SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0d4348c0a5f3825a1350f8ef86e0e85e91a18d91.

Database Entry


SHA1 Fingerprint:0d4348c0a5f3825a1350f8ef86e0e85e91a18d91
Certificate Common Name (CN):gmail.com
Issuer Distinguished Name (DN):gmail.com
TLS Version:TLS 1.2' NOTBEF
First seen:2021-04-18 20:22:23 UTC
Last seen:2021-06-26 19:02:35 UTC
Status:Blacklisted
Listing reason:CobaltStrike C&C
Listing date:2021-06-27 15:38:11
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-06-26 19:02:35d1dd5ffa647734fdcf784dfbc9ffc90dVirustotal results 32 / 69 (46.38%) CobaltStrike185.201.47.155:443
2021-06-26 19:02:35d1dd5ffa647734fdcf784dfbc9ffc90dVirustotal results 32 / 69 (46.38%) CobaltStrike185.201.47.155:443
2021-04-18 20:22:236be28db923a64a7edca6e391128db24aVirustotal results 15 / 68 (22.06%) CobaltStrike185.201.47.155:443
2021-04-18 20:22:236be28db923a64a7edca6e391128db24aVirustotal results 15 / 68 (22.06%) CobaltStrike185.201.47.155:443

# of entries: 4 (max: 100)