JA3 Fingerprints

You can find further information about the JA3 fingerprint 9f62c4f26b90d3d757bea609e82f2eaf, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:9f62c4f26b90d3d757bea609e82f2eaf
First seen:2018-03-13 06:23:41 UTC
Last seen:2019-07-23 03:46:06 UTC
Status:Blacklisted
Malware samples:492
Destination IPs:137
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-07-23 03:46:069477e915b697b3c6f21677c8d4601b6fn/a172.217.168.68:443
2019-07-22 22:24:49f5c5e4ae493c3b8cdc6d84c17a302cf6Virustotal results 28/70 (40.00%) 172.217.168.68:443
2019-07-22 13:17:12bfcb8261e3ab82fd365878e78c10677an/a172.217.168.3:443
2019-07-22 10:58:428eee63f68d26510cb4a837c0ce08871cn/a172.217.168.68:443
2019-07-22 06:53:3524dc191c9fd8567589916adfd13f3fafn/a216.58.215.227:443
2019-07-22 05:49:535b71ddfd35311229ffa9c28df2e21ba2n/a172.217.168.68:443
2019-07-22 00:05:4040e7d425b0923a017665e37f14aef457n/a172.217.168.35:443
2019-07-21 20:49:46ba9c71c8cb404decadacd11924ae2c25n/a172.217.168.68:443
2019-07-21 19:07:152d392a81d2b3ecf5b455d88c727c2e18n/a172.217.168.68:443
2019-07-21 19:07:132d392a81d2b3ecf5b455d88c727c2e18n/a172.217.168.3:443
2019-07-20 12:27:552c8afe58a29cbf1b380aaffe590821ffn/a216.58.215.227:443
2019-07-18 23:16:364729f87d859883872aa224f9c9f101b1n/a172.217.168.68:443
2019-07-18 13:30:3416cc82dcf0dc5a705130ebdd079c50d0n/a172.217.168.3:443
2019-07-17 07:43:4313cb0fc20510ab206281bfab45ae139cn/a172.217.168.68:443
2019-07-17 06:14:507447a3b86e5b20ec82d70e57b10c58fcn/a172.217.168.67:443
2019-07-16 18:32:39ed66891448685c12fcf4ebf471aecdden/a172.217.168.68:443
2019-07-16 15:32:5072144ef5621a625b4ce91457b357ccc7n/a216.58.215.227:443
2019-07-16 15:08:01f155e0c4f2fb020077c96e730a098c78n/a172.217.168.35:443
2019-07-15 18:09:239acfb27a482a0ac42cd9caf72a24545cn/a172.217.168.68:443
2019-07-12 05:18:054eda2eeb63ce0a4d05569388a812a484n/a216.58.215.227:443
2019-07-11 16:19:53673c92785e75e35bbbb80a95aefebb65n/a172.217.168.35:443
2019-07-11 08:42:306f9b63b4e85d5a4c6694cb8fafe30b81n/a172.217.17.132:443
2019-07-11 06:40:1359f4105de61bf4e7eb491a8650402b7an/a172.217.20.68:443
2019-07-11 06:23:47d27a37012805e13ed81e374045650411n/a172.217.168.196:443
2019-07-10 22:36:4259ec5fab91f14de56c821d9b92c7a00en/a172.217.17.99:443
2019-07-10 13:34:4963e3cf468575d6828cb38b65eb746d4fn/a216.58.208.100:443
2019-07-10 08:59:547a4f7b61d740be2664bb7ebcc4a8ae54n/a172.217.168.228:443
2019-07-10 05:55:41421d608bfdb1a0a25bd6bb1daa349a60n/a172.217.17.99:443
2019-07-10 05:12:002d4a52cd9380d08537b2a909c1e7efc4n/a172.217.17.67:443
2019-07-10 01:19:482854612e4e31ddace1c0dbc401ea25bcn/a172.217.168.195:443
2019-07-09 20:48:5191e797e7359af85689877e9dc405235fn/a216.58.208.100:443
2019-07-09 17:28:35bd88dc6d2fedec6468452602a9da1ab8n/a172.217.20.99:443
2019-07-09 13:25:0311cd438b395cd9399204fa867b724c2dn/a172.217.17.132:443
2019-07-09 06:15:49a059f830872a775233648088eecd858cn/a216.58.208.99:443
2019-07-09 02:56:2570bdcfcf2b0ed00daa0940524c8b6bdbn/a216.58.211.100:443
2019-07-08 06:05:27e8d50f84670898ff45eba3a6b5bafbd1n/a172.217.20.99:443
2019-07-08 04:13:205006f34738d6cbcbb77a102e1198bba9n/a172.217.168.228:443
2019-07-08 04:13:195006f34738d6cbcbb77a102e1198bba9n/a172.217.17.35:443
2019-07-07 10:28:013db17121b35ced59585daba3ae557101n/a172.217.168.227:443
2019-07-06 21:55:397b320c583b777144180a0341479448a5n/a172.217.168.228:443
2019-07-01 05:58:3419ec7f687120d1bb75afe23c6f278e39n/a216.58.208.100:443
2019-07-01 05:58:3219ec7f687120d1bb75afe23c6f278e39n/a172.217.168.196:443
2019-06-30 13:19:1769faf13147f3becfb9c372201ef039f7n/a216.58.208.99:443
2019-06-29 20:25:37a4cb18e6d25ce92109f17ff72ec4970bn/a172.217.17.100:443
2019-06-29 05:46:219e78bc583a97fe7f3d73c35ba73aa318Virustotal results 41/68 (60.29%) 172.217.20.68:443
2019-06-29 05:26:219495f6da1a244f2e6cef8d368a2a9490n/a172.217.17.132:443
2019-06-29 05:26:199495f6da1a244f2e6cef8d368a2a9490n/a172.217.20.67:443
2019-06-27 17:52:1812f07108fcbe0a60b6bce36a24ffdb28n/a172.217.20.99:443
2019-06-27 13:22:2625ba213853c28a3aa2b4857bbfc347ebn/a172.217.19.196:443
2019-06-26 22:01:02420e48eb9fc473778b561deba2d72805n/a172.217.17.99:443
2019-06-07 12:24:545eaee3eb7f1661117f1b12c43c8df41fn/a108.177.119.94:443
2019-06-06 14:05:200bb1d2174cf133175b03f5361340e79dVirustotal results 19/72 (26.39%) 216.58.210.196:443
2019-06-06 00:07:043c6e2b293f9bb88aceee2bc3de5a6764n/a216.58.213.99:443
2019-06-06 00:07:043c6e2b293f9bb88aceee2bc3de5a6764n/a172.217.169.67:443
2019-06-06 00:05:48d7bce7dc29f9c05fba85e2922583c0cdVirustotal results 51/71 (71.83%) 216.58.212.100:443
2019-06-05 17:22:37d2e1ab7f2f5121c73addd2f03f53512eVirustotal results 27/72 (37.50%) 216.58.204.4:443
2019-05-30 22:52:19a23ad90afc863e82fd56ec3802ad0438Virustotal results 50/73 (68.49%) 172.217.18.68:443
2019-05-23 20:29:360a4c8c60f91d79c98e2e9a5a0cbcf852n/a216.58.205.100:443
2019-05-14 01:23:20e9137b0752e8b99dd1c90e49e2a90d1dn/a172.217.16.35:443
2019-05-11 23:17:41dac2bc3481a7b0b7740fb59dfd0caf5bn/a172.217.16.36:443
2019-05-11 05:53:10db3e2a66ee697352936983220504c72bn/a216.58.215.99:443
2019-05-11 05:53:10db3e2a66ee697352936983220504c72bn/a172.217.16.36:443
2019-05-09 09:14:006f9ee02afa7b8942daebd4d0d516ee57n/a172.217.16.36:443
2019-05-09 09:13:596f9ee02afa7b8942daebd4d0d516ee57n/a216.58.215.99:443
2019-04-27 13:18:5304189c076555294cb7bf7968927b5444n/a172.217.20.99:443
2019-04-25 06:47:592f5baa0f0b3d24c792ad901ebcaf9181Virustotal results 19/67 (28.36%) 172.217.168.228:443
2019-04-25 05:51:33536eb0fcbd82a4ae171ab3ef9c519a70Virustotal results 20/67 (29.85%) 172.217.17.36:443
2019-04-22 15:35:470a56cd95d117876de53abccd3f7966abn/a216.58.215.227:443
2019-04-22 15:35:460a56cd95d117876de53abccd3f7966abn/a172.217.168.67:443
2019-04-20 05:05:19385622c40b99b7dfbcad474a75ffc200n/a172.217.168.35:443
2019-04-18 17:39:39c2a36fb57f1f2c955dfd8f39b64d592fn/a172.217.168.68:443
2019-04-17 11:42:1061138763d767a244bdd401ab133cc68cn/a172.217.168.36:443
2019-04-15 16:07:48ca40674eeaa5daba6c5da021c954e3a2n/a172.217.168.3:443
2019-04-15 16:07:48ca40674eeaa5daba6c5da021c954e3a2n/a172.217.168.68:443
2019-04-15 00:09:282c771d9f779225a0fcf288d9e2adbbf8Virustotal results 24/70 (34.29%) 172.217.168.36:443
2019-04-14 14:30:4238d45c3da0d13826466e73a6713af23bn/a216.58.215.227:443
2019-04-13 07:11:29dc01b7fce9a08332ab428b4e9970276cn/a172.217.168.67:443
2019-04-12 12:05:12cc89735d61ea4bdb9eef360dd8825dban/a172.217.168.36:443
2019-04-12 08:57:42d119a419ff4cb26e4faef25eb8bbc190Virustotal results 19/72 (26.39%) 172.217.168.67:443
2019-04-11 04:54:48f1c4d05c8c0764c2267b56d9f7d33b25n/a172.217.168.35:443
2019-04-09 19:22:5635673840cff39a3ee467f98297198dd4n/a172.217.168.36:443
2019-04-07 10:58:42dfd2884b93775c662c3a057487f3da27Virustotal results 35/68 (51.47%) 172.217.168.36:443
2019-04-04 17:11:01f6ff62266948c8a9516f4c49d6421a52n/a172.217.168.35:443
2019-04-03 23:05:57010fda264262943eff357af31f3499a3Virustotal results 20/66 (30.30%) 172.217.168.36:443
2019-04-03 10:54:19a533ced14733741ef560d78619d26806n/a172.217.168.67:443
2019-04-03 09:24:477e8f9bfbe01acf6196bb16fd4cdb3413Virustotal results 27/68 (39.71%) 172.217.168.36:443
2019-04-03 06:34:300fba4b08cce1ba318e281253d25fcb8eVirustotal results 44/67 (65.67%) 216.58.215.227:443
2019-03-30 13:16:0632af06c16db062c54d91523b9373266eVirustotal results 44/65 (67.69%) 172.217.168.68:443
2019-02-01 06:05:00bf48ca1801b7e61f545ffee07ff44f68Virustotal results 41/71 (57.75%) 108.177.127.94:443
2019-01-14 14:36:2647d980700322d3005dbfafeebc9e41feVirustotal results 34/70 (48.57%) 173.194.69.94:443
2018-12-11 15:36:300ddb54791d2232498e2b25ed65484c89Virustotal results 24/70 (34.29%) 172.217.20.99:443
2018-12-10 23:44:03dac816d1c7b4ac33bc491a2c26ef83c2n/a172.217.168.228:443
2018-12-09 00:59:4399baca5d78a6427843dba64a5fc0c083Virustotal results 39/71 (54.93%) 172.217.168.227:443
2018-12-05 06:15:27f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 216.58.209.227:443
2018-12-05 06:15:27f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 216.58.205.4:443
2018-12-03 10:27:382859f008ada0a06ef6a1f635730c35f1Virustotal results 37/70 (52.86%) 216.58.209.227:443
2018-11-30 04:59:53f103fceb4d81aa1ff904dcd8a28fcc04Virustotal results 34/68 (50.00%) 216.58.208.195:443
2018-11-30 04:59:53f103fceb4d81aa1ff904dcd8a28fcc04Virustotal results 34/68 (50.00%) 216.58.204.132:443
2018-11-29 20:46:04020b08c9f4ece0ca858b702b57b5b6eeVirustotal results 37/69 (53.62%) 172.217.18.196:443
2018-11-29 13:40:24ebbc767e8d1540a8614e05da97a398f7Virustotal results 33/70 (47.14%) 172.217.18.196:443

# of entries: 100 (max: 100)