JA3 Fingerprints

You can find further information about the JA3 fingerprint b90bdbe961a648f0427db21aaa6ccb59, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:b90bdbe961a648f0427db21aaa6ccb59
First seen:2018-03-11 10:37:43 UTC
Last seen:2019-03-17 23:53:39 UTC
Status:Blacklisted
Malware samples:492
Destination IPs:290
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2019-03-17 23:53:398d1026fe8bbf09734ae70a3d4c5360ben/a172.217.22.3:443
2019-03-16 03:10:330aedc25d5844a065d1de9f2769daee5eVirustotal results 32/65 (49.23%) 216.58.215.227:443
2019-03-14 01:49:44331d5ac244795e202b869668c5836b2bVirustotal results 37/65 (56.92%) 172.217.19.196:443
2019-03-14 01:49:44331d5ac244795e202b869668c5836b2bVirustotal results 37/65 (56.92%) 216.58.211.99:443
2019-03-12 13:08:22e0f76b90905ec73d159f3b0054a681a5n/a216.58.211.99:443
2019-03-11 06:37:48981df55faa0e084bd409023725db0b0bn/a172.217.22.3:443
2019-03-09 03:57:02975d534270cfc6de07931f378ddee2ddn/a216.58.204.228:443
2019-03-09 03:56:58975d534270cfc6de07931f378ddee2ddn/a172.217.18.195:443
2019-03-08 06:37:2720be7e156e0bcb7b2242200f536b49e7n/a216.58.215.227:443
2019-03-08 06:37:2720be7e156e0bcb7b2242200f536b49e7n/a172.217.168.4:443
2019-03-08 06:37:2620be7e156e0bcb7b2242200f536b49e7n/a216.58.215.228:443
2019-03-07 23:44:04ec6e009230ebe72eb57d2a43d9a316beVirustotal results 31/63 (49.21%) 172.217.168.68:443
2019-03-07 23:44:04ec6e009230ebe72eb57d2a43d9a316beVirustotal results 31/63 (49.21%) 216.58.215.227:443
2019-03-07 06:59:46ab4464a4f5dfec027247e5ae73fb92e0Virustotal results 35/65 (53.85%) 172.217.168.4:443
2019-03-07 05:29:28b62618eb2f8f91d03e70d69972c60550Virustotal results 34/63 (53.97%) 172.217.23.131:443
2019-03-07 05:29:27b62618eb2f8f91d03e70d69972c60550Virustotal results 34/63 (53.97%) 216.58.210.4:443
2019-03-06 04:36:50260329e2b1c9706bca357ff89bcff35dVirustotal results 30/65 (46.15%) 172.217.16.35:443
2019-03-06 04:36:50260329e2b1c9706bca357ff89bcff35dVirustotal results 30/65 (46.15%) 216.58.215.100:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.20.94:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.142.94:443
2019-03-06 01:00:498fcf7c7fb54e170222d0756b92872dddVirustotal results 34/63 (53.97%) 74.125.197.103:443
2019-03-04 01:40:402a180c02d426d57a79de067f6131e74en/a172.217.20.67:443
2019-02-28 19:02:17a470a522cba5594e96437cac02e7e1a5Virustotal results 37/70 (52.86%) 172.217.17.35:443
2019-02-28 19:02:16a470a522cba5594e96437cac02e7e1a5Virustotal results 37/70 (52.86%) 172.217.168.196:443
2019-02-28 09:26:45db379e09ec68d5e15500960997522779Virustotal results 39/68 (57.35%) 172.217.16.35:443
2019-02-28 09:26:45db379e09ec68d5e15500960997522779Virustotal results 39/68 (57.35%) 172.217.17.67:443
2019-02-24 07:28:41ec891376676c12aa33cf617aa7512aebVirustotal results 41/65 (63.08%) 216.58.213.163:443
2019-02-24 07:28:41ec891376676c12aa33cf617aa7512aebVirustotal results 41/65 (63.08%) 172.217.19.228:443
2019-02-22 09:25:213f0d1fddc1f0c1d2f95737b369afdc3aVirustotal results 33/70 (47.14%) 172.217.19.227:443
2019-02-22 09:25:143f0d1fddc1f0c1d2f95737b369afdc3aVirustotal results 33/70 (47.14%) 172.217.22.132:443
2019-02-21 04:01:49fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 172.217.168.68:443
2019-02-21 04:01:49fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 172.217.168.36:443
2019-02-21 04:01:48fe673a99043c6c17be2bd8773bb2da42Virustotal results 38/70 (54.29%) 216.58.215.227:443
2019-02-13 11:53:32745f5b721c66915eecc831b3430e9136Virustotal results 23/71 (32.39%) 172.217.21.196:443
2019-02-13 11:53:32745f5b721c66915eecc831b3430e9136Virustotal results 23/71 (32.39%) 216.58.207.67:443
2019-02-12 17:41:332ca992d43dc292368b9b37ce9e9cb032Virustotal results 40/71 (56.34%) 172.217.168.68:443
2019-02-12 17:41:332ca992d43dc292368b9b37ce9e9cb032Virustotal results 40/71 (56.34%) 172.217.168.35:443
2019-02-12 01:34:486ec711bccc0ecc02197d3f8534bc445bVirustotal results 46/70 (65.71%) 216.58.215.68:443
2019-02-12 01:34:476ec711bccc0ecc02197d3f8534bc445bVirustotal results 46/70 (65.71%) 216.58.209.35:443
2019-02-10 01:40:099c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 172.217.20.99:443
2019-02-10 01:40:089c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 173.194.79.106:443
2019-02-10 01:40:089c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 172.217.168.4:443
2019-02-10 01:40:079c3e69b6aca6a7b7e6885650f0af5a61Virustotal results 45/70 (64.29%) 108.177.119.94:443
2019-02-09 12:37:268eda4ccf6653b2346f649fee746209bbVirustotal results 43/69 (62.32%) 108.177.126.94:443
2019-02-09 12:37:268eda4ccf6653b2346f649fee746209bbVirustotal results 43/69 (62.32%) 172.217.168.4:443
2019-02-09 04:45:0885999fafc0b3cbf49e7f3ac466c5b9a7Virustotal results 46/70 (65.71%) 172.217.22.35:443
2019-02-09 04:45:0785999fafc0b3cbf49e7f3ac466c5b9a7Virustotal results 46/70 (65.71%) 172.217.18.164:443
2019-02-08 22:48:56cdedf9892b1cf43ae83999e3f4351131Virustotal results 31/71 (43.66%) 172.217.17.36:443
2019-02-08 22:48:56cdedf9892b1cf43ae83999e3f4351131Virustotal results 31/71 (43.66%) 216.58.212.131:443
2019-02-07 18:55:30032af85e0d67225ec31c024f07a0ac48n/a172.217.20.68:443
2019-02-07 18:55:30032af85e0d67225ec31c024f07a0ac48n/a74.125.206.94:443
2019-02-03 02:20:569d29977f52c12afbf8f58cd82b05d001Virustotal results 41/70 (58.57%) 172.217.168.227:443
2019-02-03 02:20:559d29977f52c12afbf8f58cd82b05d001Virustotal results 41/70 (58.57%) 172.217.19.196:443
2019-02-03 00:49:325e71ab1980441770e0ead4683337afb6Virustotal results 40/67 (59.70%) 216.58.215.35:443
2019-01-22 14:23:0838295c84ee9cf761fc486143613f6f75Virustotal results 33/70 (47.14%) 108.177.126.94:443
2019-01-22 14:23:0838295c84ee9cf761fc486143613f6f75Virustotal results 33/70 (47.14%) 172.217.19.68:443
2019-01-22 14:23:0838295c84ee9cf761fc486143613f6f75Virustotal results 33/70 (47.14%) 216.58.204.36:443
2019-01-20 14:31:399e6df0e4d260e0e5bf7f23c150e82a4bVirustotal results 34/71 (47.89%) 216.58.201.227:443
2019-01-13 11:15:379de56070017d8a3f08d96259d3dbc4e9Virustotal results 36/71 (50.70%) 77.88.55.66:443
2019-01-13 11:15:379de56070017d8a3f08d96259d3dbc4e9Virustotal results 36/71 (50.70%) 216.58.211.131:443
2019-01-13 11:15:369de56070017d8a3f08d96259d3dbc4e9Virustotal results 36/71 (50.70%) 216.58.211.132:443
2019-01-05 19:56:33a26dd9ab29f62033ad37ebc874a20a7cn/a216.58.207.196:443
2019-01-05 19:56:33a26dd9ab29f62033ad37ebc874a20a7cn/a216.58.209.131:443
2018-12-28 01:43:12117f62878ac1929ddd9526463de87b72n/a172.217.17.99:443
2018-12-28 01:43:12117f62878ac1929ddd9526463de87b72n/a172.217.168.228:443
2018-12-24 22:19:08424f7b8edf5d150c7a248ad789512bc4Virustotal results 39/69 (56.52%) 216.58.209.131:443
2018-12-24 22:19:08424f7b8edf5d150c7a248ad789512bc4Virustotal results 39/69 (56.52%) 216.58.207.196:443
2018-12-24 22:19:08424f7b8edf5d150c7a248ad789512bc4Virustotal results 39/69 (56.52%) 172.217.22.163:443
2018-12-19 20:54:5861f4fa70b33c54bb2e9e049359c3a03en/a172.217.19.227:443
2018-12-16 20:17:5678c050980246f58ecc5dfc373d81c6f8Virustotal results 37/71 (52.11%) 172.217.16.3:443
2018-12-16 20:17:5678c050980246f58ecc5dfc373d81c6f8Virustotal results 37/71 (52.11%) 172.217.20.195:443
2018-12-16 20:17:5678c050980246f58ecc5dfc373d81c6f8Virustotal results 37/71 (52.11%) 172.217.20.163:443
2018-12-16 20:17:5678c050980246f58ecc5dfc373d81c6f8Virustotal results 37/71 (52.11%) 172.217.16.4:443
2018-12-16 20:17:5678c050980246f58ecc5dfc373d81c6f8Virustotal results 37/71 (52.11%) 216.58.215.68:443
2018-12-15 23:29:4806ab498eb864a937fc7f0ea4908e0731Virustotal results 37/71 (52.11%) 216.58.211.99:443
2018-12-15 23:29:4806ab498eb864a937fc7f0ea4908e0731Virustotal results 37/71 (52.11%) 172.217.17.131:443
2018-12-15 23:29:4806ab498eb864a937fc7f0ea4908e0731Virustotal results 37/71 (52.11%) 172.217.19.195:443
2018-12-15 23:29:4806ab498eb864a937fc7f0ea4908e0731Virustotal results 37/71 (52.11%) 216.58.211.100:443
2018-12-11 15:36:300ddb54791d2232498e2b25ed65484c89Virustotal results 24/70 (34.29%) 172.217.16.4:443
2018-12-11 15:36:300ddb54791d2232498e2b25ed65484c89Virustotal results 24/70 (34.29%) 216.58.215.99:443
2018-12-10 23:44:03dac816d1c7b4ac33bc491a2c26ef83c2n/a216.58.209.131:443
2018-12-09 00:59:4399baca5d78a6427843dba64a5fc0c083Virustotal results 39/71 (54.93%) 216.58.215.99:443
2018-12-09 00:59:4399baca5d78a6427843dba64a5fc0c083Virustotal results 39/71 (54.93%) 172.217.16.3:443
2018-12-09 00:59:4399baca5d78a6427843dba64a5fc0c083Virustotal results 39/71 (54.93%) 172.217.16.4:443
2018-12-09 00:59:4399baca5d78a6427843dba64a5fc0c083Virustotal results 39/71 (54.93%) 216.58.215.100:443
2018-12-08 11:55:1754aaa042e75d20b5b9b22763639024b8Virustotal results 39/70 (55.71%) 172.217.20.100:443
2018-12-08 11:55:1754aaa042e75d20b5b9b22763639024b8Virustotal results 39/70 (55.71%) 216.58.211.99:443
2018-12-08 11:55:1654aaa042e75d20b5b9b22763639024b8Virustotal results 39/70 (55.71%) 108.177.15.94:443
2018-12-05 07:04:196a9c5dea5eed27a993cd13041c567fe2Virustotal results 39/70 (55.71%) 108.177.98.94:443
2018-12-05 06:15:27f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 172.217.168.36:443
2018-12-05 06:15:27f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 216.58.215.227:443
2018-12-05 06:15:27f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 172.217.168.196:443
2018-12-05 06:15:26f0a3e4eca113df7d09bbff6c3678ff27Virustotal results 35/69 (50.72%) 172.217.17.35:443
2018-12-03 10:27:382859f008ada0a06ef6a1f635730c35f1Virustotal results 37/70 (52.86%) 74.125.206.94:443
2018-12-03 10:27:382859f008ada0a06ef6a1f635730c35f1Virustotal results 37/70 (52.86%) 172.217.20.100:443
2018-11-26 08:28:408c2a233173810d4f53df1cc5de624d50Virustotal results 35/70 (50.00%) 74.125.206.94:443
2018-11-26 08:28:398c2a233173810d4f53df1cc5de624d50Virustotal results 35/70 (50.00%) 74.125.206.104:443
2018-11-25 13:38:34fb997d885b5e1094b56672648e1e99b4Virustotal results 35/69 (50.72%) 216.58.211.99:443
2018-11-22 16:18:18a3f0d4f18f1b20f8931f07a2658edcf7Virustotal results 34/67 (50.75%) 74.125.142.105:443
2018-11-22 16:18:18a3f0d4f18f1b20f8931f07a2658edcf7Virustotal results 34/67 (50.75%) 108.177.98.94:443

# of entries: 100 (max: 100)