JA3 Fingerprints

You can find further information about the JA3 fingerprint 9f62c4f26b90d3d757bea609e82f2eaf, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:9f62c4f26b90d3d757bea609e82f2eaf
First seen:2018-03-13 06:23:41 UTC
Last seen:2019-09-15 18:04:16 UTC
Status:Blacklisted
Malware samples:742
Destination IPs:183
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-09-15 18:04:17c061bf42d46c969a7aa020962954c193n/a216.58.204.35:443
2019-09-15 17:49:52528150b4149ee9a66286139f563c8698n/a216.58.213.3:443
2019-09-15 16:22:58b278dfb7390bb5b66338832ce46460c3n/a216.58.213.4:443
2019-09-15 14:34:56577ee15c57078a028b9414c1b1c88e44n/a216.58.198.163:443
2019-09-15 13:43:38b2b08f3b777d7d104ee83be1cf1b9667n/a216.58.198.163:443
2019-09-15 13:35:180f31b52675093a7ef2a84776e9b8c730n/a216.58.204.3:443
2019-09-15 13:27:20b826a659629549f2bcef9a5d3b133356n/a216.58.211.164:443
2019-09-15 13:22:42300f841368fbf8c372f50b60dcf79b0bn/a216.58.210.35:443
2019-09-14 23:10:45cc2c9a0d2b34fd5164d7819936cdc399n/a216.58.210.227:443
2019-09-14 23:10:43047fac1af519c4ba54cdbd3c98360fc1n/a216.58.213.100:443
2019-09-14 22:44:47a41d5aed7464cdf71f1aa1dbb23220c0n/a216.58.211.163:443
2019-09-14 22:42:404812fab226ea02cef9bc60ec36cf65bfn/a216.58.211.163:443
2019-09-14 22:39:36d4c71d5f777edafa43e98f2e814cd061Virustotal results 41 / 59 (69.49%) 216.58.210.36:443
2019-09-14 22:26:05319ef15e2d0f9c677352c3846a3223cbn/a216.58.198.164:443
2019-09-14 22:20:28bb1eb3da1d51265eaae7abb34c60affcn/a172.217.20.132:443
2019-09-14 13:47:590ef3146be7e2482a1a33e8e1528619ffVirustotal results 53 / 69 (76.81%) 173.194.76.104:443
2019-09-14 13:03:24166481c4e8454b93f747453d6b7cd225n/a216.58.206.132:443
2019-09-14 13:02:46fbdae9c9e7342b22aaf2400755cbff2en/a172.217.169.36:443
2019-09-14 13:00:260993a52ed92a22fbece92f7b43f299fen/a216.58.210.35:443
2019-09-14 12:55:51b229211b9f9185a5aba4f0100268bec3n/a216.58.204.3:443
2019-09-14 12:52:139995976defd4549b032e2f3290e8d8edVirustotal results 17 / 71 (23.94%) 172.217.169.67:443
2019-09-14 12:49:482025538a237c307d81e65fd9f30e3ceeVirustotal results 34 / 69 (49.28%) 216.58.213.3:443
2019-09-14 12:42:26266f8615ab3e7146a3570c57d5c2095cn/a216.58.204.228:443
2019-09-14 10:18:215ddeea9a4751f6c0ead51d8828fd917fn/a172.217.169.36:443
2019-09-14 10:01:33228ce7fb2cb3dd5a2bf2938db5926155Virustotal results 48 / 70 (68.57%) 172.217.169.36:443
2019-09-14 08:25:523d29b8b9a0aa2ecd30c998142a7576a4Virustotal results 47 / 69 (68.12%) 216.58.204.228:443
2019-09-13 18:31:204b8cab74c8684b0f08519509db3e7a2fVirustotal results 40 / 71 (56.34%) 74.125.133.94:443
2019-09-13 16:20:22d7b5b26a1f36a2d74f2eca0fab5c49a2Virustotal results 55 / 69 (79.71%) 173.194.76.94:443
2019-09-13 12:21:0147bbad3dde6304e6111a93f8d9148066Virustotal results 48 / 68 (70.59%) 173.194.76.105:443
2019-09-13 08:30:4552cd5af42f0c3fbb5e0f970a75819881Virustotal results 25 / 70 (35.71%) 173.194.76.105:443
2019-09-13 08:05:325a4204e0c2e18d6c4a661b81c25b6058Virustotal results 42 / 71 (59.15%) 173.194.76.103:443
2019-09-13 05:39:540ae10ec3b23de7dc52e0306db9c42173n/a74.125.206.94:443
2019-09-12 06:41:369c6d855e81c1bc5972e248ac1614a37cn/a172.217.20.100:443
2019-09-12 06:41:329c6d855e81c1bc5972e248ac1614a37cn/a172.217.17.131:443
2019-09-12 06:24:17a05230a21f84722993fed61bc8782488n/a172.217.168.228:443
2019-09-12 04:44:26283bd21f9706fbd61816a242354bef5cVirustotal results 20 / 70 (28.57%) 172.217.168.196:443
2019-09-11 19:38:55aa5d03c6c64f9fda34cfb78ec732a9f3Virustotal results 29 / 70 (41.43%) 172.217.168.195:443
2019-09-11 15:26:48832f9665c322828042fbce71e2f16dadVirustotal results 41 / 68 (60.29%) 172.217.20.68:443
2019-09-11 13:39:5070ae332cc52a925967acb976cfb110a6Virustotal results 33 / 62 (53.23%) 172.217.168.227:443
2019-09-11 10:57:3374206a0419720933754692c5dc91e27cVirustotal results 44 / 69 (63.77%) 216.58.208.99:443
2019-09-11 08:52:361baa07fa4388244e680e82b436e09b2an/a172.217.20.100:443
2019-09-11 08:01:4763ef83413dcc9a155d97816dfd1d7e68n/a172.217.20.100:443
2019-09-11 08:00:5302abc01354b5fd7671541e5a7ff313e3n/a172.217.168.196:443
2019-09-11 08:00:5202abc01354b5fd7671541e5a7ff313e3n/a172.217.168.228:443
2019-09-11 04:35:05a1dfe1a38e4b7e7c7304a9756f8a4fedVirustotal results 51 / 68 (75.00%) 172.217.20.100:443
2019-09-11 03:01:2069c4c0975e19511bb91f42176af91c30Virustotal results 12 / 70 (17.14%) 172.217.168.196:443
2019-09-10 17:34:12b9882684943f9a7552126e3a506da5a0Virustotal results 25 / 58 (43.10%) 172.217.17.35:443
2019-09-10 11:13:294b553690f33637c614d882428120cadfn/a172.217.17.35:443
2019-09-10 05:10:16067fcf06364ca8dc69dc8312911077b9Virustotal results 31/67 (46.27%) 172.217.168.196:443
2019-09-10 01:38:18a6cdda3bc17291eab7e6fa8b191dd549n/a172.217.17.67:443
2019-09-09 19:23:42e0b9a614233d5ec6e302795d453fa938n/a172.217.17.35:443
2019-09-09 08:27:0727d63be07526ddadcea98ccdb3554bfeVirustotal results 47 / 71 (66.20%) 216.58.208.99:443
2019-09-09 07:36:079e0d5752115236be3e7e97943dc3194dn/a172.217.20.99:443
2019-09-09 07:25:59b208cc4a1b3f308128b8dc829d2a6df3n/a172.217.168.195:443
2019-09-09 04:07:0091a1a74edab367bac02fdde5c6ad148fVirustotal results 45 / 65 (69.23%) 172.217.19.196:443
2019-09-09 03:30:41ab0e014d9f6ffe7d9db858fffc0bba10Virustotal results 51 / 69 (73.91%) 172.217.20.100:443
2019-09-08 23:30:41e5a795371fddd895edff42606a3612f3n/a172.217.19.195:443
2019-09-08 19:11:40ff583594225dd9b494b003fd193f3858Virustotal results 53 / 71 (74.65%) 172.217.20.100:443
2019-09-08 19:06:4190715d5784ea10349b387c051cc2dccan/a172.217.168.227:443
2019-09-08 18:47:07f70a31586c1ae8e7d37968b4867b8b4bVirustotal results 30 / 70 (42.86%) 172.217.19.195:443
2019-09-08 18:29:45d28510fa4f7da545e3b5caf30bcd454bn/a172.217.17.35:443
2019-09-08 12:45:00395a0adcc2f503deb0181ce7c8b69f72Virustotal results 52 / 70 (74.29%) 172.217.17.35:443
2019-09-08 12:33:4499f6c14ec292a39b29fa447b6bacd6acVirustotal results 35 / 71 (49.30%) 172.217.19.195:443
2019-09-08 09:10:40c8a80a2ce661a71acaaa18bccbdc6deen/a172.217.20.100:443
2019-09-08 06:23:0522f9ab2d5b0df72bb9ba1f2cdbb1e692n/a172.217.20.67:443
2019-09-08 05:52:17a68756b0aeea042a361c59f908c7708eVirustotal results 16 / 69 (23.19%) 172.217.20.100:443
2019-09-08 04:58:1784d922633d95634b51f279a53c255632Virustotal results 34 / 69 (49.28%) 172.217.20.100:443
2019-09-08 04:17:5971ee7e217d09aa326fe03ac74326f60dVirustotal results 33 / 68 (48.53%) 172.217.20.100:443
2019-09-07 23:07:15766283dcadabb9a7f81fbd0534243036Virustotal results 16 / 69 (23.19%) 172.217.168.227:443
2019-09-07 21:20:1870cc047f96ea43ee2dd03f5faca2fcd8n/a172.217.168.227:443
2019-09-07 21:10:01889aabe849517f935663355be3af1562Virustotal results 51 / 70 (72.86%) 172.217.20.100:443
2019-09-07 20:26:48131347fe03e1153be0b5a245d95ee686n/a172.217.19.195:443
2019-09-07 19:50:209f7d4e5412dc77c911242545edd4bc22n/a172.217.20.100:443
2019-09-07 19:21:55db2ffd5607ea8228bc8dd69efba20ab1Virustotal results 28 / 70 (40.00%) 172.217.20.100:443
2019-09-07 18:50:27bd054caf91b0b7bdca83f0d4ac29ce38n/a172.217.17.35:443
2019-09-07 02:36:25ddf0b57837afc7928fed535e75c6ba3cVirustotal results 36 / 70 (51.43%) 172.217.20.100:443
2019-09-07 02:31:40eea00988e2a8d78be70bd6057c1aad46Virustotal results 54 / 71 (76.06%) 172.217.16.68:443
2019-09-06 22:20:03cab15fe9de4778b98e1cfd3f43af1e20Virustotal results 47 / 69 (68.12%) 216.58.213.227:443
2019-09-06 22:11:5513f87e7ce23fb41785ec22b04d3777c1n/a216.58.213.227:443
2019-09-06 17:40:14b1473169870675270e02bdd8fce8aab8n/a216.58.213.227:443
2019-09-06 17:26:12f56254128f7ac5e979a945e3ef565b25n/a216.58.213.227:443
2019-09-06 16:00:2717d776a21be0501d2d86276aaa113780n/a216.58.213.227:443
2019-09-06 12:32:22e62e3096c01a76d673e02503857045f1Virustotal results 52 / 70 (74.29%) 216.58.213.227:443
2019-09-06 09:51:278566aa83f3d01243fea43a91433a25a2n/a172.217.16.68:443
2019-09-06 07:37:235cd39fcab95f01269592c680f791fe83Virustotal results 50 / 71 (70.42%) 172.217.19.67:443
2019-09-06 05:12:365eac9fb1b1eea1b6287a1d68a265246en/a216.58.213.227:443
2019-09-06 03:57:134bb8770ee9cfd34c705f5df263b0c6b3n/a172.217.19.67:443
2019-09-06 01:46:00617124c1635df6be0c02876c458ffbbbn/a216.58.213.227:443
2019-09-05 23:05:24b6f13f16434cdaa442a6cb54bf8cd10fn/a172.217.16.68:443
2019-09-05 16:36:261a149cd2bcc841382b2c17fc4c46fd0dVirustotal results 19 / 70 (27.14%) 216.58.213.227:443
2019-09-05 13:56:243650a48ec7c5dcb63047c60b8e3d0f83Virustotal results 40 / 71 (56.34%) 172.217.16.67:443
2019-09-05 13:27:29ae643c0f0084eec630d9368043fb3407n/a172.217.19.67:443
2019-09-05 12:06:272d3697ed42d1593a5126b8807cf6bc44n/a172.217.16.67:443
2019-09-05 11:07:178bab8643f8c8d0e8c2b8d3fbae37d672n/a172.217.16.68:443
2019-09-05 09:22:3753b7849599a5f5ff402f2598d0a0ae78n/a172.217.16.67:443
2019-09-05 08:52:39b1e8d24aec04915f090e4c2c32c9ed2an/a216.58.213.195:443
2019-09-05 07:51:3411bcd4327258f52459afe5fa71aaadd4n/a216.58.213.195:443
2019-09-05 07:25:43a84f2cbba685c5d764b3dbb3401a74e1n/a172.217.16.67:443
2019-09-05 06:31:54fcb9e86957131bb0a4b3ace45e0c2bcfVirustotal results 48 / 71 (67.61%) 172.217.16.68:443
2019-09-05 05:36:14d4f91073203f7f7a60f8a9f03237f7den/a172.217.16.68:443

# of entries: 100 (max: 100)