SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0b2b84873f7064d63e527414454f627dc8881006.

Database Entry


SHA1 Fingerprint:0b2b84873f7064d63e527414454f627dc8881006
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-06-14 17:52:58 UTC
Last seen:2014-06-22 13:28:57 UTC
Status:Blacklisted
Listing reason:KINS C&C
Listing date:2014-06-15 08:04:38
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-06-22 13:28:57bff9e583e1ea997ba5265520f1accd79Virustotal results 33/52 (63.46%) ZeuS 54.81.100.98:443
2014-06-22 13:28:57bff9e583e1ea997ba5265520f1accd79Virustotal results 33/52 (63.46%) ZeuS 54.81.100.98:443
2014-06-16 23:19:25f074c0f51bc7c89ce94570b857b70101Virustotal results 25/52 (48.08%) ZeuS 54.81.100.98:443
2014-06-16 23:19:25f074c0f51bc7c89ce94570b857b70101Virustotal results 25/52 (48.08%) ZeuS 54.81.100.98:443
2014-06-14 17:52:58a3242376e761767f6c7ba767df007ebaVirustotal results 27/53 (50.94%) ZeuS 54.81.100.98:443
2014-06-14 17:52:58a3242376e761767f6c7ba767df007ebaVirustotal results 27/53 (50.94%) ZeuS 54.81.100.98:443

# of entries: 6 (max: 100)