JA3 Fingerprints
You can find further information about the JA3 fingerprint c2b4710c6888a5d47befe865c8e6fb19, including the corresponding malware samples as well as the associated botnet C&Cs.
Database Entry
| JA3 Fingerprint: | c2b4710c6888a5d47befe865c8e6fb19 |
|---|---|
| First seen: | 2018-11-29 20:46:04 UTC |
| Last seen: | 2021-08-03 23:37:22 UTC |
| Status: | Blacklisted |
| Malware samples: | 835 |
| Destination IPs: | 148 |
| Malware: | Tofsee  |
| Listing date: | 2020-01-09 14:32:01 |
Malware Samples
The table below documents all malware samples associated with this JA3 Fingerprint.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Botnet C&C (IP:port) |
|---|---|---|---|
| 2026-10-14 12:56:15 | 949ae26ad19544f5e2f6625cfaa16344 | n/a | 67.223.118.124:443 |
| 2026-10-14 09:27:25 | d16b255de9d2e20f9a73d521cb2dc7e0 | n/a | 67.223.118.124:443 |
| 2026-10-10 06:27:21 | f459a35b0976c3d67ba52240060e75df | n/a | 67.223.118.124:443 |
| 2026-09-27 23:29:49 | 404f575a9c96a8082fd777cdd4364a5e | n/a | 198.187.29.19:443 |
| 2026-08-07 11:34:29 | 51cc7dc47230d0d2b361bab0fc428f2f | n/a | 198.54.120.13:443 |
| 2026-08-06 23:31:36 | af1c7522a18a4613a21ab6f7769a0327 | n/a | 198.187.29.19:443 |
| 2026-07-31 14:51:25 | 2f150c15a9911ff1e7e732d2c1fc6fc5 | n/a | 198.187.29.19:443 |
| 2026-06-25 08:12:38 | 144a0a499e007931628c98f38929466f | n/a | 162.0.215.191:443 |
| 2026-06-14 14:01:32 | 00bb769b1677eeffe095dda6eedbd09a | n/a | 198.54.120.13:443 |
| 2026-06-11 02:21:42 | 669d0fdf072bc43eb7c358c65c11e4db | n/a | 198.54.120.13:443 |
| 2026-05-31 06:01:46 | 34473c2e5f7dcca8fc6d5476650bd71a | n/a | 198.54.120.13:443 |
| 2026-05-25 02:36:35 | 2a44ed1cfbdad13fe90b5372839b7bf6 | n/a | 198.54.120.13:443 |
| 2026-05-25 02:36:35 | 2a44ed1cfbdad13fe90b5372839b7bf6 | n/a | 198.54.120.13:443 |
| 2026-05-18 03:17:58 | a08c9bc61c9764fd7100e86c10869ea5 | n/a | 185.199.109.133:443 |
| 2026-05-18 03:17:58 | a08c9bc61c9764fd7100e86c10869ea5 | n/a | 140.82.121.4:443 |
| 2026-05-17 23:45:08 | 24e44f6139c9ffa07f083ba756972c94 | n/a | 185.199.108.133:443 |
| 2026-05-17 23:45:08 | 24e44f6139c9ffa07f083ba756972c94 | n/a | 140.82.121.4:443 |
| 2026-05-07 13:04:45 | 3b0bdf2503025c13f1c51036dab265c3 | n/a | 185.199.110.133:443 |
| 2026-05-07 13:04:44 | 3b0bdf2503025c13f1c51036dab265c3 | n/a | 140.82.121.4:443 |
| 2026-04-25 12:38:01 | e04e329fc43c843a621a366841c8d224 | n/a | 198.54.115.100:443 |
| 2026-03-25 10:07:37 | b9971be5987e8fe2aa28d62b28a8348e | n/a | 198.54.115.100:443 |
| 2026-03-17 11:15:45 | 96b8e978d8007b422922840094fca561 | n/a | 68.65.123.84:443 |
| 2025-09-27 19:52:58 | bc95ea003d7789a1a02a5386cda13bf6 | n/a | 198.187.29.126:443 |
| 2025-09-05 12:48:40 | 61d56357d6f6f5816edca113ca7bb3b0 | n/a | 66.29.132.150:443 |
| 2025-01-27 12:20:17 | d748a017b17729fdef1f35006c1d11ef | n/a | 104.18.3.37:443 |
| 2025-01-27 12:20:17 | d748a017b17729fdef1f35006c1d11ef | n/a | 172.217.168.46:443 |
| 2024-10-30 16:59:37 | 59c671a61114e89250bee150479f71a8 | n/a | 104.18.2.37:443 |
| 2024-10-30 16:59:37 | 59c671a61114e89250bee150479f71a8 | n/a | 172.217.168.14:443 |
| 2023-05-05 11:33:52 | 4914301715ed9fabd39abab24e5b0238 | n/a | 157.240.253.174:443 |
| 2023-02-13 08:52:40 | 68781bf7827d4eed38bde544125320ca | n/a | 157.240.247.174:443 |
| 2023-02-13 08:52:40 | 68781bf7827d4eed38bde544125320ca | n/a | 157.240.247.63:443 |
| 2023-02-12 23:34:56 | 4e2e7d87fa9f5a3e5028feffd1e722d4 | n/a | 157.240.17.63:443 |
| 2023-02-12 16:37:55 | 174ecd0a7af5c102da794675f96bc099 | n/a | 157.240.247.63:443 |
| 2023-02-12 16:37:54 | 174ecd0a7af5c102da794675f96bc099 | n/a | 157.240.201.63:443 |
| 2023-02-11 06:23:19 | 99ec86a55cf68a3918eb2753f7c0fb8a | n/a | 157.240.17.174:443 |
| 2023-02-11 06:23:18 | 99ec86a55cf68a3918eb2753f7c0fb8a | n/a | 157.240.17.63:443 |
| 2023-01-23 22:49:41 | aa78a35499fbe10334dcbd371f4b288f |  45 / 70 (64.29%)
| 157.240.17.63:443 |
| 2023-01-23 07:44:05 | 5d258bff39eca5c6dc8a5c173546bd9d | n/a | 157.240.11.52:443 |
| 2023-01-23 07:44:04 | 5d258bff39eca5c6dc8a5c173546bd9d | n/a | 157.240.11.174:443 |
| 2023-01-09 10:20:24 | 8c6360af7f35502f8bfc3318a87c45a8 | n/a | 157.240.17.174:443 |
| 2023-01-09 07:19:59 | 2e40b706f95e6b545a19a7cb3b7f4e35 | 39 / 70 (55.71%)
| 157.240.17.63:443 |
| 2023-01-08 20:33:08 | e0636552609050d1ac2aa6aaaed44b22 | n/a | 157.240.17.174:443 |
| 2023-01-08 12:22:54 | fd6a2a7f0012647c1f7bc7ac7b89ce47 | 38 / 71 (53.52%)
| 157.240.17.63:443 |
| 2023-01-07 09:06:34 | 12fcb597175811b0479808913f2f6bcf | n/a | 157.240.17.63:443 |
| 2023-01-06 16:14:51 | 74f8a1cdabfa14dcd06ca2d7d65d5d8c | n/a | 185.60.216.52:443 |
| 2023-01-06 16:14:50 | 74f8a1cdabfa14dcd06ca2d7d65d5d8c | n/a | 157.240.20.174:443 |
| 2023-01-06 14:10:36 | 5cfa722238eb5bb8856cec294d882f48 | n/a | 157.240.17.174:443 |
| 2023-01-06 03:06:57 | 05875193989334d02e3da24da28cfdff | 53 / 71 (74.65%)
| 157.240.17.63:443 |
| 2023-01-02 17:58:49 | 178ec5c69487d901011930bc9275af1f | 56 / 71 (78.87%)
| 157.240.17.63:443 |
| 2023-01-01 15:34:13 | b8f175055e1c4bb1e5dbfed26fffb3fd | n/a | 157.240.247.174:443 |
| 2022-12-24 20:29:14 | a81e5141ccf1c7bd6ba7646047b8a1f9 | 34 / 68 (50.00%)
| 157.240.17.63:443 |
| 2022-12-20 15:15:12 | 6af09adb9d9276847a4d623f0223d092 | n/a | 157.240.22.63:443 |
| 2022-12-03 06:45:28 | 65c2af524c0d9304509187a25c1e3b02 | n/a | 157.240.11.52:443 |
| 2022-11-26 14:36:19 | 6823a108f80b535231ed71f4ff7cb3c7 | n/a | 157.240.17.174:443 |
| 2022-11-23 01:41:24 | 1d6f14f7ac1d5995c088a1fa9f8566cd | 49 / 70 (70.00%)
| 157.240.17.63:443 |
| 2022-11-23 01:41:24 | 1d6f14f7ac1d5995c088a1fa9f8566cd | 49 / 70 (70.00%)
| 157.240.17.174:443 |
| 2022-11-22 21:31:14 | 776285cfda8920255128c6977b3ddc91 | n/a | 157.240.17.174:443 |
| 2022-11-21 04:24:50 | 65020c8c80c54153ce386ff5e5e5c734 | n/a | 157.240.247.63:443 |
| 2022-11-17 07:00:05 | 4722a4ec1cb83ee2bc7aa46667a93e5b | 26 / 71 (36.62%)
| 157.240.17.174:443 |
| 2022-11-16 06:50:03 | ba22945c63f35174ae8ac4615b8f6cfd | n/a | 157.240.201.63:443 |
| 2022-11-12 00:47:46 | 9522f6a6968f9505bf75617ca5adb28e | n/a | 157.240.20.63:443 |
| 2022-11-03 20:51:43 | 3705386cd7326733384d5fd6e8f3fcda | n/a | 157.240.17.174:443 |
| 2022-11-03 06:00:18 | 6269c18fc29b70fa742d48e7c38283e7 | n/a | 157.240.17.63:443 |
| 2022-11-03 03:39:45 | 55ea6bbf837a447ba4f99bc2087f84d5 | n/a | 157.240.17.63:443 |
| 2022-11-02 23:41:13 | 000fccc5a331ddd85e58a3b8f6fdd871 | n/a | 157.240.17.63:443 |
| 2022-11-02 19:51:44 | 3950d84bcd3c4ed6b96a41d46737fd4e | n/a | 157.240.17.174:443 |
| 2022-10-29 00:16:04 | 3427a69e05fbe98e36b2eafc9a48a90c | 36 / 71 (50.70%)
| 10.0.7.101:53765 |
| 2022-10-29 00:14:22 | 3427a69e05fbe98e36b2eafc9a48a90c | 36 / 71 (50.70%)
| 193.246.8.82:443 |
| 2022-10-29 00:14:01 | 3427a69e05fbe98e36b2eafc9a48a90c | 36 / 71 (50.70%)
| 10.0.7.101:53733 |
| 2022-10-29 00:13:37 | 3427a69e05fbe98e36b2eafc9a48a90c | 36 / 71 (50.70%)
| 10.0.7.101:53691 |
| 2022-10-27 10:26:24 | 6a4a18a6bc3f69d765f3f858c275c4b8 | n/a | 157.240.17.63:443 |
| 2022-10-23 07:13:27 | 997c68d58288f380989c37b68ee81074 | 27 / 72 (37.50%)
| 157.240.11.174:443 |
| 2022-10-22 03:59:27 | b47be847e2687e674c9eb8037b84a03f | n/a | 157.240.201.63:443 |
| 2022-10-21 19:34:57 | f823c3617733486da4d4b770aef17367 | n/a | 157.240.247.174:443 |
| 2022-10-21 19:34:57 | f823c3617733486da4d4b770aef17367 | n/a | 157.240.247.63:443 |
| 2022-10-21 12:31:40 | 0b00b0081a2473a74c7d74642add9797 | n/a | 157.240.17.63:443 |
| 2022-10-16 09:29:17 | 4327af18e0c857a3a2db124fb68cf4ba | n/a | 157.240.201.63:443 |
| 2022-10-16 09:29:16 | 4327af18e0c857a3a2db124fb68cf4ba | n/a | 157.240.201.174:443 |
| 2022-10-16 00:29:05 | 2f74526c9362e0d006ad9f7d1da6d79c | 53 / 72 (73.61%)
| 157.240.17.63:443 |
| 2022-10-15 01:04:40 | 1c886466ca3ca9c60539af6f8e201158 | 48 / 72 (66.67%)
| 157.240.17.63:443 |
| 2022-10-10 18:02:10 | 1db2442a2b7e287e358759433dd68616 | 52 / 72 (72.22%)
| 157.240.201.63:443 |
| 2022-10-10 18:02:09 | 1db2442a2b7e287e358759433dd68616 | 52 / 72 (72.22%)
| 157.240.247.174:443 |
| 2022-10-10 18:02:09 | 1db2442a2b7e287e358759433dd68616 | 52 / 72 (72.22%)
| 157.240.247.63:443 |
| 2022-10-05 23:44:08 | 214d700e020f936d92c6f90cf3afc456 | n/a | 157.240.17.63:443 |
| 2022-10-05 23:44:08 | 214d700e020f936d92c6f90cf3afc456 | n/a | 157.240.17.174:443 |
| 2022-10-01 08:38:14 | bacd72506ebc8f36e8b15853321f9c97 | n/a | 157.240.247.174:443 |
| 2022-10-01 08:38:13 | bacd72506ebc8f36e8b15853321f9c97 | n/a | 157.240.201.63:443 |
| 2022-10-01 08:38:13 | bacd72506ebc8f36e8b15853321f9c97 | n/a | 157.240.247.63:443 |
| 2022-10-01 07:04:47 | a08fdde20f364ecd233811de34f10743 | n/a | 157.240.11.52:443 |
| 2022-10-01 07:04:47 | a08fdde20f364ecd233811de34f10743 | n/a | 157.240.11.174:443 |
| 2022-10-01 07:04:47 | a08fdde20f364ecd233811de34f10743 | n/a | 157.240.22.63:443 |
| 2022-09-30 21:12:18 | 6178806000823df68fc03b6dd53acce4 | n/a | 157.240.247.63:443 |
| 2022-09-30 21:12:18 | 6178806000823df68fc03b6dd53acce4 | n/a | 157.240.247.174:443 |
| 2022-09-30 21:12:17 | 6178806000823df68fc03b6dd53acce4 | n/a | 157.240.201.63:443 |
| 2022-09-28 19:09:44 | 0c3cdcf59c019f52e50f1b66b79e24e4 | 46 / 72 (63.89%)
| 157.240.20.63:443 |
| 2022-09-28 12:06:08 | d9607a714fc963c22caf53d3f9e85399 | n/a | 157.240.17.174:443 |
| 2022-09-28 12:06:07 | d9607a714fc963c22caf53d3f9e85399 | n/a | 157.240.17.63:443 |
| 2022-09-28 07:47:56 | 9b2ee55e8a6131b0d8a846f858aa59a2 | n/a | 157.240.20.63:443 |
| 2022-09-25 08:34:36 | c1e908ebf1f56a413ab4fdc29cbb8a89 | n/a | 157.240.17.63:443 |
| 2022-09-25 08:34:36 | c1e908ebf1f56a413ab4fdc29cbb8a89 | n/a | 157.240.17.174:443 |
# of entries: 100 (max: 100)