SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 05262076cf7abbafc3d51763f93a11d0d4a8be76.
Database Entry
| SHA1 Fingerprint: | 05262076cf7abbafc3d51763f93a11d0d4a8be76 |
|---|---|
| Certificate Common Name (CN): | 138.226.237.1 |
| Issuer Distinguished Name (DN): | 138.226.237.1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-01-17 20:52:32 UTC |
| Last seen: | 2026-01-19 20:41:42 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-02-04 09:14:14 |
| Malware samples: | 6 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-01-19 20:41:42 | a7e8405b18a70f3edee0a6771f037ae8 | n/a | 138.226.237.1:443 | |
| 2026-01-19 18:54:23 | 6a1b7ad056e7735d9c0db0c81f13d87a | n/a | 138.226.237.1:443 | |
| 2026-01-18 23:58:32 | 61da08906a7ac5fa0f9eac1cd49f7e8a | n/a | 138.226.237.1:443 | |
| 2026-01-18 21:44:44 | 3e7a6dae119dcd01d1677ed2ee522ec4 | n/a | 138.226.237.1:443 | |
| 2026-01-18 16:10:07 | 98fe919275ec26e002ab7dff6df6884f | n/a | 138.226.237.1:443 | |
| 2026-01-17 20:52:32 | 8e3f303012a278fe5550da2f9ed1ab33 | n/a | 138.226.237.1:443 |
# of entries: 6 (max: 100)