JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2019-05-20 09:17:56 UTC
Status:Blacklisted
Malware samples:535
Destination IPs:296
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-05-20 09:17:56475266832dc110f58dc306583eee8738n/a172.217.168.3:443
2019-05-14 01:23:20e9137b0752e8b99dd1c90e49e2a90d1dn/a172.217.21.163:443
2019-05-12 16:36:36b5bc03484af3d3b1e10e201c6ea316d6n/a172.217.22.164:443
2019-05-12 16:36:35b5bc03484af3d3b1e10e201c6ea316d6n/a216.58.207.228:443
2019-05-11 12:03:1713a5333e89e3ef7f4f3b8aba8254612en/a216.58.209.4:443
2019-05-09 09:14:006f9ee02afa7b8942daebd4d0d516ee57n/a216.58.215.67:443
2019-05-08 19:03:21370aa4d58cde78ba7ff63674d7f3a68en/a172.217.168.3:443
2019-05-06 12:28:03a7592f29e073c86ea495a3cdea45bf0en/a216.58.204.99:443
2019-05-05 23:33:3878c543597e6ff02c9b159636c23fce4dVirustotal results 16/71 (22.54%) 172.217.20.67:443
2019-05-04 21:56:15a0c2bb718c96b2704660ef224a9ea05cn/a172.217.20.99:443
2019-05-03 00:04:169238da68face0f5176dbaf7616922e0fn/a172.217.20.67:443
2019-04-27 00:38:16bb99840487a3b6cd641612b2d02cd14aVirustotal results 19/72 (26.39%) 216.58.211.99:443
2019-04-26 05:38:2679d9db9379698e4534584ba3fbe314a0n/a216.58.204.99:443
2019-04-25 05:51:33536eb0fcbd82a4ae171ab3ef9c519a70Virustotal results 20/67 (29.85%) 172.217.16.3:443
2019-04-24 02:44:21405ddd088e5ee3036910549958cf41fdn/a172.217.168.67:443
2019-04-23 12:17:443a8d5e8e1804e57bd0c918567b36ec54n/a216.58.215.227:443
2019-04-23 12:17:433a8d5e8e1804e57bd0c918567b36ec54n/a172.217.168.36:443
2019-04-22 15:35:460a56cd95d117876de53abccd3f7966abn/a172.217.168.35:443
2019-04-22 15:35:460a56cd95d117876de53abccd3f7966abn/a172.217.168.67:443
2019-04-22 04:21:579193a18ffd69df6a206d50cad5950a65n/a74.125.195.94:443
2019-04-22 04:21:579193a18ffd69df6a206d50cad5950a65n/a74.125.142.94:443
2019-04-22 04:21:569193a18ffd69df6a206d50cad5950a65n/a172.217.14.68:443
2019-04-21 10:49:34061d78946e82844235ac4f35f6993e57n/a74.125.142.94:443
2019-04-21 06:16:37bf109655eba20fe25bc4dd0d503f14e9n/a172.217.20.195:443
2019-04-18 19:12:419c1c269f74f9ea98a72a42f046fda07fVirustotal results 18/67 (26.87%) 172.217.168.35:443
2019-04-18 17:39:39c2a36fb57f1f2c955dfd8f39b64d592fn/a216.58.215.227:443
2019-04-17 11:42:1061138763d767a244bdd401ab133cc68cn/a172.217.16.4:443
2019-04-17 11:42:1061138763d767a244bdd401ab133cc68cn/a216.58.215.68:443
2019-04-16 03:13:550adcaaf3de6bbdef7024703f638750bdn/a216.58.215.228:443
2019-04-15 02:31:1421321e53b2660fc0737ecacdd6766d6cn/a216.58.215.227:443
2019-04-15 02:31:1421321e53b2660fc0737ecacdd6766d6cn/a172.217.168.3:443
2019-04-15 02:31:1421321e53b2660fc0737ecacdd6766d6cn/a172.217.168.36:443
2019-04-15 02:31:1421321e53b2660fc0737ecacdd6766d6cn/a216.58.215.228:443
2019-04-15 00:09:282c771d9f779225a0fcf288d9e2adbbf8Virustotal results 24/70 (34.29%) 172.217.20.67:443
2019-04-15 00:09:272c771d9f779225a0fcf288d9e2adbbf8Virustotal results 24/70 (34.29%) 172.217.17.68:443
2019-04-15 00:09:272c771d9f779225a0fcf288d9e2adbbf8Virustotal results 24/70 (34.29%) 216.58.211.99:443
2019-04-13 23:03:117f88938cd871441badf6ecce16ae702an/a172.217.168.36:443
2019-04-13 13:01:439956175301247e8cf5574a347d6caa25n/a172.217.16.196:443
2019-04-13 07:11:30dc01b7fce9a08332ab428b4e9970276cn/a172.217.17.67:443
2019-04-12 12:05:12cc89735d61ea4bdb9eef360dd8825dban/a172.217.168.35:443
2019-04-12 12:05:09cc89735d61ea4bdb9eef360dd8825dban/a74.125.21.94:443
2019-04-12 08:57:42d119a419ff4cb26e4faef25eb8bbc190Virustotal results 19/72 (26.39%) 216.58.211.99:443
2019-04-11 04:54:48f1c4d05c8c0764c2267b56d9f7d33b25n/a216.58.205.227:443
2019-04-09 19:22:5635673840cff39a3ee467f98297198dd4n/a172.217.168.3:443
2019-04-09 11:16:49fa0064dadada3a3e616d83b6ae790ce2n/a172.217.23.131:443
2019-04-08 23:52:2235c1d3e396422925521262d31b23a3eeVirustotal results 18/71 (25.35%) 216.58.211.99:443
2019-04-08 18:34:04a23be30236c7c9bc906b6618e392d815n/a216.58.212.131:443
2019-04-08 00:06:10ed4cb24ed86e148f883c6315284c3aefn/a172.217.168.3:443
2019-04-06 21:31:371c255d44a884c872c3c14338ba2cb0dfn/a74.125.20.94:443
2019-04-06 15:17:29249bf017e20c1588299a2dd04f5c5ca8n/a216.58.215.227:443
2019-04-04 17:11:01f6ff62266948c8a9516f4c49d6421a52n/a216.58.211.99:443
2019-04-04 11:07:554417ba7cde3c9e8f87b78778b9d66e31n/a74.125.20.94:443
2019-04-03 23:05:57010fda264262943eff357af31f3499a3Virustotal results 20/66 (30.30%) 216.58.204.99:443
2019-04-03 21:55:208dd041c6d3dbb90f95ce8891b11018f6n/a172.217.16.3:443
2019-03-24 00:12:33d57e817619ad16f17efcaee72595e587Virustotal results 24/65 (36.92%) 74.125.142.94:443
2019-03-17 23:53:398d1026fe8bbf09734ae70a3d4c5360ben/a172.217.22.3:443
2019-03-16 03:10:330aedc25d5844a065d1de9f2769daee5eVirustotal results 32/65 (49.23%) 216.58.215.227:443
2019-03-14 01:49:44331d5ac244795e202b869668c5836b2bVirustotal results 37/65 (56.92%) 172.217.19.196:443
2019-03-14 01:49:44331d5ac244795e202b869668c5836b2bVirustotal results 37/65 (56.92%) 216.58.211.99:443
2019-03-12 13:08:22e0f76b90905ec73d159f3b0054a681a5n/a216.58.211.99:443
2019-03-11 06:37:48981df55faa0e084bd409023725db0b0bn/a172.217.22.3:443
2019-03-09 03:57:02975d534270cfc6de07931f378ddee2ddn/a216.58.204.228:443
2019-03-09 03:56:58975d534270cfc6de07931f378ddee2ddn/a172.217.18.195:443
2019-03-08 06:37:2720be7e156e0bcb7b2242200f536b49e7n/a216.58.215.227:443
2019-03-08 06:37:2720be7e156e0bcb7b2242200f536b49e7n/a172.217.168.4:443
2019-03-08 06:37:2620be7e156e0bcb7b2242200f536b49e7n/a216.58.215.228:443
2019-03-07 23:44:04ec6e009230ebe72eb57d2a43d9a316beVirustotal results 31/63 (49.21%) 172.217.168.68:443
2019-03-07 23:44:04ec6e009230ebe72eb57d2a43d9a316beVirustotal results 31/63 (49.21%) 216.58.215.227:443
2019-03-07 06:59:46ab4464a4f5dfec027247e5ae73fb92e0Virustotal results 35/65 (53.85%) 172.217.168.4:443
2019-03-07 05:29:28b62618eb2f8f91d03e70d69972c60550Virustotal results 34/63 (53.97%) 172.217.23.131:443
2019-03-07 05:29:27b62618eb2f8f91d03e70d69972c60550Virustotal results 34/63 (53.97%) 216.58.210.4:443
2019-03-06 04:36:50260329e2b1c9706bca357ff89bcff35dVirustotal results 30/65 (46.15%) 172.217.16.35:443
2019-03-06 04:36:50260329e2b1c9706bca357ff89bcff35dVirustotal results 30/65 (46.15%) 216.58.215.100:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.20.94:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.142.94:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.197.103:443
2019-03-04 01:40:402a180c02d426d57a79de067f6131e74en/a172.217.20.67:443
2019-02-28 19:02:17a470a522cba5594e96437cac02e7e1a5Virustotal results 37/70 (52.86%) 172.217.17.35:443
2019-02-28 19:02:16a470a522cba5594e96437cac02e7e1a5Virustotal results 37/70 (52.86%) 172.217.168.196:443
2019-02-28 09:26:45db379e09ec68d5e15500960997522779Virustotal results 39/68 (57.35%) 172.217.16.35:443
2019-02-28 09:26:45db379e09ec68d5e15500960997522779Virustotal results 39/68 (57.35%) 172.217.17.67:443
2019-02-24 07:28:41ec891376676c12aa33cf617aa7512aebVirustotal results 41/65 (63.08%) 216.58.213.163:443
2019-02-24 07:28:41ec891376676c12aa33cf617aa7512aebVirustotal results 41/65 (63.08%) 172.217.19.228:443
2019-02-22 09:25:213f0d1fddc1f0c1d2f95737b369afdc3aVirustotal results 33/70 (47.14%) 172.217.19.227:443
2019-02-22 09:25:143f0d1fddc1f0c1d2f95737b369afdc3aVirustotal results 33/70 (47.14%) 172.217.22.132:443
2019-02-21 04:01:49fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 172.217.168.68:443
2019-02-21 04:01:49fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 172.217.168.36:443
2019-02-21 04:01:48fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 216.58.215.227:443
2019-02-13 11:53:32745f5b721c66915eecc831b3430e9136Virustotal results 23/71 (32.39%) 172.217.21.196:443
2019-02-13 11:53:32745f5b721c66915eecc831b3430e9136Virustotal results 23/71 (32.39%) 216.58.207.67:443
2019-02-12 17:41:332ca992d43dc292368b9b37ce9e9cb032Virustotal results 40/71 (56.34%) 172.217.168.68:443
2019-02-12 17:41:332ca992d43dc292368b9b37ce9e9cb032Virustotal results 40/71 (56.34%) 172.217.168.35:443
2019-02-12 01:34:486ec711bccc0ecc02197d3f8534bc445bVirustotal results 46/70 (65.71%) 216.58.215.68:443
2019-02-12 01:34:476ec711bccc0ecc02197d3f8534bc445bVirustotal results 46/70 (65.71%) 216.58.209.35:443
2019-02-10 01:40:099c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 172.217.20.99:443
2019-02-10 01:40:089c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 173.194.79.106:443
2019-02-10 01:40:089c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 172.217.168.4:443
2019-02-10 01:40:079c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 108.177.119.94:443
2019-02-09 12:37:268eda4ccf6653b2346f649fee746209bbVirustotal results 43/69 (62.32%) 108.177.126.94:443
2019-02-09 12:37:268eda4ccf6653b2346f649fee746209bbVirustotal results 43/69 (62.32%) 172.217.168.4:443

# of entries: 100 (max: 100)