JA3 Fingerprints

You can find further information about the JA3 fingerprint 96eba628dcb2b47607192ba74a3b55ba, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:96eba628dcb2b47607192ba74a3b55ba
First seen:2017-07-19 18:53:48 UTC
Last seen:2020-03-28 08:13:18 UTC
Status:Blacklisted
Malware samples:1'337
Destination IPs:156
Malware:Tofsee -
Listing date:2018-11-14 11:49:02

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-03-28 08:13:187d0d77195b18f47e203629bbd0044018n/a52.97.133.162:587
2020-03-28 00:44:33060d3c57ad3a89c6e600bb586cc814d0Virustotal results 19 / 65 (29.23%) 52.97.133.226:587
2020-03-27 08:06:4599b6fc26f6a4f013ae61cc3102e3a392n/a52.97.232.194:587
2020-03-26 19:49:31cdf6c5b37844378a0f1dfd0fcb89cda1Virustotal results 33 / 72 (45.83%) 52.97.189.98:587
2020-03-26 19:49:28cdf6c5b37844378a0f1dfd0fcb89cda1Virustotal results 33 / 72 (45.83%) 40.101.80.18:587
2020-03-26 19:49:25cdf6c5b37844378a0f1dfd0fcb89cda1Virustotal results 33 / 72 (45.83%) 52.97.232.210:587
2020-03-26 14:05:437563c96137f187d0dd3277f2b2e9fd77n/a52.97.176.34:587
2020-03-26 13:57:59d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 52.97.165.146:587
2020-03-26 13:57:57d86b5aad90c5c2928fdff9718cb8ef24Virustotal results 21 / 71 (29.58%) 52.97.129.242:587
2020-03-26 12:27:225a372fae95b828405954a558e723fd26n/a40.101.80.18:587
2020-03-26 12:27:225a372fae95b828405954a558e723fd26n/a52.97.155.114:587
2020-03-26 12:27:215a372fae95b828405954a558e723fd26n/a52.97.183.194:587
2020-03-26 12:27:215a372fae95b828405954a558e723fd26n/a52.97.144.178:587
2020-03-26 12:27:215a372fae95b828405954a558e723fd26n/a52.97.176.2:587
2020-03-26 12:27:195a372fae95b828405954a558e723fd26n/a52.97.152.210:587
2020-03-26 12:27:195a372fae95b828405954a558e723fd26n/a52.97.163.2:587
2020-03-26 04:15:136c70a4dd83753f4cb028bd19dd177d40Virustotal results 18 / 72 (25.00%) 52.97.186.18:587
2020-03-25 21:42:53a00af9729eff3c313db18914f9db4be4Virustotal results 23 / 73 (31.51%) 52.97.189.66:587
2020-03-25 21:42:49a00af9729eff3c313db18914f9db4be4Virustotal results 23 / 73 (31.51%) 40.101.12.66:587
2020-03-25 16:19:4839b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 52.98.16.226:587
2020-03-25 16:19:4839b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 40.101.137.50:587
2020-03-25 16:19:4339b961c13850e7910d07c9d1993b47a7Virustotal results 20 / 72 (27.78%) 52.97.232.242:587
2020-03-25 14:18:49c0d90be5de2fbba760a3ae94c4cdbf85Virustotal results 22 / 72 (30.56%) 40.101.18.18:587
2020-03-25 14:18:49c0d90be5de2fbba760a3ae94c4cdbf85Virustotal results 22 / 72 (30.56%) 40.101.137.34:587
2020-03-25 14:18:48c0d90be5de2fbba760a3ae94c4cdbf85Virustotal results 22 / 72 (30.56%) 52.97.144.2:587
2020-03-25 14:18:48c0d90be5de2fbba760a3ae94c4cdbf85Virustotal results 22 / 72 (30.56%) 40.101.137.98:587
2020-03-24 16:15:36a762b5e04a15393837dda914cebab4edn/a217.74.64.236:587
2020-03-24 15:03:49c09cd8de896d1a6d9615da2ed39698eaVirustotal results 54 / 72 (75.00%) 93.17.128.122:465
2020-03-24 09:08:387667b6f0e8959af9483c55e5fdec1a5aVirustotal results 55 / 73 (75.34%) 195.4.92.217:587
2020-03-24 09:08:387667b6f0e8959af9483c55e5fdec1a5aVirustotal results 55 / 73 (75.34%) 91.220.42.240:587
2020-03-24 07:37:42a69baf43aa0d54ae533f68cd99c91b3cVirustotal results 55 / 73 (75.34%) 185.39.146.19:465
2020-03-24 07:22:06fb5d99056bbec8b5c63a601e354fc338n/a195.130.217.240:587
2020-03-24 07:22:05fb5d99056bbec8b5c63a601e354fc338n/a162.241.78.24:465
2020-03-24 07:22:04fb5d99056bbec8b5c63a601e354fc338n/a146.20.161.11:587
2020-03-24 07:22:04fb5d99056bbec8b5c63a601e354fc338n/a93.17.128.164:465
2020-03-24 07:22:03fb5d99056bbec8b5c63a601e354fc338n/a68.87.20.6:587
2020-03-24 07:14:34f9838b48b76cd2e54b8a23f97eccd07fn/a78.47.159.103:587
2020-03-24 04:36:17b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 78.94.184.162:587
2020-03-24 04:36:17b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 178.15.4.178:587
2020-03-24 04:36:17b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 37.1.88.130:587
2020-03-24 04:36:17b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 78.94.184.162:465
2020-03-24 04:36:16b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 178.15.4.178:465
2020-03-24 04:36:16b485bc0512c504cb7bbbc7376718970eVirustotal results 55 / 73 (75.34%) 46.234.112.83:465
2020-03-24 03:32:325d2e7ec8465be49b01d7a210edb6021fVirustotal results 55 / 73 (75.34%) 64.29.151.235:465
2020-03-24 03:32:315d2e7ec8465be49b01d7a210edb6021fVirustotal results 55 / 73 (75.34%) 62.149.157.160:465
2020-03-24 01:39:15b4f86261b0f670996e3565eb26f75d66n/a103.6.198.201:587
2020-03-24 01:39:15b4f86261b0f670996e3565eb26f75d66n/a91.198.36.83:465
2020-03-24 01:39:15b4f86261b0f670996e3565eb26f75d66n/a202.137.235.17:587
2020-03-24 01:39:13b4f86261b0f670996e3565eb26f75d66n/a37.139.86.87:587
2020-03-24 00:43:19498712c2e86e43156e61b25b00ff4391n/a202.137.235.17:587
2020-03-24 00:43:18498712c2e86e43156e61b25b00ff4391n/a85.13.140.184:465
2020-03-24 00:43:16498712c2e86e43156e61b25b00ff4391n/a85.13.140.184:587
2020-03-23 22:48:408d2e93b7521a348c90a0e3b24c3863e5n/a64.136.44.44:465
2020-03-23 22:47:49de87b69bef15aedf7a3b9c9e0c4e269cVirustotal results 55 / 73 (75.34%) 205.139.110.242:587
2020-03-23 03:25:17c88c9a759a75c75845ee562243a89fb1n/a195.78.66.50:465
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a69.10.169.34:587
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a69.10.169.34:465
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a212.227.17.190:587
2020-03-22 07:13:317b16c7ab53f5ab79d73a22efbfec41dbn/a212.227.17.190:465
2020-03-22 07:01:23da89b5ed05a5819f578e88f14a98e17cn/a88.79.227.253:587
2020-03-22 07:01:23da89b5ed05a5819f578e88f14a98e17cn/a88.79.227.253:465
2020-03-21 20:40:08589e063d6dff968d7f91908a8789ba24n/a160.92.124.65:465
2020-03-20 18:47:56c839e7df2dd538ad2021e6a37bbcf8c0Virustotal results 57 / 73 (78.08%) 207.211.30.107:587
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a77.88.21.158:465
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a150.70.226.147:465
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a217.69.139.160:465
2020-03-19 18:31:5909e05ceb5a88f23167fbcd5c2eb275fen/a212.227.17.168:587
2020-03-19 03:37:341f20eca1556c0485144ab642d07a9c0fVirustotal results 55 / 72 (76.39%) 211.152.42.24:465
2020-03-18 16:55:13053954d663fb1affe65486cf59418ffdn/a23.65.116.16:443
2020-03-18 03:16:53b15e6a487b49c90239046db3f2629340Virustotal results 51 / 70 (72.86%) 130.206.19.162:465
2020-03-07 19:04:47249e052b738ab40f0e9a1f9723da6761Virustotal results 54 / 72 (75.00%) 5.62.42.125:443
2020-03-06 19:46:0546c564d7bf821027725ac57fe9038526Virustotal results 34 / 72 (47.22%) 23.217.109.79:443
2020-03-06 19:46:0446c564d7bf821027725ac57fe9038526Virustotal results 34 / 72 (47.22%) 46.255.138.38:443
2020-03-03 11:20:4678f7575b066daea8d029386ef77fd66en/a104.18.90.31:443
2020-02-08 17:26:2689c3792f6270ec19f49aa4ebe35ca283n/a109.71.161.200:443
2020-02-08 13:47:215b3b322cfddf0564ae3b2aad97e42d2an/a109.71.161.200:443
2020-02-08 13:30:57adf3894d910215fff25821358470bd86Virustotal results 49 / 72 (68.06%) 104.18.91.31:443
2020-02-08 12:31:18bfc6241e6b4c9a69d3c5e6de6f34bb3aVirustotal results 52 / 72 (72.22%) 109.71.161.200:443
2020-02-05 04:01:53ace76079ec40883e6b72ee202788c554Virustotal results 21 / 73 (28.77%) 104.18.90.31:443
2019-12-30 06:39:023f0d420de0b9ef2a628c6626acf14f68n/a104.18.90.31:443
2019-12-16 13:11:21af8a7832d3b51e6f4affe2131356278cVirustotal results 52 / 72 (72.22%) 104.18.90.31:443
2019-12-09 04:15:03a2fb434588ebde780f4d56cd28b61c5aVirustotal results 52 / 72 (72.22%) 104.18.90.31:443
2019-12-05 08:57:4847b2201a5bd70bcb96151432dcf1a289n/a104.18.91.31:443
2019-12-05 01:27:4138a1f66a9d2dea25e3fbb42ba9a8d7dan/a104.18.90.31:443
2019-12-05 01:27:3538a1f66a9d2dea25e3fbb42ba9a8d7dan/a104.18.91.31:443
2019-12-04 13:03:33fff59129d507fe509247a1003f79cc15n/a104.18.90.31:443
2019-12-04 13:03:33fff59129d507fe509247a1003f79cc15n/a104.18.91.31:443
2019-12-03 10:49:32d1bc52aaf9e4410988ef68f1289028b9Virustotal results 25 / 70 (35.71%) 104.18.90.31:443
2019-11-21 07:00:344f62f297fdeb4f3fb32a81929ebdda11n/a104.18.91.31:443
2019-11-06 09:20:089501ebd1284fb771286514230965120fn/a104.18.90.31:443
2019-11-06 08:38:023ef3cf7f4d3183d763312feddcecf745n/a104.18.91.31:443
2019-11-06 08:34:255c208dda395ef16244576bc7d2db012en/a104.18.90.31:443
2019-11-06 08:26:51193e39d3190204c30a44ae1ebad48af3n/a104.18.90.31:443
2019-10-23 17:31:49faff0fc97f4f2501d3ad0161b47b7cfen/a104.18.91.31:443
2019-10-18 10:58:53cf5da654b44384d47095e7aa13dca2fen/a104.18.91.31:443
2019-10-18 10:58:52cf5da654b44384d47095e7aa13dca2fen/a104.18.90.31:443
2019-10-18 10:45:56b755e5b216abb65f35c0dae92023ca24n/a104.18.90.31:443
2019-10-18 10:30:462f5e53ea1ff16c8091040e60318d53den/a104.18.91.31:443
2019-09-28 02:56:357ec51583156f33d9f0c2b5eadb9b2c1en/a104.16.146.241:443
2019-08-19 20:20:0352845c27b0cb7d20c3aee72f763abe84Virustotal results 32 / 70 (45.71%) 104.16.147.241:443

# of entries: 100 (max: 100)