JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2019-09-16 10:06:59 UTC
Status:Blacklisted
Malware samples:1'285
Destination IPs:452
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-09-16 10:06:59ca36325bc80663daf2c6c0c010437e0an/a172.217.11.164:443
2019-09-14 23:17:01a54ca0e9af5f93903c0397d0f9717910n/a172.217.11.164:443
2019-09-14 22:51:16f511aac9f23435262ba3f67bccfe88b8n/a172.217.4.163:443
2019-09-14 22:51:15f511aac9f23435262ba3f67bccfe88b8n/a172.217.11.164:443
2019-09-14 22:44:267619214e7994d853b35d1a832d510ed4n/a172.217.17.36:443
2019-09-14 22:44:267619214e7994d853b35d1a832d510ed4n/a172.217.17.99:443
2019-09-14 22:41:34e46f41c925c539f64b5f80faf613a97bn/a172.217.16.196:443
2019-09-14 22:41:33e46f41c925c539f64b5f80faf613a97bn/a172.217.16.131:443
2019-09-14 22:41:0968814c61a4a72a5f730019a5a74ecddbn/a172.217.168.196:443
2019-09-14 22:41:0968814c61a4a72a5f730019a5a74ecddbn/a172.217.20.99:443
2019-09-14 22:40:38bcacea1baad053bcbdc0a402680e0c62n/a216.58.204.99:443
2019-09-14 22:40:38bcacea1baad053bcbdc0a402680e0c62n/a172.217.19.228:443
2019-09-14 22:39:35d4c71d5f777edafa43e98f2e814cd061Virustotal results 41 / 59 (69.49%) 172.217.16.196:443
2019-09-14 22:39:35d4c71d5f777edafa43e98f2e814cd061Virustotal results 41 / 59 (69.49%) 172.217.18.163:443
2019-09-14 22:39:35d4c71d5f777edafa43e98f2e814cd061Virustotal results 41 / 59 (69.49%) 172.217.16.131:443
2019-09-14 22:26:05319ef15e2d0f9c677352c3846a3223cbn/a172.217.17.36:443
2019-09-14 22:26:05319ef15e2d0f9c677352c3846a3223cbn/a172.217.20.99:443
2019-09-14 22:21:46eba162001e9b52d2ad6f515f4f6955bbn/a172.217.20.99:443
2019-09-14 22:21:46eba162001e9b52d2ad6f515f4f6955bbn/a172.217.17.36:443
2019-09-14 22:20:29bb1eb3da1d51265eaae7abb34c60affcn/a172.217.20.195:443
2019-09-14 22:20:28bb1eb3da1d51265eaae7abb34c60affcn/a172.217.16.196:443
2019-09-14 22:19:26ef59b92234a66f989a27b8bdff44f4een/a172.217.17.36:443
2019-09-14 22:19:25ef59b92234a66f989a27b8bdff44f4een/a172.217.20.99:443
2019-09-14 21:48:46dc2a36c7bfb1b996c8ae965096c243fcn/a216.58.201.228:443
2019-09-14 21:40:583eb99bf9390a7ee482af933155c8ff7eVirustotal results 50 / 68 (73.53%) 172.217.17.36:443
2019-09-14 21:40:573eb99bf9390a7ee482af933155c8ff7eVirustotal results 50 / 68 (73.53%) 172.217.20.99:443
2019-09-14 21:40:573eb99bf9390a7ee482af933155c8ff7eVirustotal results 50 / 68 (73.53%) 172.217.168.196:443
2019-09-14 21:24:40ea0c2a041f32dda11fff8ada347d7b1an/a172.217.168.68:443
2019-09-14 13:48:000ef3146be7e2482a1a33e8e1528619ffVirustotal results 53 / 69 (76.81%) 172.217.22.36:443
2019-09-14 13:48:000ef3146be7e2482a1a33e8e1528619ffVirustotal results 53 / 69 (76.81%) 172.217.21.228:443
2019-09-14 13:47:590ef3146be7e2482a1a33e8e1528619ffVirustotal results 53 / 69 (76.81%) 172.217.23.163:443
2019-09-14 13:46:259db0018a71527e40ef6ce673bd148fean/a172.217.168.196:443
2019-09-14 13:46:259db0018a71527e40ef6ce673bd148fean/a172.217.17.36:443
2019-09-14 13:40:436785f81a64d1ab2e05fa7fb9536cc705n/a172.217.168.196:443
2019-09-14 13:20:3772ad4bb326b84c8b5713c0267a2957d1n/a216.58.215.228:443
2019-09-14 13:19:021d80cae57ab074fbfc39cdcc37b2e734n/a172.217.168.35:443
2019-09-14 13:19:021d80cae57ab074fbfc39cdcc37b2e734n/a216.58.215.228:443
2019-09-14 13:13:04699f78d7f681f2a5e905c5433bd27632n/a172.217.22.132:443
2019-09-14 13:13:03699f78d7f681f2a5e905c5433bd27632n/a216.58.198.196:443
2019-09-14 13:08:5026513a14fafa44b17ecbfcd65605e410n/a172.217.16.131:443
2019-09-14 13:08:5026513a14fafa44b17ecbfcd65605e410n/a172.217.23.163:443
2019-09-14 13:03:24166481c4e8454b93f747453d6b7cd225n/a172.217.22.100:443
2019-09-14 13:02:45fbdae9c9e7342b22aaf2400755cbff2en/a172.217.168.36:443
2019-09-14 13:00:260993a52ed92a22fbece92f7b43f299fen/a216.58.215.228:443
2019-09-14 13:00:260993a52ed92a22fbece92f7b43f299fen/a172.217.168.36:443
2019-09-14 12:55:49b229211b9f9185a5aba4f0100268bec3n/a172.217.168.3:443
2019-09-14 12:55:49b229211b9f9185a5aba4f0100268bec3n/a216.58.215.228:443
2019-09-14 12:52:149995976defd4549b032e2f3290e8d8edVirustotal results 17 / 71 (23.94%) 216.58.204.132:443
2019-09-14 12:52:139995976defd4549b032e2f3290e8d8edVirustotal results 17 / 71 (23.94%) 216.58.213.164:443
2019-09-14 12:52:139995976defd4549b032e2f3290e8d8edVirustotal results 17 / 71 (23.94%) 216.58.204.99:443
2019-09-14 12:49:492025538a237c307d81e65fd9f30e3ceeVirustotal results 34 / 69 (49.28%) 172.217.168.195:443
2019-09-14 12:49:492025538a237c307d81e65fd9f30e3ceeVirustotal results 34 / 69 (49.28%) 172.217.17.36:443
2019-09-14 12:42:25266f8615ab3e7146a3570c57d5c2095cn/a172.217.22.100:443
2019-09-14 12:39:272b10ef865d9e7f06e268d68fd78bc550n/a172.217.168.196:443
2019-09-14 10:32:399a889bef99e3f7c5ca15a421758e7fban/a172.217.168.68:443
2019-09-14 10:32:369a889bef99e3f7c5ca15a421758e7fban/a172.217.168.67:443
2019-09-14 10:32:369a889bef99e3f7c5ca15a421758e7fban/a172.217.168.36:443
2019-09-14 10:18:215ddeea9a4751f6c0ead51d8828fd917fn/a172.217.21.228:443
2019-09-14 10:01:33228ce7fb2cb3dd5a2bf2938db5926155Virustotal results 48 / 70 (68.57%) 172.217.168.4:443
2019-09-14 09:57:4529765b99b94ee52946a1ad502140fdd1Virustotal results 48 / 69 (69.57%) 172.217.168.196:443
2019-09-14 09:40:33613428080a91e338e4964bc23fb495c2n/a172.217.22.36:443
2019-09-14 09:40:01e08f0f1a225d694b6658d030d78bc09bn/a172.217.21.228:443
2019-09-14 09:33:2950da3cf485725c8d1a71696fb10abfdeVirustotal results 24 / 71 (33.80%) 172.217.21.228:443
2019-09-14 09:33:2650da3cf485725c8d1a71696fb10abfdeVirustotal results 24 / 71 (33.80%) 172.217.16.196:443
2019-09-14 08:56:47fba6ba534d1dc1bb74a9ff97f49fb33fn/a216.58.204.99:443
2019-09-14 08:56:45fba6ba534d1dc1bb74a9ff97f49fb33fn/a216.58.198.196:443
2019-09-14 08:56:45fba6ba534d1dc1bb74a9ff97f49fb33fn/a216.58.204.100:443
2019-09-14 08:28:273bcdde3f13236fe0979efa5b7b34ef1an/a172.217.168.67:443
2019-09-14 08:28:273bcdde3f13236fe0979efa5b7b34ef1an/a172.217.168.4:443
2019-09-14 08:25:523d29b8b9a0aa2ecd30c998142a7576a4Virustotal results 47 / 69 (68.12%) 172.217.168.196:443
2019-09-14 08:25:523d29b8b9a0aa2ecd30c998142a7576a4Virustotal results 47 / 69 (68.12%) 172.217.20.99:443
2019-09-14 04:16:304490964b985376d14c28e89bc4712c5fn/a172.217.168.4:443
2019-09-14 04:11:4252404987ce34a53a23356f839c638d22n/a172.217.168.196:443
2019-09-13 18:31:204b8cab74c8684b0f08519509db3e7a2fVirustotal results 40 / 71 (56.34%) 172.217.19.228:443
2019-09-13 18:31:204b8cab74c8684b0f08519509db3e7a2fVirustotal results 40 / 71 (56.34%) 216.58.204.99:443
2019-09-13 18:31:204b8cab74c8684b0f08519509db3e7a2fVirustotal results 40 / 71 (56.34%) 216.58.198.196:443
2019-09-13 16:20:21d7b5b26a1f36a2d74f2eca0fab5c49a2Virustotal results 55 / 69 (79.71%) 216.58.215.228:443
2019-09-13 12:21:0147bbad3dde6304e6111a93f8d9148066Virustotal results 48 / 68 (70.59%) 172.217.168.196:443
2019-09-13 09:44:01b8a80de64fc15a708eea735829885d04Virustotal results 53 / 69 (76.81%) 172.217.168.68:443
2019-09-13 09:43:57b8a80de64fc15a708eea735829885d04Virustotal results 53 / 69 (76.81%) 172.217.168.3:443
2019-09-13 09:39:13b21e382072eda1504e47db5ac1fe8030n/a216.58.205.227:443
2019-09-13 09:39:12b21e382072eda1504e47db5ac1fe8030n/a172.217.21.228:443
2019-09-13 08:58:57aa5cd24b8898ba10a53497ec716f2abeVirustotal results 16 / 71 (22.54%) 172.217.168.4:443
2019-09-13 08:30:4752cd5af42f0c3fbb5e0f970a75819881Virustotal results 25 / 70 (35.71%) 172.217.22.100:443
2019-09-13 08:05:285a4204e0c2e18d6c4a661b81c25b6058Virustotal results 42 / 71 (59.15%) 172.217.168.36:443
2019-09-13 07:24:548606ecb2053a6eab380078383fb8bcd3Virustotal results 51 / 70 (72.86%) 172.217.11.164:443
2019-09-13 05:39:530ae10ec3b23de7dc52e0306db9c42173n/a172.217.17.68:443
2019-09-12 11:16:26adb282c8ef95afc16851af867927fe25Virustotal results 26 / 68 (38.24%) 216.58.201.228:443
2019-09-12 06:56:11a39802f0b199b32f5f73a9092abfa73fVirustotal results 17 / 71 (23.94%) 172.217.16.196:443
2019-09-12 06:41:359c6d855e81c1bc5972e248ac1614a37cn/a172.217.168.196:443
2019-09-12 06:41:319c6d855e81c1bc5972e248ac1614a37cn/a172.217.20.99:443
2019-09-12 06:39:5185d4178488527a5506f1b1bb5f044196Virustotal results 22 / 69 (31.88%) 172.217.11.164:443
2019-09-12 06:24:16a05230a21f84722993fed61bc8782488n/a172.217.11.164:443
2019-09-12 05:49:44498843a4a178c06cfa888dbb09a4a66bn/a172.217.16.196:443
2019-09-12 05:49:44498843a4a178c06cfa888dbb09a4a66bn/a216.58.206.3:443
2019-09-12 04:44:26283bd21f9706fbd61816a242354bef5cVirustotal results 20 / 70 (28.57%) 172.217.168.4:443
2019-09-12 04:44:26283bd21f9706fbd61816a242354bef5cVirustotal results 20 / 70 (28.57%) 172.217.168.67:443
2019-09-12 04:44:26283bd21f9706fbd61816a242354bef5cVirustotal results 20 / 70 (28.57%) 172.217.168.35:443
2019-09-12 04:44:26283bd21f9706fbd61816a242354bef5cVirustotal results 20 / 70 (28.57%) 172.217.168.36:443
2019-09-11 23:01:424a049df4a31512f38f6d927e5ee5f08aVirustotal results 19 / 67 (28.36%) 172.217.168.4:443

# of entries: 100 (max: 100)