JA3 Fingerprints

You can find further information about the JA3 fingerprint fd80fa9c6120cdeea8520510f3c644ac, including the corresponding malware samples as well as the associated botnet C&Cs.

Database Entry


JA3 Fingerprint:fd80fa9c6120cdeea8520510f3c644ac
First seen:2018-03-11 09:34:30 UTC
Last seen:2020-09-21 19:38:47 UTC
Status:Blacklisted
Malware samples:1'547
Destination IPs:188
Malware:Tofsee -
Listing date:2018-11-14 00:00:00

Malware Samples


The table below documents all malware samples associated with this JA3 Fingerprint.

Timestamp (UTC)Malware Sample (MD5 hash)VTBotnet C&C (IP:port)
2020-09-21 19:38:4746ec0c1f30ee89e794fb7a76328fa10bVirustotal results 35 / 68 (51.47%) 172.67.131.206:443
2020-09-21 19:38:4746ec0c1f30ee89e794fb7a76328fa10bVirustotal results 35 / 68 (51.47%) 104.28.14.61:443
2020-09-21 18:14:26044f4900ffbf25976d71e26058098e60Virustotal results 37 / 69 (53.62%) 104.28.14.61:443
2020-09-21 14:28:29ebe349de6e2b0d438457369f8cbb0963Virustotal results 41 / 67 (61.19%) 104.28.15.61:443
2020-09-21 14:28:29ebe349de6e2b0d438457369f8cbb0963Virustotal results 41 / 67 (61.19%) 104.28.14.61:443
2020-09-21 12:30:27e58849a448ab9f4a2ec5aa99879de328Virustotal results 39 / 68 (57.35%) 104.28.5.155:443
2020-09-21 10:59:28d88c3048627f106eb0f0a039b628c2dbVirustotal results 39 / 67 (58.21%) 104.28.14.61:443
2020-09-21 10:59:28d88c3048627f106eb0f0a039b628c2dbVirustotal results 39 / 67 (58.21%) 172.67.131.206:443
2020-09-21 10:26:52d9750a487b4826c186875fc9f08d900bn/a172.67.131.206:443
2020-09-20 18:42:00b14c0f872093af543c5e2ae9b42309ecVirustotal results 39 / 68 (57.35%) 172.67.166.95:443
2020-09-20 18:42:00b14c0f872093af543c5e2ae9b42309ecVirustotal results 39 / 68 (57.35%) 104.31.82.224:443
2020-09-20 17:44:39b015158de2eba7aaff698f33653be68bVirustotal results 34 / 67 (50.75%) 172.67.166.95:443
2020-09-20 17:44:39b015158de2eba7aaff698f33653be68bVirustotal results 34 / 67 (50.75%) 104.31.82.224:443
2020-09-20 17:04:45af5ea1351b5e9c1865ad47a5da281cf7Virustotal results 38 / 66 (57.58%) 172.67.166.95:443
2020-09-20 17:04:45af5ea1351b5e9c1865ad47a5da281cf7Virustotal results 38 / 66 (57.58%) 104.31.82.224:443
2020-09-20 11:35:145ec5ea2dba0b37fb6bb6d5825d16aa66n/a104.28.14.61:443
2020-09-20 01:34:460861d59bb20f2a4f576b733fa47186ccn/a104.28.15.61:443
2020-09-20 01:34:460861d59bb20f2a4f576b733fa47186ccn/a172.67.131.206:443
2020-09-19 07:02:528d0cbe2e0642eeaf7ce8b87802a36d0cVirustotal results 38 / 68 (55.88%) 172.67.131.206:443
2020-09-18 02:06:454166eee9d63e6074c0ab40751b2bcd14Virustotal results 48 / 73 (65.75%) 172.67.186.6:443
2020-09-17 22:01:411bfcc010bf5b44540df1302956384287n/a172.67.131.206:443
2020-09-17 22:01:411bfcc010bf5b44540df1302956384287n/a104.28.15.61:443
2020-09-15 22:39:188d787dcde3fb7d0171a82a02faf2403cn/a172.67.131.179:443
2020-09-15 20:45:385ae13033bddacf60cfb4e218f94d375an/a172.67.131.206:443
2020-09-15 20:45:385ae13033bddacf60cfb4e218f94d375an/a104.28.15.61:443
2020-09-15 20:02:413dc5cb2dc20b49eeeae32e503558f82aVirustotal results 48 / 72 (66.67%) 104.28.15.61:443
2020-09-15 12:42:40af92107c0bec40d72c844ac36d3a6218Virustotal results 50 / 73 (68.49%) 172.67.186.6:443
2020-09-15 12:42:40af92107c0bec40d72c844ac36d3a6218Virustotal results 50 / 73 (68.49%) 104.28.5.155:443
2020-09-15 06:57:06a5def18a1bf038c9d8a8ac14dfba1289Virustotal results 38 / 68 (55.88%) 172.67.131.206:443
2020-09-15 06:03:29a5cd96f72de299e0baad99b3d6d9da69Virustotal results 44 / 67 (65.67%) 104.28.15.61:443
2020-09-15 02:25:48a046e708ca988ca9b60b8ee0ecbcc050Virustotal results 37 / 68 (54.41%) 104.31.82.224:443
2020-09-14 16:52:02b3a14cf094347817261ad52497dd05c0Virustotal results 46 / 69 (66.67%) 172.67.131.206:443
2020-09-14 16:52:02b3a14cf094347817261ad52497dd05c0Virustotal results 46 / 69 (66.67%) 104.28.15.61:443
2020-09-14 16:02:41b3338f2ec211cfc04f759321fe2fc5a4Virustotal results 40 / 68 (58.82%) 172.67.166.95:443
2020-09-13 19:28:235b5c8afae70da58af6fe6f3efc60069dVirustotal results 40 / 72 (55.56%) 104.28.14.61:443
2020-09-13 15:19:53b529dfed785587c32e06d075c8b54d80Virustotal results 40 / 67 (59.70%) 104.31.82.224:443
2020-09-13 15:19:53b529dfed785587c32e06d075c8b54d80Virustotal results 40 / 67 (59.70%) 104.31.83.224:443
2020-09-13 15:18:48b5a42b10b67d00fe37fb81c7d4a150aeVirustotal results 43 / 69 (62.32%) 104.31.68.84:443
2020-09-13 11:18:19b3cce3b6832f85c47579e8df3397daacVirustotal results 29 / 67 (43.28%) 104.31.82.224:443
2020-09-13 11:18:19b3cce3b6832f85c47579e8df3397daacVirustotal results 29 / 67 (43.28%) 104.31.83.224:443
2020-09-13 01:57:22a653cbc71628f2dbc348ef3c3bd7dbf9Virustotal results 37 / 67 (55.22%) 172.67.166.95:443
2020-09-13 01:57:22a653cbc71628f2dbc348ef3c3bd7dbf9Virustotal results 37 / 67 (55.22%) 104.31.83.224:443
2020-09-12 23:27:59a279f72f7848b40124b0e6191fc0a1a9n/a172.67.131.179:443
2020-09-12 23:27:59a279f72f7848b40124b0e6191fc0a1a9n/a104.28.24.59:443
2020-09-12 20:53:2175467bcfcd556881a345e6c42843db8fVirustotal results 51 / 68 (75.00%) 104.28.15.61:443
2020-09-12 20:53:2075467bcfcd556881a345e6c42843db8fVirustotal results 51 / 68 (75.00%) 104.28.14.61:443
2020-09-12 13:10:49aea01e32a0bcbc95d7118428a4cb046cn/a104.31.82.224:443
2020-09-12 13:10:49aea01e32a0bcbc95d7118428a4cb046cn/a172.67.166.95:443
2020-09-12 12:44:29ae553c41bf76b3db817574d3e1c7e9d3Virustotal results 37 / 68 (54.41%) 172.67.166.95:443
2020-09-12 12:09:41adac2a430d256bec79c54c53fa4e6944n/a31.13.64.35:443
2020-09-12 12:09:41adac2a430d256bec79c54c53fa4e6944n/a157.240.201.35:443
2020-09-11 23:06:46a3d6f73fd58a3fc488d3e030aa22254aVirustotal results 40 / 68 (58.82%) 172.67.166.95:443
2020-09-11 23:06:46a3d6f73fd58a3fc488d3e030aa22254aVirustotal results 40 / 68 (58.82%) 104.31.83.224:443
2020-09-11 21:46:05a2df929b2669d329ec38779126947948Virustotal results 34 / 67 (50.75%) 104.31.83.224:443
2020-09-11 21:33:21a2aaf3703018b528068c409788f893d2Virustotal results 37 / 68 (54.41%) 104.31.82.224:443
2020-09-11 21:33:21a2aaf3703018b528068c409788f893d2Virustotal results 37 / 68 (54.41%) 172.67.166.95:443
2020-09-11 17:53:05a027f47fe8ca77189aa8f81294356da1Virustotal results 40 / 67 (59.70%) 104.31.83.224:443
2020-09-11 17:53:05a027f47fe8ca77189aa8f81294356da1Virustotal results 40 / 67 (59.70%) 172.67.166.95:443
2020-09-11 14:47:1628e28390ab98c17498d3cb2d8df9509aVirustotal results 53 / 69 (76.81%) 104.28.15.61:443
2020-09-11 14:47:1628e28390ab98c17498d3cb2d8df9509aVirustotal results 53 / 69 (76.81%) 172.67.131.206:443
2020-09-10 17:24:3339d2e6cc58aba0f1751cd907bf34a974Virustotal results 42 / 70 (60.00%) 104.28.14.61:443
2020-09-10 08:16:21a66a7660e4d70c36c486901e3b021890Virustotal results 22 / 67 (32.84%) 172.67.205.170:443
2020-09-10 08:16:21a66a7660e4d70c36c486901e3b021890Virustotal results 22 / 67 (32.84%) 104.31.69.84:443
2020-09-10 05:49:06a4b448d34601489a514eb7089c635944Virustotal results 47 / 68 (69.12%) 104.31.83.224:443
2020-09-09 22:25:189b3d64e02f9c65efab97853578aca3ecVirustotal results 49 / 72 (68.06%) 172.67.131.206:443
2020-09-09 22:25:179b3d64e02f9c65efab97853578aca3ecVirustotal results 49 / 72 (68.06%) 104.28.14.61:443
2020-09-09 03:38:48c577d50acfd98d5efb2a466f407bf940n/a104.28.15.61:443
2020-09-08 21:15:344d6be20dc576502f8ca9abc6a03fbe59Virustotal results 45 / 69 (65.22%) 104.28.14.61:443
2020-09-08 19:45:522c7e978c79e85b12b79d689cb56969f3n/a211.239.158.38:443
2020-09-08 19:45:522c7e978c79e85b12b79d689cb56969f3n/a211.239.158.60:443
2020-09-08 19:45:522c7e978c79e85b12b79d689cb56969f3n/a211.239.158.61:443
2020-09-08 08:31:29b1786b223383c0fcd3abad0f9e13ae65Virustotal results 47 / 70 (67.14%) 172.67.205.170:443
2020-09-08 08:31:29b1786b223383c0fcd3abad0f9e13ae65Virustotal results 47 / 70 (67.14%) 104.28.15.61:443
2020-09-07 22:48:246a91f2d36188314363f38834d8eb8487n/a104.28.5.155:443
2020-09-07 19:32:37039f744c1f8541f524156944a8963295n/a104.28.15.61:443
2020-09-07 19:32:37039f744c1f8541f524156944a8963295n/a172.67.131.206:443
2020-09-07 17:40:27ab3f50adbde97643cc6b780786165daeVirustotal results 38 / 68 (55.88%) 172.67.205.170:443
2020-09-07 17:40:27ab3f50adbde97643cc6b780786165daeVirustotal results 38 / 68 (55.88%) 104.31.68.84:443
2020-09-07 06:26:39a27508ce514980fae01e838ce376ba00Virustotal results 39 / 66 (59.09%) 172.67.205.170:443
2020-09-07 06:26:39a27508ce514980fae01e838ce376ba00Virustotal results 39 / 66 (59.09%) 104.31.68.84:443
2020-09-06 20:33:225dc2b5b4dcc42f1a7d9de97f342aaefdVirustotal results 38 / 70 (54.29%) 104.28.15.61:443
2020-09-06 20:33:225dc2b5b4dcc42f1a7d9de97f342aaefdVirustotal results 38 / 70 (54.29%) 104.28.14.61:443
2020-09-06 17:38:3613b054dfc9773428312af1b750ccca45n/a172.67.131.206:443
2020-09-06 17:38:3613b054dfc9773428312af1b750ccca45n/a104.28.15.61:443
2020-09-06 16:03:214264f13def92aa861c0ac3b82a508308Virustotal results 0 / 66 (0.00%) 104.26.10.124:443
2020-09-06 15:17:4636f3bb2aeabf8f5ea1c8efc4762a4ef8n/a172.67.131.206:443
2020-09-06 15:17:4636f3bb2aeabf8f5ea1c8efc4762a4ef8n/a104.28.15.61:443
2020-09-06 14:45:082fb0b62c98a09474b34f5ffe0c085476n/a104.28.14.61:443
2020-09-06 14:45:082fb0b62c98a09474b34f5ffe0c085476n/a172.67.131.206:443
2020-09-02 21:09:31397cd413db910fecfe662d4c1e210dc9n/a172.67.131.179:443
2020-09-02 16:20:21b7f734eb4fc651438db81f185cd7e1eeVirustotal results 28 / 67 (41.79%) 104.31.69.84:443
2020-09-02 16:20:21b7f734eb4fc651438db81f185cd7e1eeVirustotal results 28 / 67 (41.79%) 104.31.68.84:443
2020-09-02 00:59:579956fce3550b02955b181c7538b394dcVirustotal results 44 / 67 (65.67%) 172.67.131.206:443
2020-09-02 00:59:579956fce3550b02955b181c7538b394dcVirustotal results 44 / 67 (65.67%) 104.28.14.61:443
2020-09-01 22:11:223bf118f650e2fce6c03c8d2bd0768610Virustotal results 36 / 69 (52.17%) 104.28.14.61:443
2020-09-01 22:11:223bf118f650e2fce6c03c8d2bd0768610Virustotal results 36 / 69 (52.17%) 104.28.15.61:443
2020-09-01 20:48:591ae8ed38b59f3455535264459b03f45cn/a104.28.15.61:443
2020-09-01 20:48:591ae8ed38b59f3455535264459b03f45cn/a104.28.14.61:443
2020-09-01 20:41:20160149d6a4844f59a737c30fa83fead4n/a104.28.14.61:443
2020-09-01 13:04:00b319e11aff9cdc2678e0fdb1761db742Virustotal results 43 / 67 (64.18%) 172.67.131.206:443

# of entries: 100 (max: 100)