SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 09b12ada43368507714bbb8948f63b2ad9f70b69.
Database Entry
| SHA1 Fingerprint: | 09b12ada43368507714bbb8948f63b2ad9f70b69 |
|---|---|
| Certificate Common Name (CN): | topstart.site |
| Issuer Distinguished Name (DN): | R3 |
| TLS Version: | TLS 1.2 |
| First seen: | 2021-10-17 11:05:21 UTC |
| Last seen: | 2021-10-19 06:03:00 UTC |
| Status: | Blacklisted |
| Listing reason: | RedLineStealer C&C |
| Listing date: | 2021-10-19 06:04:08 |
| Malware samples: | 3 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-10-19 06:03:00 | 3e545d11c01dcd525008387a6556d154 |  34 / 67 (50.75%)
| RedLineStealer | 45.130.41.15:443 |
| 2021-10-17 11:14:50 | 67c974fb4dfbb10dfe7d2a35662649eb | n/a | Smoke Loader | 45.130.41.15:443 |
| 2021-10-17 11:05:21 | ca08876db58056ad35cadc2afeb89ab7 | 24 / 67 (35.82%)
| DiamondFox | 45.130.41.15:443 |
# of entries: 3 (max: 100)