SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0c6d3721e9b4ba3bbac4617b34f0f0ff75f88e72.

Database Entry

SHA1 Fingerprint:	0c6d3721e9b4ba3bbac4617b34f0f0ff75f88e72
Certificate Common Name (CN):	biszweater.pw/emailAddress=webmaster@biszweater.pw
Issuer Distinguished Name (DN):	biszweater.pw/emailAddress=webmaster@biszweater.pw
TLS Version:	TLS 1.2
First seen:	2016-11-19 17:29:58 UTC
Last seen:	2016-11-20 18:13:02 UTC
Status:	Blacklisted
Listing reason:	Tuhkit C&C
Listing date:	2016-11-21 11:09:33
Malware samples:	6
Botnet C&Cs:	1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Signature	Botnet C&C (IP:port)
2016-11-20 18:13:02	2168ffd2ea3c138c524289ef163da01c	n/a	Tuhkit	89.40.127.231:80
2016-11-20 18:13:02	2168ffd2ea3c138c524289ef163da01c	n/a	Tuhkit	89.40.127.231:80
2016-11-20 08:09:03	4fb7b7f3f382b7e82edb4fbe704d217a	n/a	Tuhkit	89.40.127.231:80
2016-11-20 08:09:03	4fb7b7f3f382b7e82edb4fbe704d217a	n/a	Tuhkit	89.40.127.231:80
2016-11-20 04:47:54	ac5c01797c3aabef08c28cc23cde3eef	21/57 (36.84%)	Tuhkit	89.40.127.231:80
2016-11-20 04:47:54	ac5c01797c3aabef08c28cc23cde3eef	21/57 (36.84%)	Tuhkit	89.40.127.231:80
2016-11-20 03:06:24	499a9c1c80fa907893d4e5cbbbf7681c	n/a	Tuhkit	89.40.127.231:80
2016-11-20 03:06:24	499a9c1c80fa907893d4e5cbbbf7681c	n/a	Tuhkit	89.40.127.231:80
2016-11-20 01:57:55	982b2eaa8d2b451872fac289d0c572ad	n/a	Tuhkit	89.40.127.231:80
2016-11-20 01:57:55	982b2eaa8d2b451872fac289d0c572ad	n/a	Tuhkit	89.40.127.231:80
2016-11-19 17:29:58	e166840d0e7a795708fca544b83e1236	20/57 (35.09%)	Tuhkit	89.40.127.231:80
2016-11-19 17:29:58	e166840d0e7a795708fca544b83e1236	20/57 (35.09%)	Tuhkit	89.40.127.231:80

# of entries: 12 (max: 100)