JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2020-01-18 13:48:39 UTC
Status:Blacklisted
Malware samples:2'230
Destination IPs:485
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-01-18 13:48:393df8d316815a3db82a63d877b51c1be6n/a216.58.204.132:443
2020-01-18 13:48:393df8d316815a3db82a63d877b51c1be6n/a216.58.198.196:443
2020-01-15 16:42:00a5217d78ec1fc4653b0a03aa81625e42n/a172.217.13.100:443
2020-01-14 08:21:00623d176dfe7902bb3266fef1ed8dbb72n/a216.239.32.117:443
2020-01-13 10:08:16d72a71cc651da159d6e1717c251929e2Virustotal results 52 / 71 (73.24%) 172.217.168.196:443
2020-01-13 09:55:447e89fb39e31840ae0ea64f6ecf5df1bfn/a172.217.168.36:443
2020-01-13 09:55:437e89fb39e31840ae0ea64f6ecf5df1bfn/a216.58.215.227:443
2020-01-13 09:31:31bc293f0db61c41a6881a74d8af572e32Virustotal results 52 / 71 (73.24%) 216.58.215.228:443
2020-01-13 09:16:11747607e64fd8e14473ae6b1ff458fbb0n/a172.217.168.196:443
2020-01-13 08:49:40d8132df033a2b470e0013972a42da105n/a172.217.17.68:443
2020-01-13 08:49:40d8132df033a2b470e0013972a42da105n/a172.217.168.196:443
2020-01-11 22:42:43be1d6dcc7ae176ecd3446fe50b38a1f9n/a172.217.168.4:443
2020-01-11 22:42:42be1d6dcc7ae176ecd3446fe50b38a1f9n/a172.217.168.67:443
2020-01-11 21:58:03599fed32de5f88bc6dae0338e88416bdn/a172.217.168.67:443
2020-01-11 16:40:15fde2cd285b8c0ad5cb609b447ec65698n/a172.217.21.67:443
2020-01-08 07:26:49d2d9b5fec0a1836d83f8faaa0e4dea44n/a172.217.13.100:443
2020-01-07 09:19:17a67c067bee796c41f4f487a964db99cfVirustotal results 53 / 72 (73.61%) 216.58.215.227:443
2020-01-07 03:52:22a4c82860e96910d9ba9fea34c652aea3n/a172.217.22.131:443
2020-01-07 02:26:05a49869dff1d93f0f5db1856195674ddcn/a172.217.13.100:443
2020-01-07 02:26:05a49869dff1d93f0f5db1856195674ddcn/a172.217.13.195:443
2020-01-07 00:07:36a0bfac3acc568ccef33df1b71e2fa987Virustotal results 52 / 71 (73.24%) 216.58.206.36:443
2020-01-07 00:07:13a0bfac3acc568ccef33df1b71e2fa987Virustotal results 52 / 71 (73.24%) 216.58.198.35:443
2020-01-06 15:07:14a1e969d9e75d785e7e33e7a5d5d1c147n/a172.217.18.196:443
2020-01-06 09:25:48abbec4fd51260b9d8308a4c865a02481Virustotal results 56 / 73 (76.71%) 172.217.168.196:443
2020-01-06 02:51:07a4879f7c0309197bc2f65b9066a129d8Virustotal results 56 / 73 (76.71%) 216.58.198.35:443
2020-01-06 02:51:00a4879f7c0309197bc2f65b9066a129d8Virustotal results 56 / 73 (76.71%) 216.58.206.35:443
2020-01-06 01:49:45021fc7e45adc4439587a07574e648966n/a216.58.201.227:443
2020-01-06 01:49:42021fc7e45adc4439587a07574e648966n/a216.58.209.228:443
2020-01-05 21:02:43a9f00889009fbb4ca5328642a46567f0n/a172.217.13.195:443
2020-01-05 21:02:34a9f00889009fbb4ca5328642a46567f0n/a172.217.13.100:443
2020-01-05 19:33:117f85b73f9c16c727c46194f6530258d9n/a216.58.198.35:443
2020-01-05 19:33:117f85b73f9c16c727c46194f6530258d9n/a216.58.206.35:443
2020-01-05 19:33:017f85b73f9c16c727c46194f6530258d9n/a216.58.208.164:443
2020-01-05 19:15:4479a43ed5e2edf32d2efe526e8b76f375n/a172.217.23.99:443
2020-01-05 16:38:55724fd37c4975d110c6ba882b29efefdbn/a172.217.168.35:443
2020-01-05 16:38:55724fd37c4975d110c6ba882b29efefdbn/a216.58.215.227:443
2020-01-05 16:38:55724fd37c4975d110c6ba882b29efefdbn/a216.58.215.228:443
2020-01-05 13:03:552ca519f0763d2f4c7b3559bf9d589bb4n/a172.217.168.196:443
2020-01-04 23:31:15a96922e59a7ff8328adbcbd3ce3be259Virustotal results 52 / 72 (72.22%) 172.217.168.35:443
2020-01-04 21:32:001640c7824f875d32ac6532f41a7b4780n/a172.217.13.195:443
2020-01-04 04:14:07abcdee656a66d9fa41f6c278ecc27616n/a172.217.168.195:443
2020-01-04 04:14:07abcdee656a66d9fa41f6c278ecc27616n/a172.217.168.196:443
2020-01-04 04:14:07abcdee656a66d9fa41f6c278ecc27616n/a216.58.208.99:443
2020-01-02 06:35:534225b37d141afd0e9eb572a427f42c62n/a216.58.209.227:443
2020-01-02 05:46:012e87df2d6de0dc91b89e0c8abfb27d3an/a172.217.168.35:443
2020-01-02 05:46:012e87df2d6de0dc91b89e0c8abfb27d3an/a216.58.215.227:443
2020-01-02 05:46:012e87df2d6de0dc91b89e0c8abfb27d3an/a172.217.168.4:443
2020-01-02 05:46:012e87df2d6de0dc91b89e0c8abfb27d3an/a172.217.168.68:443
2020-01-01 05:19:02a40ba0bcd7a2c8cb0eefd96c6cedc891Virustotal results 54 / 72 (75.00%) 172.217.168.36:443
2020-01-01 05:19:02a40ba0bcd7a2c8cb0eefd96c6cedc891Virustotal results 54 / 72 (75.00%) 172.217.168.35:443
2020-01-01 05:05:5315a8d0958542f3d43b538ecf4fb1f91bn/a172.217.17.36:443
2020-01-01 05:05:5315a8d0958542f3d43b538ecf4fb1f91bn/a172.217.17.35:443
2020-01-01 05:05:5315a8d0958542f3d43b538ecf4fb1f91bn/a172.217.17.68:443
2020-01-01 05:05:5315a8d0958542f3d43b538ecf4fb1f91bn/a172.217.20.99:443
2019-12-30 11:24:10a442ee8ba843d117a0bdeb13f72a7161n/a172.217.168.3:443
2019-12-30 11:24:10a442ee8ba843d117a0bdeb13f72a7161n/a172.217.168.67:443
2019-12-30 11:24:10a442ee8ba843d117a0bdeb13f72a7161n/a172.217.168.35:443
2019-12-30 11:15:00a102a979e0af9eda56cb891834290244Virustotal results 51 / 72 (70.83%) 172.217.20.99:443
2019-12-30 06:39:023f0d420de0b9ef2a628c6626acf14f68n/a216.58.215.227:443
2019-12-30 06:39:023f0d420de0b9ef2a628c6626acf14f68n/a172.217.168.36:443
2019-12-29 13:20:1258b7613b172d19cb366a8cf8bfe7f0a4n/a216.58.209.228:443
2019-12-29 12:50:00d974e7a62ea0f979f77235078d77fe30n/a172.217.20.99:443
2019-12-29 12:49:59d974e7a62ea0f979f77235078d77fe30n/a172.217.168.196:443
2019-12-29 12:27:5171361ac1a45b262d0e9a7b9aa99bec50Virustotal results 51 / 70 (72.86%) 172.217.168.67:443
2019-12-29 12:27:5071361ac1a45b262d0e9a7b9aa99bec50Virustotal results 51 / 70 (72.86%) 216.58.215.228:443
2019-12-29 12:27:4971361ac1a45b262d0e9a7b9aa99bec50Virustotal results 51 / 70 (72.86%) 172.217.168.3:443
2019-12-29 12:25:54c4376e4524ae31a25876cffeaf65df95n/a172.217.17.99:443
2019-12-29 12:25:53c4376e4524ae31a25876cffeaf65df95n/a172.217.17.36:443
2019-12-29 12:25:53c4376e4524ae31a25876cffeaf65df95n/a172.217.20.99:443
2019-12-29 12:19:03f1e74ee0601ba179ebc73c9936a1facbn/a216.58.205.67:443
2019-12-29 12:19:03f1e74ee0601ba179ebc73c9936a1facbn/a216.58.206.68:443
2019-12-25 18:06:58a34de123dd987fc8e11269e97798fab6n/a172.217.168.36:443
2019-12-25 18:06:58a34de123dd987fc8e11269e97798fab6n/a216.58.215.228:443
2019-12-25 13:10:15a58be18de6ec8f955e4b2b63df1aa5ffn/a216.58.206.36:443
2019-12-24 09:43:15563e3e0778adda84f65072cdf639c63cn/a172.217.17.68:443
2019-12-24 09:02:58f4e8629452caf22cff8d5e770438ec2cVirustotal results 44 / 73 (60.27%) 216.58.215.228:443
2019-12-24 08:44:52560c80c7168a03ac9e43319c40042a5cn/a172.217.168.196:443
2019-12-24 02:22:59a2df9fc77d5818c2367ca54ba390ad73Virustotal results 36 / 73 (49.32%) 172.217.168.68:443
2019-12-22 17:29:59ad5b4ad0548e262d053406b3be0337f8n/a172.217.17.36:443
2019-12-22 17:29:58ad5b4ad0548e262d053406b3be0337f8n/a172.217.17.68:443
2019-12-22 10:50:25c6f704b8044dc7402d1c59ff4f8f8965Virustotal results 42 / 73 (57.53%) 172.217.16.196:443
2019-12-22 10:50:25c6f704b8044dc7402d1c59ff4f8f8965Virustotal results 42 / 73 (57.53%) 172.217.21.196:443
2019-12-21 15:16:57a4f0fae636b84f6f21706be101469f7dVirustotal results 26 / 69 (37.68%) 216.58.208.164:443
2019-12-21 15:16:57a4f0fae636b84f6f21706be101469f7dVirustotal results 26 / 69 (37.68%) 216.58.206.36:443
2019-12-21 13:17:50bdce5e0a79b2a6c04d7ede86c020f32en/a172.217.13.163:443
2019-12-21 13:17:50bdce5e0a79b2a6c04d7ede86c020f32en/a172.217.13.195:443
2019-12-21 13:17:49bdce5e0a79b2a6c04d7ede86c020f32en/a172.217.13.100:443
2019-12-21 12:54:34881e27775c65f5b0c2b19129743a6b68n/a172.217.18.196:443
2019-12-21 12:54:34881e27775c65f5b0c2b19129743a6b68n/a216.58.213.132:443
2019-12-21 12:41:31dcc2d57e2051374ceccf38cfee1b2177n/a216.58.206.36:443
2019-12-21 12:41:31dcc2d57e2051374ceccf38cfee1b2177n/a216.58.208.164:443
2019-12-21 12:41:23fe32b5fa183032462804206f917b134dn/a172.217.168.4:443
2019-12-21 12:41:22fe32b5fa183032462804206f917b134dn/a216.58.215.228:443
2019-12-21 11:12:49a36a7f1fadad0c9a2cc55c6244e8b9fdVirustotal results 54 / 73 (73.97%) 172.217.17.36:443
2019-12-20 15:12:56a1a4ee31efa4b052014b1c7a508a13e3n/a172.217.13.100:443
2019-12-20 12:30:30ab571d63c7404ba8ef547ed4431d38a8n/a172.217.19.228:443
2019-12-20 12:30:29ab571d63c7404ba8ef547ed4431d38a8n/a172.217.22.132:443
2019-12-18 19:49:04a235f61536bec83372093d918590c86bVirustotal results 30 / 72 (41.67%) 216.58.215.228:443
2019-12-18 07:02:04c287e9b9d095b2e144e4fb28fc827bb9n/a172.217.17.68:443
2019-12-17 19:40:18106a994acc30417e2a96a42738c38068n/a216.58.215.35:443

# of entries: 100 (max: 100)