SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 06fc7ff6358bb69aa295165ad78f22f9c5700aa0.

Database Entry


SHA1 Fingerprint:06fc7ff6358bb69aa295165ad78f22f9c5700aa0
Certificate Common Name (CN):mslfiedjssfdes.com
Issuer Distinguished Name (DN):mslfiedjssfdes.com
TLS Version:TLS 1.2
First seen:2020-03-07 19:01:38 UTC
Last seen:2020-07-10 08:54:52 UTC
Status:Blacklisted
Listing reason:ZLoader C&C
Listing date:2020-03-25 06:44:13
Malware samples:18
Botnet C&Cs:7

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2020-07-10 08:54:52f0c84a8e443f7a56841ff5cbfa3119fdn/aZLoader 5.101.51.133:443
2020-07-10 08:54:52f0c84a8e443f7a56841ff5cbfa3119fdn/aZLoader 5.101.51.133:443
2020-07-10 05:43:25d59ef8890f0bff5fff3b701a87a353fen/aZLoader 5.101.51.133:443
2020-07-10 05:43:25d59ef8890f0bff5fff3b701a87a353fen/aZLoader 5.101.51.133:443
2020-07-09 16:53:5230af8966675e1b9437c71f010aaea8c1n/aZLoader 84.38.183.161:443
2020-07-09 16:53:5230af8966675e1b9437c71f010aaea8c1n/aZLoader 84.38.183.161:443
2020-07-04 10:28:35849b981f9612290fd8f7c9e9be366c6eVirustotal results 41 / 72 (56.94%) ZLoader 80.249.146.15:443
2020-07-04 10:28:35849b981f9612290fd8f7c9e9be366c6eVirustotal results 41 / 72 (56.94%) ZLoader 80.249.146.15:443
2020-07-03 16:23:44dd2691da6163a52905e4a1277ac18238n/aZLoader 80.249.146.15:443
2020-07-03 16:23:44dd2691da6163a52905e4a1277ac18238n/aZLoader 80.249.146.15:443
2020-07-03 08:25:57bd9fe53da261d180fd1971ef0ad85050n/aZLoader 80.249.146.15:443
2020-07-03 08:25:57bd9fe53da261d180fd1971ef0ad85050n/aZLoader 80.249.146.15:443
2020-07-02 16:59:27169bc6d4be5b162529a723c3e2f45680Virustotal results 35 / 73 (47.95%) ZLoader 80.249.146.15:443
2020-07-02 16:59:27169bc6d4be5b162529a723c3e2f45680Virustotal results 35 / 73 (47.95%) ZLoader 80.249.146.15:443
2020-06-30 19:24:2823fb42ba1d6fd62a970dab9cbcfc1d7en/aZLoader 80.249.145.100:443
2020-06-30 19:24:2823fb42ba1d6fd62a970dab9cbcfc1d7en/aZLoader 80.249.145.100:443
2020-06-30 11:34:56c0a5046e32a760e2f4438a2bede2da51Virustotal results 41 / 72 (56.94%) ZLoader 80.249.145.100:443
2020-06-30 11:34:56c0a5046e32a760e2f4438a2bede2da51Virustotal results 41 / 72 (56.94%) ZLoader 80.249.145.100:443
2020-06-29 20:20:095df40d8b4851357b62aabcc396af748bn/aZLoader 80.249.145.100:443
2020-06-29 20:20:095df40d8b4851357b62aabcc396af748bn/aZLoader 80.249.145.100:443
2020-06-29 19:16:39378487a421a1d90d22c811c61a0a1866n/aZLoader 80.249.145.100:443
2020-06-29 19:16:39378487a421a1d90d22c811c61a0a1866n/aZLoader 80.249.145.100:443
2020-06-29 18:32:1808afe21c75e4ff3f62c967686819e64an/aZLoader 80.249.145.100:443
2020-06-29 18:32:1808afe21c75e4ff3f62c967686819e64an/aZLoader 80.249.145.100:443
2020-06-29 18:28:43097fdc9ce4e4a0c89824a4639fc83e1cn/aZLoader 80.249.145.100:443
2020-06-29 18:28:43097fdc9ce4e4a0c89824a4639fc83e1cn/aZLoader 80.249.145.100:443
2020-06-28 19:59:1597be399a6b017220b00824fd917ca956Virustotal results 42 / 73 (57.53%) ZLoader 80.249.145.100:443
2020-06-28 19:59:1597be399a6b017220b00824fd917ca956Virustotal results 42 / 73 (57.53%) ZLoader 80.249.145.100:443
2020-06-28 19:33:468bc73c52dc96b166cff9baf99fb80a41n/aZLoader 80.249.145.100:443
2020-06-28 19:33:468bc73c52dc96b166cff9baf99fb80a41n/aZLoader 80.249.145.100:443
2020-04-01 20:12:068adbd19b2b3f164d6a381739f7cf0069Virustotal results 36 / 71 (50.70%) ZLoader 119.28.159.130:443
2020-04-01 20:12:068adbd19b2b3f164d6a381739f7cf0069Virustotal results 36 / 71 (50.70%) ZLoader 119.28.159.130:443
2020-03-24 21:22:10cd27818725aeaf08588d5409ffa7249bVirustotal results 30 / 72 (41.67%) ZLoader 47.74.63.135:443
2020-03-24 21:22:10cd27818725aeaf08588d5409ffa7249bVirustotal results 30 / 72 (41.67%) ZLoader 47.74.63.135:443
2020-03-07 19:01:381b5dec27ac7cda89d8061529fed08a4cVirustotal results 27 / 73 (36.99%) Quakbot47.252.2.199:443
2020-03-07 19:01:381b5dec27ac7cda89d8061529fed08a4cVirustotal results 27 / 73 (36.99%) Quakbot47.252.2.199:443

# of entries: 36 (max: 100)