JA3 Fingerprints
You can find further information about the JA3 fingerprint a50a861119aceb0ccc74902e8fddb618, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | a50a861119aceb0ccc74902e8fddb618 |
|---|---|
| First seen: | 2018-01-02 08:16:23 UTC |
| Last seen: | 2018-07-05 02:33:08 UTC |
| Status: | Blacklisted |
| Malware samples: | 113 |
| Destination IPs: | 6 |
| Malware: | Tofsee  |
| Listing date: | 2020-01-09 14:30:27 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2018-07-05 02:33:08 | e5dfe98e38ab3ec6644f7be47f1f2757 |  40/67 (59.70%)
| 87.250.250.22:443 |
| 2018-07-05 02:33:08 | e5dfe98e38ab3ec6644f7be47f1f2757 | 40/67 (59.70%)
| 87.250.250.22:443 |
| 2018-06-29 05:42:01 | 92eaaab94bff559cac48bbe8f16770e2 | 37/64 (57.81%)
| 87.250.250.22:443 |
| 2018-06-29 05:42:01 | 92eaaab94bff559cac48bbe8f16770e2 | 37/64 (57.81%)
| 87.250.250.22:443 |
| 2018-06-24 19:33:05 | b615ff689101509b760415b534294205 | 13/68 (19.12%)
| 87.250.250.22:443 |
| 2018-06-24 19:33:05 | b615ff689101509b760415b534294205 | 13/68 (19.12%)
| 87.250.250.22:443 |
| 2018-06-22 13:41:00 | 54d0df55ded1a2ed78cdcf21c52931ac | 46/69 (66.67%)
| 87.250.250.22:443 |
| 2018-06-22 13:41:00 | 54d0df55ded1a2ed78cdcf21c52931ac | 46/69 (66.67%)
| 87.250.250.22:443 |
| 2018-06-20 14:55:50 | b179524b99b575e5f77cee6207521f13 | 43/68 (63.24%)
| 87.250.250.22:443 |
| 2018-06-20 14:55:50 | b179524b99b575e5f77cee6207521f13 | 43/68 (63.24%)
| 87.250.250.22:443 |
| 2018-06-19 06:44:44 | da0536aeeb260ef8610c8e4746de0fe0 | 49/68 (72.06%)
| 87.250.250.22:443 |
| 2018-06-19 06:44:44 | da0536aeeb260ef8610c8e4746de0fe0 | 49/68 (72.06%)
| 87.250.250.22:443 |
| 2018-06-19 06:09:14 | 9d70ecfe374efce15ae7055af48ad6fc | 38/68 (55.88%)
| 87.250.250.22:443 |
| 2018-06-19 06:09:14 | 9d70ecfe374efce15ae7055af48ad6fc | 38/68 (55.88%)
| 87.250.250.22:443 |
| 2018-06-18 07:11:47 | 5f85b1b0f9380a0f614848b9a1f48661 | 20/68 (29.41%)
| 87.250.250.22:443 |
| 2018-06-18 07:11:47 | 5f85b1b0f9380a0f614848b9a1f48661 | 20/68 (29.41%)
| 87.250.250.22:443 |
| 2018-06-15 17:43:23 | a31e3a9d03cf2bdfb00a0f537e98fdcf | 14/68 (20.59%)
| 87.250.250.22:443 |
| 2018-06-15 17:43:23 | a31e3a9d03cf2bdfb00a0f537e98fdcf | 14/68 (20.59%)
| 87.250.250.22:443 |
| 2018-06-13 07:32:34 | b2ff3c3152615f2ebb1b04f4f1912e3d | 18/67 (26.87%)
| 87.250.250.22:443 |
| 2018-06-13 07:32:34 | b2ff3c3152615f2ebb1b04f4f1912e3d | 18/67 (26.87%)
| 87.250.250.22:443 |
| 2018-06-12 06:47:04 | 81ca45edb152d23cea5d799ea2b92bf6 | 32/68 (47.06%)
| 87.250.250.22:443 |
| 2018-06-12 06:47:04 | 81ca45edb152d23cea5d799ea2b92bf6 | 32/68 (47.06%)
| 87.250.250.22:443 |
| 2018-06-02 22:27:45 | e3eab3c0fb35ef32bd08582a30133ff1 | 12/66 (18.18%)
| 87.250.250.22:443 |
| 2018-06-02 22:27:45 | e3eab3c0fb35ef32bd08582a30133ff1 | 12/66 (18.18%)
| 87.250.250.22:443 |
| 2018-05-27 16:49:29 | 776195c2c1b308a058b81eceed594120 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-05-27 16:49:29 | 776195c2c1b308a058b81eceed594120 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-05-24 04:42:17 | b2b6d1d6fdbbc6b37946800e18663492 | 43/66 (65.15%)
| 87.250.250.22:443 |
| 2018-05-24 04:42:17 | b2b6d1d6fdbbc6b37946800e18663492 | 43/66 (65.15%)
| 87.250.250.22:443 |
| 2018-05-16 04:34:51 | da0de5e1ace0a5adec91d019a008f1c9 | 23/67 (34.33%)
| 87.250.250.22:443 |
| 2018-05-16 04:34:51 | da0de5e1ace0a5adec91d019a008f1c9 | 23/67 (34.33%)
| 87.250.250.22:443 |
| 2018-04-26 08:52:12 | dc1a7b4a8b82a434821c30c9e7eaa227 | 47/67 (70.15%)
| 87.250.250.22:443 |
| 2018-04-26 08:52:12 | dc1a7b4a8b82a434821c30c9e7eaa227 | 47/67 (70.15%)
| 87.250.250.22:443 |
| 2018-04-25 20:00:49 | 0bf4e7ebdea9dd95fa5f307621358f15 | 47/67 (70.15%)
| 87.250.250.22:443 |
| 2018-04-25 20:00:49 | 0bf4e7ebdea9dd95fa5f307621358f15 | 47/67 (70.15%)
| 87.250.250.22:443 |
| 2018-04-25 14:06:48 | 677ed5aa68f7ffee23edca8a626da108 | 41/58 (70.69%)
| 87.250.250.22:443 |
| 2018-04-25 14:06:48 | 677ed5aa68f7ffee23edca8a626da108 | 41/58 (70.69%)
| 87.250.250.22:443 |
| 2018-04-17 12:37:25 | b5791c79e8cc3275efb1c95aa7c4490e | 46/67 (68.66%)
| 87.250.250.22:443 |
| 2018-04-17 12:37:25 | b5791c79e8cc3275efb1c95aa7c4490e | 46/67 (68.66%)
| 87.250.250.22:443 |
| 2018-04-17 11:13:29 | ba88118291d963dc7b6ea7254b93f669 | 52/68 (76.47%)
| 87.250.250.22:443 |
| 2018-04-17 11:13:29 | ba88118291d963dc7b6ea7254b93f669 | 52/68 (76.47%)
| 87.250.250.22:443 |
| 2018-04-13 04:28:13 | 8af56a3108bc25a74ffc632a52668295 | 40/66 (60.61%)
| 87.250.250.22:443 |
| 2018-04-13 04:28:13 | 8af56a3108bc25a74ffc632a52668295 | 40/66 (60.61%)
| 87.250.250.22:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 185.32.57.193:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 185.32.57.193:443 |
| 2018-04-12 23:14:28 | b6e6333e95aba0d845b3e92722d8b464 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-12 10:44:38 | bbf64f00315bf0b041c272ab8dbd5673 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-04-12 10:44:38 | bbf64f00315bf0b041c272ab8dbd5673 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-04-12 01:52:02 | b32a55d26693c6c9fa732a84cd50acca | 46/67 (68.66%)
| 87.250.250.22:443 |
| 2018-04-12 01:52:02 | b32a55d26693c6c9fa732a84cd50acca | 46/67 (68.66%)
| 87.250.250.22:443 |
| 2018-04-11 15:49:58 | c58f378003b3fad4b6da5f9b661134e7 | 19/68 (27.94%)
| 87.250.250.22:443 |
| 2018-04-11 15:49:58 | c58f378003b3fad4b6da5f9b661134e7 | 19/68 (27.94%)
| 87.250.250.22:443 |
| 2018-04-11 13:16:08 | ba900c1acc5c737e56b6c429b1dd988b | 32/68 (47.06%)
| 87.250.250.22:443 |
| 2018-04-11 13:16:08 | ba900c1acc5c737e56b6c429b1dd988b | 32/68 (47.06%)
| 87.250.250.22:443 |
| 2018-04-11 12:59:44 | 99c2680935ca9d170cd88155d14f8962 | n/a | 87.250.250.22:443 |
| 2018-04-11 12:59:44 | 99c2680935ca9d170cd88155d14f8962 | n/a | 87.250.250.22:443 |
| 2018-04-11 06:55:45 | 3f6d6a78d9e3275529eb1141c97e1d41 | n/a | 87.250.250.22:443 |
| 2018-04-11 06:55:45 | 3f6d6a78d9e3275529eb1141c97e1d41 | n/a | 87.250.250.22:443 |
| 2018-04-11 01:14:40 | e3ec22bac7271fee406e8f306ab0dbc5 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-11 01:14:40 | e3ec22bac7271fee406e8f306ab0dbc5 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-10 21:55:50 | bb3c915fe5f4d92af2444ec0f73331f7 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-04-10 21:55:50 | bb3c915fe5f4d92af2444ec0f73331f7 | 48/66 (72.73%)
| 87.250.250.22:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 87.250.250.22:443 |
| 2018-04-10 17:14:30 | d39dd93679df1c51ee2b64dfb2385a97 | 28/66 (42.42%)
| 87.250.250.22:443 |
| 2018-04-10 13:08:00 | bea8ef5bacc6f9bb168cb052c448ad6c | 42/66 (63.64%)
| 87.250.250.22:443 |
| 2018-04-10 13:08:00 | bea8ef5bacc6f9bb168cb052c448ad6c | 42/66 (63.64%)
| 87.250.250.22:443 |
| 2018-04-10 11:10:57 | e0476a7a3d0c013a0bc30a4c94576cda | 45/67 (67.16%)
| 87.250.250.22:443 |
| 2018-04-10 11:10:57 | e0476a7a3d0c013a0bc30a4c94576cda | 45/67 (67.16%)
| 87.250.250.22:443 |
| 2018-04-10 00:22:10 | 2cbe26285ee16335ac4f0d16e35a9307 | 48/67 (71.64%)
| 87.250.250.22:443 |
| 2018-04-10 00:22:10 | 2cbe26285ee16335ac4f0d16e35a9307 | 48/67 (71.64%)
| 87.250.250.22:443 |
| 2018-04-09 16:53:11 | bb558ec021e8624fb305cf3e71503b66 | 39/58 (67.24%)
| 87.250.250.22:443 |
| 2018-04-09 16:53:11 | bb558ec021e8624fb305cf3e71503b66 | 39/58 (67.24%)
| 87.250.250.22:443 |
| 2018-04-09 13:07:53 | 3da3a15b908645b8d1b8cc5076865822 | 49/67 (73.13%)
| 87.250.250.22:443 |
| 2018-04-09 13:07:53 | 3da3a15b908645b8d1b8cc5076865822 | 49/67 (73.13%)
| 87.250.250.22:443 |
| 2018-04-09 10:43:23 | 39cfcf769265e2fa34c00498833c7e8e | n/a | 87.250.250.22:443 |
| 2018-04-09 10:43:23 | 39cfcf769265e2fa34c00498833c7e8e | n/a | 87.250.250.22:443 |
| 2018-04-09 10:16:12 | ad01d10af1c6ef4809d493074f2fc0a3 | 44/67 (65.67%)
| 87.250.250.22:443 |
| 2018-04-09 10:16:12 | ad01d10af1c6ef4809d493074f2fc0a3 | 44/67 (65.67%)
| 87.250.250.22:443 |
| 2018-04-07 20:00:42 | 73dee7b109a70a3675e08ba6e6cf878f | 43/66 (65.15%)
| 87.250.250.22:443 |
| 2018-04-07 20:00:42 | 73dee7b109a70a3675e08ba6e6cf878f | 43/66 (65.15%)
| 87.250.250.22:443 |
| 2018-04-07 05:08:18 | 60a31ecfb2be30eec01befd09815f041 | 42/66 (63.64%)
| 87.250.250.22:443 |
| 2018-04-07 05:08:18 | 60a31ecfb2be30eec01befd09815f041 | 42/66 (63.64%)
| 87.250.250.22:443 |
| 2018-04-07 01:45:11 | d34f51c5dbe54abce237cde8913aa5b1 | n/a | 87.250.250.22:443 |
| 2018-04-07 01:45:11 | d34f51c5dbe54abce237cde8913aa5b1 | n/a | 87.250.250.22:443 |
| 2018-04-07 01:12:38 | 0597d2cb26d1ae68978054acb6042246 | 51/68 (75.00%)
| 87.250.250.22:443 |
| 2018-04-07 01:12:38 | 0597d2cb26d1ae68978054acb6042246 | 51/68 (75.00%)
| 87.250.250.22:443 |
| 2018-04-06 15:27:39 | f72079ea49e4777948db507f4a9a5378 | 18/67 (26.87%)
| 87.250.250.22:443 |
| 2018-04-06 15:27:39 | f72079ea49e4777948db507f4a9a5378 | 18/67 (26.87%)
| 87.250.250.22:443 |
| 2018-04-06 06:10:24 | f9d4cd552ab5069c0d3fabffd04a8aa4 | 45/67 (67.16%)
| 87.250.250.22:443 |
| 2018-04-06 06:10:24 | f9d4cd552ab5069c0d3fabffd04a8aa4 | 45/67 (67.16%)
| 87.250.250.22:443 |
| 2018-04-05 14:18:44 | 65f39e429b184bab83fb107a84a2bf16 | 51/66 (77.27%)
| 87.250.250.22:443 |
| 2018-04-05 14:18:44 | 65f39e429b184bab83fb107a84a2bf16 | 51/66 (77.27%)
| 87.250.250.22:443 |
| 2018-04-04 19:03:49 | fb72bce97e057c67761f90b4d797f43c | 45/66 (68.18%)
| 90.156.241.154:443 |
| 2018-04-04 19:03:49 | fb72bce97e057c67761f90b4d797f43c | 45/66 (68.18%)
| 87.250.250.22:443 |
| 2018-04-04 19:03:49 | fb72bce97e057c67761f90b4d797f43c | 45/66 (68.18%)
| 87.250.250.22:443 |
| 2018-04-04 19:03:49 | fb72bce97e057c67761f90b4d797f43c | 45/66 (68.18%)
| 90.156.241.154:443 |
| 2018-04-03 23:03:36 | d33b3e2d0fb5b478c4621de95e7f9775 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-03 23:03:36 | d33b3e2d0fb5b478c4621de95e7f9775 | 43/65 (66.15%)
| 87.250.250.22:443 |
| 2018-04-03 19:52:28 | d1aabce153d9fd56318f5a1d56305f36 | 45/63 (71.43%)
| 87.250.250.22:443 |
| 2018-04-03 19:52:28 | d1aabce153d9fd56318f5a1d56305f36 | 45/63 (71.43%)
| 87.250.250.22:443 |
# of entries: 100 (max: 100)