JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2020-05-29 23:39:01 UTC
Status:Blacklisted
Malware samples:2'516
Destination IPs:505
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-05-29 23:39:013c43139fe11d77d4578ce7a103c2b270Virustotal results 39 / 73 (53.42%) 172.217.20.68:443
2020-05-29 19:24:570727c17c50d6510ef9324241ad001439Virustotal results 34 / 73 (46.58%) 172.217.17.36:443
2020-05-29 18:42:141818543d2a2006ae9b498cdec8d1417dVirustotal results 52 / 73 (71.23%) 172.217.168.196:443
2020-05-28 07:06:364dd41c1bbce7c0b3ddc1543120720dd2Virustotal results 44 / 72 (61.11%) 216.58.205.228:443
2020-05-28 05:00:43466ed58ba6a11b82128bfbf739374f90Virustotal results 41 / 72 (56.94%) 172.217.19.196:443
2020-05-27 21:20:2143825ee614393a8a18d2af57e3b2761fVirustotal results 45 / 73 (61.64%) 172.217.17.100:443
2020-05-27 20:42:4142dafbd1c80c1e365f9531b94251cc84Virustotal results 42 / 72 (58.33%) 172.217.17.68:443
2020-05-25 18:58:09186c95da68793cb3a44f0a0f2345058aVirustotal results 43 / 71 (60.56%) 216.58.205.228:443
2020-05-24 05:29:3870ac5436a28b279426146bb4e6903343Virustotal results 49 / 73 (67.12%) 172.217.17.36:443
2020-05-24 04:23:436e6cf071b8e0f2a2fcb41ace54e9b87cVirustotal results 42 / 72 (58.33%) 172.217.19.196:443
2020-05-23 22:22:326139c2025a852ba46625728ebe0043ffVirustotal results 37 / 72 (51.39%) 172.217.17.36:443
2020-05-23 21:11:285f115873fb6b326995fc21f752c4dd9dVirustotal results 40 / 72 (55.56%) 172.217.17.68:443
2020-05-23 18:43:165a1a11888f0f0931090d60e4f649f519Virustotal results 50 / 72 (69.44%) 216.58.205.228:443
2020-05-23 18:43:155a1a11888f0f0931090d60e4f649f519Virustotal results 50 / 72 (69.44%) 172.217.22.4:443
2020-04-16 05:21:30bbf841eb7a5a1be33296989686e29e94Virustotal results 49 / 73 (67.12%) 172.217.17.67:443
2020-04-14 19:38:3718a79cf04e7726ac90e23d1133c66be0Virustotal results 57 / 73 (78.08%) 216.58.194.99:443
2020-04-11 03:47:20b52ef42e97e1645ed7bb15a72230bafaVirustotal results 46 / 73 (63.01%) 172.217.20.67:443
2020-04-11 00:26:48ad7af2a0453f66b89acbb4add75aa9aaVirustotal results 46 / 73 (63.01%) 216.58.194.99:443
2020-04-10 23:01:270a42d7a3b6b2fc7affb3036442087be1n/a172.217.20.99:443
2020-04-08 23:56:12c4f9b2a0c97e963f0f7d3e7182433e5bVirustotal results 48 / 70 (68.57%) 74.125.197.94:443
2020-04-08 14:40:47c192acaecb2d41271ad0e3022f808bb5Virustotal results 49 / 71 (69.01%) 216.58.215.227:443
2020-04-07 07:01:43607e2b02159d06fe393ff53bf2fbedf4n/a172.217.168.3:443
2020-04-07 06:56:22bbdac39b84c46b1e5c700da12252a374Virustotal results 55 / 73 (75.34%) 172.217.168.3:443
2020-04-07 06:48:17e11b6d57502097f45b952267a27a4c9fn/a216.58.215.227:443
2020-04-07 06:39:52ef96067164e6bcb33439b5f68a97ce04n/a172.217.17.67:443
2020-04-06 19:45:11be15f4d76fc5f03f95bbe4cc7d560d93Virustotal results 35 / 71 (49.30%) 172.217.20.99:443
2020-04-05 14:09:38ac65e5b71679b7d3c447fb6e3fbaffa3Virustotal results 47 / 71 (66.20%) 172.217.20.99:443
2020-04-05 05:48:25b4356e66d34b310f0e007d80d7244081Virustotal results 40 / 71 (56.34%) 172.217.168.35:443
2020-04-03 22:01:293f8474528ca3cb2887e4686ee403906en/a216.58.211.99:443
2020-04-03 21:58:14e8f998416f538c17e33ed70233209c9fn/a216.58.211.99:443
2020-04-03 21:35:5782f5cd83a5551a6548a368017f0b9d30n/a172.217.168.35:443
2020-04-03 21:24:553dc79f9ef9b3020de8df734864f9648fn/a216.58.215.227:443
2020-04-03 20:56:58561dbf003d614b969e36ab742e679b8dn/a172.217.20.99:443
2020-04-03 20:52:242817aacc9bda390c1da7aad6f67d7607n/a172.217.168.67:443
2020-04-03 20:44:12167cf3d8b4b92c1bfa34dd9ccc418b1an/a172.217.168.35:443
2020-04-03 20:10:42e68922910cf7be7e80f6fb8e8497de9dVirustotal results 56 / 73 (76.71%) 172.217.20.99:443
2020-04-03 19:28:59768a4e253da69ffa972dc1b0b9728993n/a216.58.215.227:443
2020-04-03 13:09:34c0dccfee2570886e6baf9fdcaca330fbVirustotal results 54 / 72 (75.00%) 172.217.20.99:443
2020-04-03 07:31:016b33274e91e72a4b716cfc807baedd14n/a172.217.168.67:443
2020-03-30 17:57:03f64607ff262614adf62afba9d81f651en/a216.58.215.227:443
2020-03-27 21:44:554082e3cd8aa4fa38ef8b0d819bea7125Virustotal results 53 / 73 (72.60%) 216.58.215.227:443
2020-03-27 08:00:52cd0f9d101208331d0682a14607fb8935Virustotal results 55 / 73 (75.34%) 172.217.20.99:443
2020-03-26 08:29:15e555fd4b024defbad63d013da50c592dn/a216.58.215.227:443
2020-03-26 08:29:14e555fd4b024defbad63d013da50c592dn/a216.58.215.228:443
2020-03-26 06:40:50ce5cc15fd1d4421d551f0d834807c8e2n/a172.217.20.99:443
2020-03-25 18:08:05617757adfdd08f4de7bb1a7c763e1354n/a172.217.168.3:443
2020-03-25 17:32:35cf92e6ae4e936cdf68aa927d4f5e5493n/a74.125.28.94:443
2020-03-25 08:25:52e4927c69ab20efd10f8ad729a209001cn/a172.217.168.35:443
2020-03-24 17:33:4633eec12ec46b73bad66ed066f856d6b4n/a172.217.168.35:443
2020-03-24 14:51:035cad9ffd2e579ae8d83e9275ceb8161fVirustotal results 54 / 73 (73.97%) 172.217.168.67:443
2020-03-24 07:35:10a4850117544b44a2ca5be5f6c3436339Virustotal results 55 / 73 (75.34%) 74.125.195.94:443
2020-03-24 07:14:33f9838b48b76cd2e54b8a23f97eccd07fn/a172.217.168.35:443
2020-03-24 02:30:22bccbe9a729c1266b744b2474206cb1b5n/a172.217.20.99:443
2020-03-24 01:39:14b4f86261b0f670996e3565eb26f75d66n/a216.58.215.227:443
2020-03-24 00:43:19498712c2e86e43156e61b25b00ff4391n/a172.217.18.99:443
2020-03-24 00:43:18498712c2e86e43156e61b25b00ff4391n/a172.217.22.4:443
2020-03-23 21:35:09105f3170f2d32e00dbf86376f9df2cdfn/a172.217.19.195:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a216.58.206.4:443
2020-03-23 03:25:16c88c9a759a75c75845ee562243a89fb1n/a172.217.16.163:443
2020-03-22 07:13:4786de17135ab673001482b6735f5bcfb0n/a172.217.168.3:443
2020-03-22 07:13:4786de17135ab673001482b6735f5bcfb0n/a216.58.215.227:443
2020-03-22 07:13:337b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.67:443
2020-03-22 07:13:327b16c7ab53f5ab79d73a22efbfec41dbn/a172.217.20.99:443
2020-03-22 07:01:22da89b5ed05a5819f578e88f14a98e17cn/a172.217.168.35:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.3:443
2020-03-22 06:58:0028bf98dceb68f569073c49d4cf21b5fdn/a172.217.168.35:443
2020-03-22 06:57:5928bf98dceb68f569073c49d4cf21b5fdn/a216.58.215.227:443
2020-03-22 06:57:233406c4398121a897f25d4e67023e7259n/a172.217.18.99:443
2020-03-21 20:40:08589e063d6dff968d7f91908a8789ba24n/a216.58.215.227:443
2020-03-21 20:25:119a03c4f9e25dbfa5ac78054e57cfa2f2Virustotal results 37 / 71 (52.11%) 172.217.168.3:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.34.117:443
2020-03-21 19:52:255150b2844b11db909a7933e62c99f998n/a216.239.38.117:443
2020-03-21 17:31:18f2ec44dad34a8f0f3bd34b33d91989fbn/a172.217.168.67:443
2020-03-21 17:31:17f2ec44dad34a8f0f3bd34b33d91989fbn/a104.26.2.223:443
2020-03-21 06:04:18a4bf21a69fb30c57ec8688cbd7e3cf89Virustotal results 54 / 73 (73.97%) 74.125.195.94:443
2020-03-20 18:47:56c839e7df2dd538ad2021e6a37bbcf8c0Virustotal results 57 / 73 (78.08%) 172.217.168.3:443
2020-03-20 07:41:4904c165a8c81caedda4674496bc402350n/a216.58.215.227:443
2020-03-20 07:41:4704c165a8c81caedda4674496bc402350n/a172.217.168.67:443
2020-03-20 06:01:47a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.67:443
2020-03-20 06:01:46a24cc39c2dfeecb0c5f4b015ca3a2741n/a172.217.168.3:443
2020-03-19 18:31:5809e05ceb5a88f23167fbcd5c2eb275fen/a216.58.215.227:443
2020-03-19 13:36:2018ea52a7b0a533ef2b2050ed50e06cdbn/a172.217.20.99:443
2020-03-19 03:37:351f20eca1556c0485144ab642d07a9c0fVirustotal results 55 / 72 (76.39%) 216.58.215.227:443
2020-03-13 14:52:2971c2df3db39e5055a797be73d67c8eb7Virustotal results 58 / 73 (79.45%) 172.217.168.3:443
2020-03-13 14:52:2971c2df3db39e5055a797be73d67c8eb7Virustotal results 58 / 73 (79.45%) 216.58.215.227:443
2020-03-13 14:32:49b33eb01eb1160fb5795ece9dcb4af963n/a172.217.19.195:443
2020-03-13 14:32:47b33eb01eb1160fb5795ece9dcb4af963n/a172.217.17.67:443
2020-03-13 04:42:022e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 213.180.204.194:443
2020-03-13 04:42:002e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 216.58.207.68:443
2020-03-13 04:41:592e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 212.82.100.137:443
2020-03-13 04:41:582e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 204.79.197.200:443
2020-03-13 04:41:482e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 87.250.251.153:443
2020-03-13 04:41:422e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 172.217.23.100:443
2020-03-13 04:41:412e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 213.180.204.193:443
2020-03-13 04:41:392e3249d404e1785a1bfa1914a75effcfVirustotal results 24 / 73 (32.88%) 5.255.255.50:443
2020-03-12 07:57:15ad156c5dbb416a2b85c1c31747285c74n/a172.217.20.99:443
2020-03-10 15:07:29218c928491cc6b4cab86838bb097612bn/a172.217.17.67:443
2020-03-10 14:53:30ee81881f7b68b90d1a771a3438552ea1n/a216.58.215.227:443
2020-03-10 14:42:340dddafcd190b8271e67fea946cba1c8cn/a74.125.197.94:443
2020-03-10 14:38:142a32ac3aecc52bfcd833f70efcdef557n/a172.217.168.35:443

# of entries: 100 (max: 100)