SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 05ba9d18bc4c00bec6bb5ed461fd889259929709.

Database Entry


SHA1 Fingerprint:05ba9d18bc4c00bec6bb5ed461fd889259929709
Certificate Common Name (CN):65.21.58.227
Issuer Distinguished Name (DN):65.21.58.227
TLS Version:TLS 1.2
First seen:2026-07-31 17:49:19 UTC
Last seen:2026-08-02 14:07:25 UTC
Status:Blacklisted
Listing reason:Vidar C&C
Listing date:2026-08-02 14:35:50
Malware samples:5
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-08-02 14:07:2556f6078765d8c5a08c68a83d0dcf5828n/a116.202.186.230:443
2026-08-02 03:34:5630095516f5bdc433be58723cc9721667n/a116.202.186.230:443
2026-08-02 03:26:5291912c07e3b6893dc8113e77b0923309n/a116.202.186.230:443
2026-07-31 23:52:46b16cdda90aba0ed1c17b4e4ea2c2fa93n/a116.202.186.230:443
2026-07-31 17:49:193e784773cb620de344893da57b4a79f2n/a116.202.186.230:443

# of entries: 5 (max: 100)