JA3 Fingerprints

You can find further information about the JA3 fingerprint c2b4710c6888a5d47befe865c8e6fb19, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:c2b4710c6888a5d47befe865c8e6fb19
First seen:2018-11-29 20:46:04 UTC
Last seen:2020-12-16 15:08:09 UTC
Status:Blacklisted
Malware samples:620
Destination IPs:100
Malware:Tofsee -
Listing date:2020-01-09 14:32:01

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-12-16 15:08:09a32852f773e5dab808722d079eedf635Virustotal results 1 / 70 (1.43%) 47.246.43.167:443
2020-12-06 20:41:4822b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49890
2020-12-06 20:41:4822b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 35.186.224.25:443
2020-12-06 20:41:4822b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49904
2020-12-06 20:41:4822b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49908
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49899
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49901
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49897
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49887
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49895
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49893
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49925
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49921
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49927
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49919
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49923
2020-12-06 20:41:4722b6506112221ea5201e4c80d11db2c0Virustotal results 17 / 70 (24.29%) 10.0.14.234:49906
2020-11-27 07:54:25ae1cf679daf13324d3353fcec8718b28Virustotal results 47 / 70 (67.14%) 212.82.100.140:443
2020-11-27 07:09:32ad0fb2170d1b7ffa3c0b99565e2fcaf7Virustotal results 50 / 72 (69.44%) 212.82.100.140:443
2020-11-27 07:02:27acf308bbdde901611ec5014d93eb6c3dVirustotal results 55 / 72 (76.39%) 212.82.100.140:443
2020-11-27 06:46:26ac6b7b66e9abe988e56881434d36b5d6Virustotal results 49 / 72 (68.06%) 212.82.100.140:443
2020-11-26 21:51:57214c6c15a3c2e14cc76cc635f35d404bVirustotal results 52 / 70 (74.29%) 212.82.100.140:443
2020-11-26 21:51:260f3d598ec8f9c061c39520094f7f52b2n/a212.82.100.140:443
2020-11-26 21:41:240b681c415da5606871486ac5b62278f2Virustotal results 43 / 70 (61.43%) 74.6.160.138:443
2020-11-26 19:56:09a6b8c3219e9eda58ef2ae3277842c06dVirustotal results 51 / 71 (71.83%) 212.82.100.140:443
2020-11-26 19:38:39a6428662611ce0811da28dfd183e60d2Virustotal results 53 / 69 (76.81%) 212.82.100.140:443
2020-11-26 18:49:34a52345fa2d74a558739b243c73cd54bbVirustotal results 49 / 72 (68.06%) 212.82.100.140:443
2020-11-26 18:47:18a4f5533a08a02c3406096f664b0c15e8Virustotal results 47 / 70 (67.14%) 212.82.100.140:443
2020-11-26 18:28:08a4b23b2f01657feb7cd04875d1cf4874Virustotal results 49 / 70 (70.00%) 212.82.100.140:443
2020-11-26 15:11:37a1db4ff8577ac8af0e021f5797cf268dVirustotal results 49 / 71 (69.01%) 212.82.100.140:443
2020-11-26 15:11:35a202e81452555baa07a427cd022b419eVirustotal results 53 / 70 (75.71%) 212.82.100.140:443
2020-11-16 12:38:21cd0a2c1105b1d223e231e8b39b707bb7Virustotal results 27 / 71 (38.03%) 172.67.160.66:443
2020-11-16 12:38:21cd0a2c1105b1d223e231e8b39b707bb7Virustotal results 27 / 71 (38.03%) 104.153.233.181:443
2020-11-16 12:38:21cd0a2c1105b1d223e231e8b39b707bb7Virustotal results 27 / 71 (38.03%) 104.28.27.246:443
2020-11-16 12:38:21cd0a2c1105b1d223e231e8b39b707bb7Virustotal results 27 / 71 (38.03%) 104.28.26.246:443
2020-10-05 12:03:58b16bc1e5ae192fba0d18da850f7e554aVirustotal results 48 / 70 (68.57%) 52.40.13.62:443
2020-10-05 12:03:58b16bc1e5ae192fba0d18da850f7e554aVirustotal results 48 / 70 (68.57%) 151.101.38.214:443
2020-10-05 12:03:58b16bc1e5ae192fba0d18da850f7e554aVirustotal results 48 / 70 (68.57%) 151.101.38.167:443
2020-10-05 12:03:57b16bc1e5ae192fba0d18da850f7e554aVirustotal results 48 / 70 (68.57%) 178.128.34.99:443
2020-09-11 19:32:22a188403a0a44c21f6653f3b64ab3f42dVirustotal results 54 / 68 (79.41%) 184.30.208.101:443
2020-09-11 18:19:43a0c463f6272617f994ea35e57a01d5een/a80.241.60.222:443
2020-09-11 18:19:42a0c463f6272617f994ea35e57a01d5een/a163.172.174.69:443
2020-09-11 18:19:42a0c463f6272617f994ea35e57a01d5een/a104.31.64.133:443
2020-09-11 18:19:42a0c463f6272617f994ea35e57a01d5een/a104.22.23.196:443
2020-09-02 20:55:582e7acc31c2c2f5ae18628985bca1ade6Virustotal results 47 / 68 (69.12%) 104.22.23.196:443
2020-09-02 20:55:572e7acc31c2c2f5ae18628985bca1ade6Virustotal results 47 / 68 (69.12%) 185.69.193.7:443
2020-09-02 07:19:44b6d2bd26734781986755dcf654bbd658Virustotal results 41 / 70 (58.57%) 104.22.22.196:443
2020-09-02 03:34:19b53492ff44556c630c792f931224133cVirustotal results 47 / 68 (69.12%) 104.22.22.196:443
2020-09-02 03:34:17b53492ff44556c630c792f931224133cVirustotal results 47 / 68 (69.12%) 172.67.20.196:443
2020-09-02 03:34:17b53492ff44556c630c792f931224133cVirustotal results 47 / 68 (69.12%) 172.67.192.232:443
2020-09-01 10:55:24b2c200b75276be9d28d5c2a0c87ca3ffVirustotal results 33 / 67 (49.25%) 172.67.20.196:443
2020-08-27 10:10:246aac03b2b650493fd3123ae30a98c7a1n/a104.22.22.196:443
2020-08-27 10:10:246aac03b2b650493fd3123ae30a98c7a1n/a185.69.193.7:443
2020-08-27 02:02:54507678de385f391ab14cbc66cfc4f09cn/a193.17.41.99:443
2020-08-27 02:02:54507678de385f391ab14cbc66cfc4f09cn/a104.31.66.68:443
2020-08-27 02:02:54507678de385f391ab14cbc66cfc4f09cn/a104.31.67.68:443
2020-08-26 21:27:25369d5f72f36206b6181113062ccb9469n/a172.67.20.196:443
2020-08-26 21:27:24369d5f72f36206b6181113062ccb9469n/a104.22.22.196:443
2020-08-26 21:27:24369d5f72f36206b6181113062ccb9469n/a185.69.193.7:443
2020-08-26 20:20:012d51f911ae738d5780639cb026da95bdn/a172.67.20.196:443
2020-08-26 20:20:002d51f911ae738d5780639cb026da95bdn/a185.69.193.7:443
2020-08-26 19:09:4323bd8a35228d93d2e7a2b944150766f4Virustotal results 50 / 68 (73.53%) 104.22.23.196:443
2020-08-26 19:09:4323bd8a35228d93d2e7a2b944150766f4Virustotal results 50 / 68 (73.53%) 185.69.193.7:443
2020-08-26 17:45:571e4af12a91c2090d29ce1f5277432a1en/a185.69.193.7:443
2020-08-26 17:45:561e4af12a91c2090d29ce1f5277432a1en/a104.22.22.196:443
2020-08-24 15:06:54be0e99a453998c0f95bbebdf0d78d299Virustotal results 44 / 68 (64.71%) 185.69.193.7:443
2020-08-12 21:11:301adf7f16fb2c5e39910ca7a843f9b2c4n/a87.240.129.140:443
2020-07-28 02:20:25c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 173.201.192.5:443
2020-07-28 02:20:25c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 173.201.192.133:443
2020-07-28 02:20:25c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 104.31.67.68:443
2020-07-28 02:20:24c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 68.178.252.148:443
2020-07-28 02:20:24c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 2.20.222.31:443
2020-07-28 02:20:23c03207b87ef0aa6cf76a18e87c70310dVirustotal results 39 / 71 (54.93%) 68.178.252.133:443
2020-07-05 16:20:52be8fac2f0790e0ec594723afac182f93Virustotal results 55 / 72 (76.39%) 94.100.180.61:443
2020-07-05 14:45:10bc82008785e4f059b0a71fddf764dcc7Virustotal results 42 / 73 (57.53%) 94.100.180.61:443
2020-07-05 10:53:31b7f7a94d634f51c44b0de48e4efd6659Virustotal results 45 / 73 (61.64%) 217.69.139.61:443
2020-07-05 00:07:52ac83e1839fe2e72f3ec5de6a68fde542Virustotal results 57 / 72 (79.17%) 217.69.139.61:443
2020-07-04 22:25:34aa85739ecb1af7b6d36a5c45ecac7f1fVirustotal results 45 / 73 (61.64%) 94.100.180.61:443
2020-07-04 16:30:59a5e6ac8b10808305730d186a73ee2686Virustotal results 47 / 73 (64.38%) 94.100.180.61:443
2020-07-04 10:17:0378d1c03dc95ea6a922f337ac26cf038bn/a217.69.139.61:443
2020-07-03 18:09:3340fcaca8a1e5f811daa69ee8b410ff0cVirustotal results 34 / 73 (46.58%) 94.100.180.61:443
2020-07-03 15:26:07d8bc0f68619b40058337bc2208a529a7Virustotal results 41 / 72 (56.94%) 217.69.139.61:443
2020-07-03 15:11:02d7333fc36b17b96a0a09b5b616466604Virustotal results 48 / 73 (65.75%) 94.100.180.61:443
2020-07-03 12:38:26c27f104e6575d1b551ded5e88d93cb30Virustotal results 46 / 73 (63.01%) 217.69.139.61:443
2020-07-03 12:24:56c252698643c12ba4c4d7324e730806cdVirustotal results 50 / 73 (68.49%) 94.100.180.61:443
2020-07-03 07:07:53bbaef49ef5bb882ae792fc493d857610Virustotal results 48 / 71 (67.61%) 217.69.139.61:443
2020-07-03 06:50:02bbcfc2e81282b25760d33f889199a9e7Virustotal results 55 / 73 (75.34%) 217.69.139.61:443
2020-07-03 01:28:16b51185a488c963747eb4f3c78b798c5fVirustotal results 38 / 73 (52.05%) 94.100.180.61:443
2020-07-02 23:55:04b3ad65faeafacea5d2731c09f4f2f4ceVirustotal results 39 / 72 (54.17%) 217.69.139.61:443
2020-07-02 23:55:04b3ad65faeafacea5d2731c09f4f2f4ceVirustotal results 39 / 72 (54.17%) 94.100.180.61:443
2020-07-02 18:41:3399d883d5f2b6cddfa4c94ed20c02c46bVirustotal results 37 / 73 (50.68%) 217.69.139.61:443
2020-07-02 17:56:5269d7d8d95af2dedeb98d2434b0eb6e44n/a173.201.192.148:443
2020-07-02 17:56:5169d7d8d95af2dedeb98d2434b0eb6e44n/a97.74.135.148:443
2020-07-02 17:56:5169d7d8d95af2dedeb98d2434b0eb6e44n/a68.178.252.148:443
2020-07-02 17:56:5069d7d8d95af2dedeb98d2434b0eb6e44n/a173.201.193.148:443
2020-07-02 17:56:5069d7d8d95af2dedeb98d2434b0eb6e44n/a2.20.17.144:443
2020-07-02 08:39:23a9e82ac62abdee20541ef64b24f7c5c1Virustotal results 49 / 72 (68.06%) 94.100.180.61:443
2020-07-01 21:05:01870d3c832ff4490f357041c6058b9475Virustotal results 42 / 72 (58.33%) 94.100.180.61:443
2020-07-01 20:11:3263f8f3829f9c9063f5f3f08f0cf11c7aVirustotal results 39 / 73 (53.42%) 94.100.180.61:443
2020-07-01 20:04:14620b4af32712e4e6df2ad2246e5b14ddn/a94.100.180.61:443

# of entries: 100 (max: 100)