JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2019-07-15 13:17:03 UTC
Status:Blacklisted
Malware samples:627
Destination IPs:307
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-07-15 13:17:03d90111f59c6d8fe8cad98c7dd1659d9bn/a172.217.17.132:443
2019-07-15 04:33:40ef33257003f9b1d69d115ef24f5579cfn/a172.217.168.228:443
2019-07-14 21:57:440aebaa7798f8ebccb53a26fc11ae5e2cn/a172.217.20.68:443
2019-07-12 09:58:34ba290a66881a6fa0d7166814ce561515n/a172.217.17.100:443
2019-07-12 05:19:501847cb6028f521602c4fa5adabc37ec5n/a172.217.168.196:443
2019-07-12 05:18:064eda2eeb63ce0a4d05569388a812a484n/a172.217.17.68:443
2019-07-12 05:01:46f365db4ba89be70d2d7f4644e7b47dcfn/a172.217.168.4:443
2019-07-11 18:05:019c37cda790d3dc291595ea26e02acfabn/a172.217.168.35:443
2019-07-11 18:05:019c37cda790d3dc291595ea26e02acfabn/a172.217.168.3:443
2019-07-11 16:13:0335ceda9c477122b284251baf428b95fcn/a172.217.168.35:443
2019-07-11 10:59:057e873d5c8a72ef1bcfc4c351c65e3b75n/a216.58.211.99:443
2019-07-11 08:42:346f9b63b4e85d5a4c6694cb8fafe30b81n/a172.217.168.35:443
2019-07-11 06:42:2275ef197a19eea900c6f1062feab39fban/a172.217.17.35:443
2019-07-11 06:40:1059f4105de61bf4e7eb491a8650402b7an/a172.217.168.35:443
2019-07-11 06:23:49d27a37012805e13ed81e374045650411n/a64.233.167.94:443
2019-07-11 06:23:47d27a37012805e13ed81e374045650411n/a108.177.15.94:443
2019-07-10 22:36:4259ec5fab91f14de56c821d9b92c7a00en/a172.217.4.163:443
2019-07-10 21:35:46ce5194812e701ed63ebac43472393972n/a216.58.215.227:443
2019-07-10 21:35:46ce5194812e701ed63ebac43472393972n/a172.217.168.3:443
2019-07-10 19:29:174dad051c3588e1c9f8b63f7ac405a9f2n/a216.58.215.227:443
2019-07-10 18:02:29c4371f78c8a4ccbe493810f8fe57dc93n/a172.217.4.163:443
2019-07-10 15:47:153902253dc3261c5d7816a3a0bfa2f39dn/a216.58.213.131:443
2019-07-10 13:34:4963e3cf468575d6828cb38b65eb746d4fn/a172.217.20.99:443
2019-07-10 08:59:547a4f7b61d740be2664bb7ebcc4a8ae54n/a216.58.215.227:443
2019-07-10 05:12:012d4a52cd9380d08537b2a909c1e7efc4n/a172.217.17.99:443
2019-07-10 05:12:002d4a52cd9380d08537b2a909c1e7efc4n/a172.217.17.35:443
2019-07-10 05:09:08036a3cfe019d6724040207759826c722n/a172.217.19.195:443
2019-07-10 03:03:445b33b10b50e272f0ceebf0a5458ee580n/a108.177.15.94:443
2019-07-10 01:19:492854612e4e31ddace1c0dbc401ea25bcn/a216.58.213.131:443
2019-07-10 01:19:472854612e4e31ddace1c0dbc401ea25bcn/a172.217.18.195:443
2019-07-09 20:48:5191e797e7359af85689877e9dc405235fn/a173.194.76.94:443
2019-07-09 17:28:36bd88dc6d2fedec6468452602a9da1ab8n/a216.58.215.227:443
2019-07-09 16:47:3708ef19d3a6786f4a21aec1e8d33e420bn/a216.58.215.227:443
2019-07-09 13:25:0411cd438b395cd9399204fa867b724c2dn/a172.217.168.3:443
2019-07-09 06:42:0056d9d88d48bab9774d2c8139bbc9e057Virustotal results 16/67 (23.88%) 216.58.215.227:443
2019-07-09 06:29:26b02bce2d1ba469e4c3acfad2a0cbe33fn/a172.217.168.3:443
2019-07-09 06:29:26b02bce2d1ba469e4c3acfad2a0cbe33fn/a172.217.168.35:443
2019-07-09 06:15:47a059f830872a775233648088eecd858cn/a216.58.211.99:443
2019-07-09 05:57:44e0c5a00d11bcc7ae8552c57096dd3655n/a172.217.168.227:443
2019-07-09 03:17:12b98eb2bb254dde3c5297286f5ca63e9en/a172.217.168.3:443
2019-07-09 02:56:2470bdcfcf2b0ed00daa0940524c8b6bdbn/a172.217.17.67:443
2019-07-09 02:56:2470bdcfcf2b0ed00daa0940524c8b6bdbn/a172.217.20.99:443
2019-07-08 06:05:30e8d50f84670898ff45eba3a6b5bafbd1n/a216.58.208.99:443
2019-07-08 04:13:205006f34738d6cbcbb77a102e1198bba9n/a216.58.208.99:443
2019-07-08 04:13:205006f34738d6cbcbb77a102e1198bba9n/a172.217.20.99:443
2019-07-07 08:12:507039819afb52385e1b46726e27773898n/a172.217.17.35:443
2019-07-06 21:55:397b320c583b777144180a0341479448a5n/a172.217.168.35:443
2019-07-03 08:30:48772304e0b8236c1bc562703f6b9679c8Virustotal results 28/70 (40.00%) 172.217.4.163:443
2019-07-02 20:55:09daeb09c7ee215ea8f89c49a6422821f2n/a216.58.215.227:443
2019-07-02 14:06:191457c3c34078639694a5aac5d92cbbb6n/a216.58.211.99:443
2019-07-02 14:06:171457c3c34078639694a5aac5d92cbbb6n/a172.217.17.67:443
2019-07-02 09:42:550c7391e62fb46558a4bc35c3a3152638n/a172.217.22.163:443
2019-07-02 09:42:550c7391e62fb46558a4bc35c3a3152638n/a216.58.207.227:443
2019-07-02 06:26:53a3744634f9f45d633ce83d791b49b5a3Virustotal results 35/69 (50.72%) 172.217.4.163:443
2019-06-30 19:29:451aca3c0d9a66623c64d99b9019d80eebn/a172.217.168.35:443
2019-06-30 19:29:441aca3c0d9a66623c64d99b9019d80eebn/a172.217.168.3:443
2019-06-30 13:19:1769faf13147f3becfb9c372201ef039f7n/a216.58.215.227:443
2019-06-30 08:47:16fd099dc6f7e949fe64288e925a612645Virustotal results 20/71 (28.17%) 172.217.168.35:443
2019-06-29 20:25:37a4cb18e6d25ce92109f17ff72ec4970bn/a216.58.213.163:443
2019-06-29 18:20:17ea52a134bf24974c665a7ede382c35e0Virustotal results 45/71 (63.38%) 172.217.19.195:443
2019-06-29 14:04:362fdd4fe97dc65942d931a0833b7d8eb4n/a172.217.14.67:443
2019-06-29 05:46:229e78bc583a97fe7f3d73c35ba73aa318Virustotal results 41/68 (60.29%) 172.217.168.67:443
2019-06-29 05:46:229e78bc583a97fe7f3d73c35ba73aa318Virustotal results 41/68 (60.29%) 216.58.215.228:443
2019-06-29 05:46:229e78bc583a97fe7f3d73c35ba73aa318Virustotal results 41/68 (60.29%) 172.217.168.36:443
2019-06-29 05:46:219e78bc583a97fe7f3d73c35ba73aa318Virustotal results 41/68 (60.29%) 172.217.168.35:443
2019-06-29 05:26:259495f6da1a244f2e6cef8d368a2a9490n/a216.58.213.131:443
2019-06-29 05:26:239495f6da1a244f2e6cef8d368a2a9490n/a172.217.18.196:443
2019-06-28 20:20:19480e9dac5f508f630bd49df820c3a128n/a172.217.168.195:443
2019-06-28 17:57:4437bc10d23453b93bd91a8642f354c23fn/a172.217.168.35:443
2019-06-28 17:57:4437bc10d23453b93bd91a8642f354c23fn/a216.58.215.227:443
2019-06-28 17:57:4437bc10d23453b93bd91a8642f354c23fn/a172.217.168.36:443
2019-06-27 04:50:109cc2bfe3b96d3100a2a801d7ba298eb3n/a172.217.17.67:443
2019-06-27 04:50:109cc2bfe3b96d3100a2a801d7ba298eb3n/a216.58.208.99:443
2019-06-26 22:01:02420e48eb9fc473778b561deba2d72805n/a172.217.168.35:443
2019-06-26 05:13:14b2ddef49bf5f3b7950175550c91a671fn/a216.58.211.99:443
2019-06-25 05:25:40d79a123348a8ccd12a072d7d429f2844Virustotal results 20/68 (29.41%) 172.217.168.35:443
2019-06-25 05:25:40d79a123348a8ccd12a072d7d429f2844Virustotal results 20/68 (29.41%) 172.217.168.3:443
2019-06-23 16:44:208eca7583b51b99ae6ea4b68d6ff5560cn/a172.217.168.67:443
2019-06-22 16:38:049b2b3970effdd49a3194b83a272b29bdn/a172.217.18.195:443
2019-06-22 07:38:091c11e2985474128ddef2a34961591c0bVirustotal results 27/69 (39.13%) 172.217.168.67:443
2019-06-21 04:53:23fed4fcc0dd4fd3ceae85e0aa16c48108n/a172.217.17.35:443
2019-06-21 01:55:005478c7bb1eb8d9cb7e203ee6be2f9fcan/a172.217.14.99:443
2019-06-16 20:46:2533ede7e2497d0a627f6b9656fec566c1n/a172.217.168.228:443
2019-06-16 07:34:25e6b5449f18c857e3b8648f81cfbc1f24n/a172.217.168.228:443
2019-06-14 13:09:048c122278e768601f20f1e9f6c407cce2n/a172.217.17.132:443
2019-06-14 13:09:048c122278e768601f20f1e9f6c407cce2n/a172.217.20.68:443
2019-06-12 15:14:462654ff60cc92922a5f53131b424fdbb7n/a216.58.208.100:443
2019-06-12 15:14:462654ff60cc92922a5f53131b424fdbb7n/a172.217.19.196:443
2019-06-11 20:30:47d9edc460194b4e171f4d802203dba4d4Virustotal results 23/71 (32.39%) 216.58.207.195:443
2019-06-11 02:25:5346173f297351872fab82b52991e67617n/a172.217.168.3:443
2019-06-09 22:55:294ebfba40ddf3b9e8f62466fc1923e236n/a216.58.193.195:443
2019-06-09 22:35:250853469c7120e604f9102e6f6d46c1ben/a172.217.168.35:443
2019-06-09 22:35:240853469c7120e604f9102e6f6d46c1ben/a172.217.168.67:443
2019-06-09 13:22:407c7e8ed063ccb24f6f9afb1e4a46d030n/a172.217.20.99:443
2019-06-08 12:24:17768d15319c3efa15b3e1210b66feff1an/a172.217.168.67:443
2019-06-08 12:24:17768d15319c3efa15b3e1210b66feff1an/a172.217.168.35:443
2019-06-08 09:10:196e5f202d9145b281f075c6ef480ee924Virustotal results 29/72 (40.28%) 172.217.19.195:443
2019-06-07 23:56:18598234c9919252701610c95c74e30550n/a172.217.168.35:443
2019-06-07 23:56:17598234c9919252701610c95c74e30550n/a216.58.215.227:443
2019-06-07 23:56:17598234c9919252701610c95c74e30550n/a172.217.168.3:443

# of entries: 100 (max: 100)