SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0df1b6e7514fb4e728144d9b2abf684238b1000b.
Database Entry
| SHA1 Fingerprint: | 0df1b6e7514fb4e728144d9b2abf684238b1000b |
|---|---|
| Certificate Common Name (CN): | unfrocked.info |
| Issuer Distinguished Name (DN): | unfrocked.info |
| TLS Version: | TLS 1.2 |
| First seen: | 2019-06-07 07:29:19 UTC |
| Last seen: | 2019-08-24 15:52:51 UTC |
| Status: | Blacklisted |
| Listing reason: | IcedID C&C |
| Listing date: | 2019-06-15 08:37:02 |
| Malware samples: | 42 |
| Botnet C&Cs: | 8 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2019-08-24 15:52:51 | a897f02dd93bedc1b9435e690d02f5c3 |  15/67 (22.39%)
| 91.230.61.196:443 | |
| 2019-08-24 15:52:51 | a897f02dd93bedc1b9435e690d02f5c3 | 15/67 (22.39%)
| 91.230.61.196:443 | |
| 2019-08-11 10:06:23 | f97401642be500edf07d75ea3aacfc7a | 47 / 66 (71.21%)
| IcedID | 5.39.218.206:443 |
| 2019-08-11 10:06:23 | f97401642be500edf07d75ea3aacfc7a | 47 / 66 (71.21%)
| IcedID | 5.39.218.206:443 |
| 2019-08-01 02:39:30 | a01b761c755f9b25f009e691970be865 | 34 / 72 (47.22%)
| IcedID | 91.148.141.76:443 |
| 2019-08-01 02:39:30 | a01b761c755f9b25f009e691970be865 | 34 / 72 (47.22%)
| IcedID | 91.148.141.76:443 |
| 2019-07-31 02:04:15 | a719589193cec00ccf03573ab30c4bef | 37 / 68 (54.41%)
| IcedID | 91.148.141.76:443 |
| 2019-07-31 02:04:15 | a719589193cec00ccf03573ab30c4bef | 37 / 68 (54.41%)
| IcedID | 91.148.141.76:443 |
| 2019-07-26 09:13:19 | 325415c8045bff84cabc3104c8793b1d | 48/70 (68.57%)
| IcedID | 91.148.141.76:443 |
| 2019-07-26 09:13:19 | 325415c8045bff84cabc3104c8793b1d | 48/70 (68.57%)
| IcedID | 91.148.141.76:443 |
| 2019-07-24 15:12:45 | aec94d34266e37039b795f5f647dd8bd | 41/71 (57.75%)
| IcedID | 91.148.141.76:443 |
| 2019-07-24 15:12:45 | aec94d34266e37039b795f5f647dd8bd | 41/71 (57.75%)
| IcedID | 91.148.141.76:443 |
| 2019-07-23 22:48:53 | 1f2dd8522fddbbad9e3bf0a2dc7ac865 | 17/70 (24.29%)
| IcedID | 91.148.141.76:443 |
| 2019-07-23 22:48:53 | 1f2dd8522fddbbad9e3bf0a2dc7ac865 | 17/70 (24.29%)
| IcedID | 91.148.141.76:443 |
| 2019-06-28 02:34:51 | c8e01b42092c1033de1ff4860f959a16 | 22/72 (30.56%)
| IcedID | 141.255.166.157:443 |
| 2019-06-28 02:34:51 | c8e01b42092c1033de1ff4860f959a16 | 22/72 (30.56%)
| IcedID | 141.255.166.157:443 |
| 2019-06-28 00:15:01 | a9f6f71531ac70004c4b855f5ac2d934 | 40/72 (55.56%)
| IcedID | 141.255.166.157:443 |
| 2019-06-28 00:15:01 | a9f6f71531ac70004c4b855f5ac2d934 | 40/72 (55.56%)
| IcedID | 141.255.166.157:443 |
| 2019-06-27 23:58:17 | 8b341a95b63bac403a6f8e7936357526 | 39/72 (54.17%)
| IcedID | 141.255.166.157:443 |
| 2019-06-27 23:58:17 | 8b341a95b63bac403a6f8e7936357526 | 39/72 (54.17%)
| IcedID | 141.255.166.157:443 |
| 2019-06-24 13:54:53 | 82f777fc93dfecb8aaad875b35b9af72 | 31/73 (42.47%)
| IcedID | 46.17.44.67:443 |
| 2019-06-24 13:54:53 | 82f777fc93dfecb8aaad875b35b9af72 | 31/73 (42.47%)
| IcedID | 46.17.44.67:443 |
| 2019-06-24 13:00:03 | 2e631b5fc439e5c01d3c4099c000fd1d | 28/71 (39.44%)
| IcedID | 46.17.44.67:443 |
| 2019-06-24 13:00:03 | 2e631b5fc439e5c01d3c4099c000fd1d | 28/71 (39.44%)
| IcedID | 46.17.44.67:443 |
| 2019-06-24 11:08:17 | 03941a13a80051c11bf10fb82d35bc1c | 30/70 (42.86%)
| IcedID | 46.17.44.67:443 |
| 2019-06-24 11:08:17 | 03941a13a80051c11bf10fb82d35bc1c | 30/70 (42.86%)
| IcedID | 46.17.44.67:443 |
| 2019-06-21 18:38:23 | a606664e73830860a26beab27c58a913 | 22/69 (31.88%)
| IcedID | 94.130.156.219:443 |
| 2019-06-21 18:38:23 | a606664e73830860a26beab27c58a913 | 22/69 (31.88%)
| IcedID | 94.130.156.219:443 |
| 2019-06-21 16:31:23 | c446419c29ec4608866d60c046aa9ff1 | 20/72 (27.78%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 16:31:23 | c446419c29ec4608866d60c046aa9ff1 | 20/72 (27.78%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 16:31:23 | c446419c29ec4608866d60c046aa9ff1 | 20/72 (27.78%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 16:31:23 | c446419c29ec4608866d60c046aa9ff1 | 20/72 (27.78%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 07:29:54 | 20686a6e0965f8560781315d41bc71ea | 36/69 (52.17%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 07:29:54 | 20686a6e0965f8560781315d41bc71ea | 36/69 (52.17%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 07:29:54 | 20686a6e0965f8560781315d41bc71ea | 36/69 (52.17%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 07:29:54 | 20686a6e0965f8560781315d41bc71ea | 36/69 (52.17%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 04:47:41 | b8d0524db093501174a84dc52b3a19af | 7/71 (9.86%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 04:47:41 | b8d0524db093501174a84dc52b3a19af | 7/71 (9.86%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 04:47:41 | b8d0524db093501174a84dc52b3a19af | 7/71 (9.86%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-21 04:47:41 | b8d0524db093501174a84dc52b3a19af | 7/71 (9.86%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-20 14:01:48 | ef40a8647ea2fd4c9b0c0c242a6081f1 | 37/71 (52.11%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-20 14:01:48 | ef40a8647ea2fd4c9b0c0c242a6081f1 | 37/71 (52.11%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-20 14:01:48 | ef40a8647ea2fd4c9b0c0c242a6081f1 | 37/71 (52.11%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-20 14:01:48 | ef40a8647ea2fd4c9b0c0c242a6081f1 | 37/71 (52.11%)
| TrickBot | 94.130.156.219:443 |
| 2019-06-18 13:06:46 | f8d65a1b72f73d53c9e254aa12ccc0fc | 38/71 (53.52%)
| IcedID | 62.109.24.227:443 |
| 2019-06-18 13:06:46 | f8d65a1b72f73d53c9e254aa12ccc0fc | 38/71 (53.52%)
| IcedID | 62.109.24.227:443 |
| 2019-06-18 06:12:04 | 1bfcb749af02c84d6e7c455ac9d21ba8 | 51/70 (72.86%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 06:12:04 | 1bfcb749af02c84d6e7c455ac9d21ba8 | 51/70 (72.86%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 04:30:21 | 89e0d86c2830f4d0ac861d620ec62638 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 04:30:21 | 89e0d86c2830f4d0ac861d620ec62638 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 04:21:42 | 3feac8f7f36149eef4e559ffb9d1dcef | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 04:21:42 | 3feac8f7f36149eef4e559ffb9d1dcef | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 02:02:35 | dda7582918d3200aff488c145a209fe5 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-18 02:02:35 | dda7582918d3200aff488c145a209fe5 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 15:02:11 | 58f6f47da54a9a03a9950c61f6d59391 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 15:02:11 | 58f6f47da54a9a03a9950c61f6d59391 | 38/70 (54.29%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 09:33:11 | 82ae9f3fd2d6445fdd56330468fc7e4b | 48/69 (69.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 09:33:11 | 82ae9f3fd2d6445fdd56330468fc7e4b | 48/69 (69.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 08:42:35 | 5f1438cd9139f1aeab147baff9015e8d | 50/70 (71.43%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 08:42:35 | 5f1438cd9139f1aeab147baff9015e8d | 50/70 (71.43%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 04:51:26 | a185b95957ea7a1b616195684fcf3fa3 | 38/71 (53.52%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 04:51:26 | a185b95957ea7a1b616195684fcf3fa3 | 38/71 (53.52%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 03:39:44 | 3a1a399a48dd164d80d7d3e8d921e05b | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 03:39:44 | 3a1a399a48dd164d80d7d3e8d921e05b | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 00:36:32 | 75ed42dece236282f0678583147313e6 | 48/71 (67.61%)
| IcedID | 195.69.187.86:443 |
| 2019-06-17 00:36:32 | 75ed42dece236282f0678583147313e6 | 48/71 (67.61%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 19:51:32 | 77acd61c46780789f31363166482b117 | 50/70 (71.43%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 19:51:32 | 77acd61c46780789f31363166482b117 | 50/70 (71.43%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 13:08:30 | 35c9260ee131b49bd1cce986408a6f89 | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 13:08:30 | 35c9260ee131b49bd1cce986408a6f89 | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 07:00:34 | e66829cf13a8274fe908cac27db2e0bf | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 07:00:34 | e66829cf13a8274fe908cac27db2e0bf | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 02:17:22 | 22a9f599fa8eac6225746161152b01d5 | 48/71 (67.61%)
| IcedID | 195.69.187.86:443 |
| 2019-06-16 02:17:22 | 22a9f599fa8eac6225746161152b01d5 | 48/71 (67.61%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 23:38:38 | ce698372575f3164dd9aa1630e89e5e6 | 48/69 (69.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-15 23:38:38 | ce698372575f3164dd9aa1630e89e5e6 | 48/69 (69.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-15 23:38:38 | ce698372575f3164dd9aa1630e89e5e6 | 48/69 (69.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-15 23:38:38 | ce698372575f3164dd9aa1630e89e5e6 | 48/69 (69.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-15 23:12:20 | d0339ba3e9db99ced1194038c3873ced | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 23:12:20 | d0339ba3e9db99ced1194038c3873ced | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 20:37:17 | cff96e76d6160f8ed8bc3e89f820d645 | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 20:37:17 | cff96e76d6160f8ed8bc3e89f820d645 | 48/70 (68.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 20:19:45 | 655f6535fe3c89de18f6560328c5b76a | 47/70 (67.14%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 20:19:45 | 655f6535fe3c89de18f6560328c5b76a | 47/70 (67.14%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 04:42:40 | 644dfda803760f21a9daaf20ac5e6f0c | 30/70 (42.86%)
| IcedID | 195.69.187.86:443 |
| 2019-06-15 04:42:40 | 644dfda803760f21a9daaf20ac5e6f0c | 30/70 (42.86%)
| IcedID | 195.69.187.86:443 |
| 2019-06-11 02:55:22 | f2942ad8470d9be3dc0aa8d176c454aa | 28/71 (39.44%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-11 02:55:22 | f2942ad8470d9be3dc0aa8d176c454aa | 28/71 (39.44%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-11 02:55:22 | f2942ad8470d9be3dc0aa8d176c454aa | 28/71 (39.44%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-11 02:55:22 | f2942ad8470d9be3dc0aa8d176c454aa | 28/71 (39.44%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-09 22:11:21 | 97f9f8fe8b3f6f333c0253bbf8ad1297 | 20/70 (28.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-09 22:11:21 | 97f9f8fe8b3f6f333c0253bbf8ad1297 | 20/70 (28.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-09 22:11:21 | 97f9f8fe8b3f6f333c0253bbf8ad1297 | 20/70 (28.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-09 22:11:21 | 97f9f8fe8b3f6f333c0253bbf8ad1297 | 20/70 (28.57%)
| TrickBot | 195.69.187.86:443 |
| 2019-06-09 08:49:15 | a20eeeef25185e9affd7618a91e2be43 | 34/69 (49.28%)
| IcedID | 195.69.187.86:443 |
| 2019-06-09 08:49:15 | a20eeeef25185e9affd7618a91e2be43 | 34/69 (49.28%)
| IcedID | 195.69.187.86:443 |
| 2019-06-07 07:29:19 | fe302ea43eae3290b5fa1e877e3b9511 | 41/70 (58.57%)
| IcedID | 195.69.187.86:443 |
| 2019-06-07 07:29:19 | fe302ea43eae3290b5fa1e877e3b9511 | 41/70 (58.57%)
| IcedID | 195.69.187.86:443 |
# of entries: 98 (max: 100)