50f520b03b0c759d3a88cfa5dfc1c8d3cen/a216.58.215.227:443
2020-01-30 02:46:59b93bd5afb4c16a1fbc35ac886e0edf55Virustotal results 26 / 73 (35.62%) 172.217.168.196:443
2020-01-30 02:46:59b93bd5afb4c16a1fbc35ac886e0edf55Virustotal results 26 / 73 (35.62%) 172.217.17.67:443
2020-01-28 22:59:11813ff8603e0d6f3efc156b8bc3e51ba8n/a172.217.168.68:443
2020-01-28 22:59:08813ff8603e0d6f3efc156b8bc3e51ba8n/a172.217.168.35:443
2020-01-27 21:23:153aadc1e63cb4322c62ea3a21fd2085d9n/a172.217.22.35:443
2020-01-27 21:23:143aadc1e63cb4322c62ea3a21fd2085d9n/a172.217.22.68:443
2020-01-23 23:47:53c405156d8c14b0ce5fd69ec53cf0558bVirustotal results 52 / 72 (72.22%) 172.217.168.3:443
2020-01-23 23:47:53c405156d8c14b0ce5fd69ec53cf0558bVirustotal results 52 / 72 (72.22%) 216.58.215.227:443
2020-01-23 23:47:53c405156d8c14b0ce5fd69ec53cf0558bVirustotal results 52 / 72 (72.22%) 172.217.168.36:443
2020-01-23 23:47:52c405156d8c14b0ce5fd69ec53cf0558bVirustotal results 52 / 72 (72.22%) 172.217.168.4:443
2020-01-22 13:23:268779a8be485715775b78d262ba74d5b4n/a172.217.168.3:443
2020-01-22 13:23:268779a8be485715775b78d262ba74d5b4n/a172.217.168.36:443
2020-01-22 01:39:26bb4bc69313d7cb79534650ff90b839b7n/a172.217.168.3:443
2020-01-22 01:39:26bb4bc69313d7cb79534650ff90b839b7n/a172.217.168.4:443
2020-01-18 13:48:393df8d316815a3db82a63d877b51c1be6n/a172.217.22.131:443
2019-12-29 12:27:4971361ac1a45b262d0e9a7b9aa99bec50Virustotal results 51 / 70 (72.86%) 216.58.215.227:443
2019-12-29 12:19:03f1e74ee0601ba179ebc73c9936a1facbn/a216.58.206.68:443
2019-12-29 12:19:03f1e74ee0601ba179ebc73c9936a1facbn/a216.58.198.35:443
2019-12-25 13:10:15a58be18de6ec8f955e4b2b63df1aa5ffn/a216.58.198.35:443

# of entries: 100 (max: 100)