JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2020-04-05 05:48:25 UTC
Status:Blacklisted
Malware samples:2'490
Destination IPs:503
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-04-05 05:48:25b4356e66d34b310f0e007d80d7244081Virustotal results 40 / 71 (56.34%) 172.217.168.35:443
2020-04-03 22:01:293f8474528ca3cb2887e4686ee403906en/a216.58.211.99:443
2020-04-03 21:58:14e8f998416f538c17e33ed70233209c9fn/a216.58.211.99:443
2020-04-03 21:35:5782f5cd83a5551a6548a368017f0b9d30n/a172.217.168.35:443
2020-04-03 21:24:553dc79f9ef9b3020de8df734864f9648fn/a216.58.215.227:443
2020-04-03 20:56:58561dbf003d614b969e36ab742e679b8dn/a172.217.20.99:443
2020-04-03 20:52:242817aacc9bda390c1da7aad6f67d7607n/a172.217.168.67:443
2020-04-03 20:44:12167cf3d8b4b92c1bfa34dd9ccc418b1an/a172.217.168.35:443
2020-04-03 20:10:42e68922910cf7be7e80f6fb8e8497de9dVirustotal results 56 / 73 (76.71%) 172.217.20.99:443
2020-04-03 19:28:59768a4e253da69ffa972dc1b0b9728993n/a216.58.215.227:443
2020-04-03 13:09:34c0dccfee2570886e6baf9fdcaca330fbVirustotal results 54 / 72 (75.00%) 172.217.20.99:443
2020-04-03 07:31:016b33274e91e72a4b716cfc807baedd14n/a172.217.168.67:443
2020-03-30 17:57:03f64607ff262614adf62afba9d81f651en/a216.58.215.227:443
2020-03-27 21:44:554082e3cd8aa4fa38ef8b0d819bea7125Virustotal results 53 / 73 (72.60%) 216.58.215.227:443
2020-03-27 08:00:52cd0f9d101208331d0682a14607fb8935Virustotal results 55 / 73 (75.34%) 172.217.20.99:443
2020-03-26 08:29:15e555fd4b024defbad63d013da50c592dn/a216.58.215.227:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.228:443
2020-03-26 06:40:50ce5cc15fd1d4421d551f0d834807c8e2n/a172.217.20.99:443
2020-03-25 18:08:05617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.3:443
2020-03-25 17:32:35cf92e6ae4e936cdf68aa927d4f5e5493n/a74.125.28.94:443
2020-03-25 08:25:52e4927c69ab20efd10f8ad729a209001cn/a172.217.168.35:443
2020-03-24 17:33:4633eec12ec46b73bad66ed066f856d6b4n/a172.217.168.35:443
2020-03-24 14:51:035cad9ffd2e579ae8d83e9275ceb8161fVirustotal results 54 / 73 (73.97%) 172.217.168.67:443
2020-03-24 07:35:10a4850117544b44a2ca5be5f6c3436339Virustotal results 55 / 73 (75.34%) 74.125.195.94:443
2020-03-24 07:14:33f9838b48b76cd2e54b8a23f97eccd07fn/a172.217.168.35:443
2020-03-24 02:30:22bccbe9a729c1266b744b2474206cb1b5n/a172.217.20.99:443
2020-03-24 01:39:14b4f86261b0f670996e3565eb26f75d66n/a216.58.215.227:443
2020-03-24 00:43:19498712c2e86e43156e61b25b00ff4391n/a172.217.18.99:443
2020-03-24 00:43:18498712c2e86e43156e61b25b00ff4391n/a172.217.22.4:443
2020-03-23 21:35:09105f3170f2d32e00dbf86376f9df2cdfn/a172.217.19.195:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a216.58.206.4:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a172.217.16.163:443
2020-03-22 07:13:4786de17135ab673001482b6735f5bcfb0n/a172.217.168.3:443
2020-03-22 07:13:4786de17135ab673001482b6735f5bcfb0n/a216.58.215.227:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.67:443
2020-03-22 07:13:327b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.99:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.35:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.3:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.35:443
2020-03-22 06:57:5928bf98dceb68f569073c49d4cf21b5fdn/a216.58.215.227:443
2020-03-22 06:57:233406c4398121a897f25d4e67023e7259n/a172.217.18.99:443
2020-03-21 20:40:08589e063d6dff968d7f91908a8789ba24n/a216.58.215.227:443
2020-03-21 20:25:119a03c4f9e25dbfa5ac78054e57cfa2f2Virustotal results 37 / 71 (52.11%) 172.217.168.3:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.34.117:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.38.117:443
2020-03-21 17:31:18f2ec44dad34a8f0f3bd34b33d91989fbn/a172.217.168.67:443
2020-03-21 17:31:17f2ec44dad34a8f0f3bd34b33d91989fbn/a104.26.2.223:443
2020-03-21 06:04:18a4bf21a69fb30c57ec8688cbd7e3cf89Virustotal results 54 / 73 (73.97%) 74.125.195.94:443
2020-03-20 18:47:56c839e7df2dd538ad2021e6a37bbcf8c0Virustotal results 57 / 73 (78.08%) 172.217.168.3:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a172.217.168.67:443
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.67:443
2020-03-20 06:01:46a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-19 18:31:5809e05ceb5a88f23167fbcd5c2eb275fen/a216.58.215.227:443
2020-03-19 13:36:2018ea52a7b0a533ef2b2050ed50e06cdbn/a172.217.20.99:443
2020-03-19 03:37:351f20eca1556c0485144ab642d07a9c0fVirustotal results 55 / 72 (76.39%) 216.58.215.227:443
2020-03-13 14:52:2971c2df3db39e5055a797be73d67c8eb7Virustotal results 58 / 73 (79.45%) 172.217.168.3:443
2020-03-13 14:52:2971c2df3db39e5055a797be73d67c8eb7Virustotal results 58 / 73 (79.45%) 216.58.215.227:443
2020-03-13 14:32:49b33eb01eb1160fb5795ece9dcb4af963n/a172.217.19.195:443
2020-03-13 14:32:47b33eb01eb1160fb5795ece9dcb4af963n/a172.217.17.67:443
2020-03-13 04:42:022e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 213.180.204.194:443
2020-03-13 04:42:002e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 216.58.207.68:443
2020-03-13 04:41:592e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 212.82.100.137:443
2020-03-13 04:41:582e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 204.79.197.200:443
2020-03-13 04:41:482e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 87.250.251.153:443
2020-03-13 04:41:422e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.23.100:443
2020-03-13 04:41:412e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 213.180.204.193:443
2020-03-13 04:41:392e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 5.255.255.50:443
2020-03-12 07:57:15ad156c5dbb416a2b85c1c31747285c74n/a172.217.20.99:443
2020-03-10 15:07:29218c928491cc6b4cab86838bb097612bn/a172.217.17.67:443
2020-03-10 14:53:30ee81881f7b68b90d1a771a3438552ea1n/a216.58.215.227:443
2020-03-10 14:42:340dddafcd190b8271e67fea946cba1c8cn/a74.125.197.94:443
2020-03-10 14:38:142a32ac3aecc52bfcd833f70efcdef557n/a172.217.168.35:443
2020-03-10 14:33:251ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 172.217.20.99:443
2020-03-10 14:33:251ce953070379caf931448767af6cc097Virustotal results 52 / 72 (72.22%) 216.58.208.99:443
2020-03-10 14:22:45df2567766706d8196a970dd06e138055n/a172.217.168.3:443
2020-03-09 18:10:16568dc5960385c0f5c552243725d8149fn/a172.217.20.99:443
2020-03-09 17:35:37893e272d0e38bcb48d7ce7437b36565fn/a172.217.168.35:443
2020-03-09 17:03:06839449d8f24be1405bb9a7359e28233fn/a172.217.168.35:443
2020-03-09 17:03:06839449d8f24be1405bb9a7359e28233fn/a216.58.215.227:443
2020-03-09 03:22:48b3d8332be71e89b6c89b06037c29a855Virustotal results 55 / 73 (75.34%) 172.217.168.35:443
2020-03-08 15:13:25afafe1a6fdac6f0b7f60aaeb5c98c8c7n/a172.217.20.99:443
2020-03-08 15:08:50bb4da39a16a11d147b73b56980c7bbdan/a216.58.208.99:443
2020-03-08 12:30:44046607bba932850fdd26867b61126208n/a216.58.215.227:443
2020-03-08 12:12:419bcd8aa537fc641cad31f9fdd996f973n/a172.217.20.99:443
2020-03-08 12:12:409bcd8aa537fc641cad31f9fdd996f973n/a216.58.208.99:443
2020-03-08 12:09:266bac2afa46efaa62a6e546f1bda22efbn/a172.217.168.67:443
2020-03-08 03:07:13779ed3b6ab8dad6fd230170c0d5a147an/a216.58.215.227:443
2020-03-08 03:04:504b846c4595e9d64880e2ddf6a3f61955n/a172.217.20.99:443
2020-03-08 03:03:1927fa25d9b6af7689e195d39ab676f406n/a172.217.168.3:443
2020-03-07 10:24:00ba0ddf6b370b452fe80b1928f0cccfbcVirustotal results 51 / 70 (72.86%) 216.58.215.227:443
2020-03-07 10:24:00ba0ddf6b370b452fe80b1928f0cccfbcVirustotal results 51 / 70 (72.86%) 172.217.168.67:443
2020-03-06 10:03:31b8d8d116b02e2cd83a6904d0b77f5400Virustotal results 38 / 73 (52.05%) 74.125.195.94:443
2020-03-05 14:10:356f97a1d9901d0339b1177cc9383fb860n/a172.217.20.99:443
2020-03-05 13:59:25d61df703814d13c53a0907b267b6d169Virustotal results 51 / 71 (71.83%) 216.58.206.228:443
2020-03-05 13:20:44612f1f54240628307b00b74bf7337a1cn/a172.217.23.163:443
2020-03-05 08:20:51a5f25a359a42b23530675c3fea4fdf89Virustotal results 54 / 72 (75.00%) 172.217.23.163:443
2020-03-04 14:41:006bc3b81c1fab85abf87e29aaf98d3712n/a172.217.23.163:443
2020-03-04 14:37:20cf575cb3c451534a2baab0461b0cba6bn/a216.58.215.227:443
2020-03-04 14:35:51b6998cb5462145b9e41c7ae11c82c91dVirustotal results 50 / 69 (72.46%) 216.58.215.227:443

# of entries: 100 (max: 100)