SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0e44c7aaadd1186c17f4f1364e3722c172a7ce2e.

Database Entry


SHA1 Fingerprint:0e44c7aaadd1186c17f4f1364e3722c172a7ce2e
Certificate Common Name (CN):docknetworks.com
Issuer Distinguished Name (DN):COMODO RSA Domain Validation Secure Server CA
TLS Version:TLS 1.2
First seen:2016-01-29 12:36:09 UTC
Last seen:2016-03-13 09:56:45 UTC
Status:Blacklisted
Listing reason:Quakbot C&C
Listing date:2016-01-29 12:53:35
Malware samples:7
Botnet C&Cs:7

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-03-13 09:56:451a90c56abd829483d6806ea4f972027cVirustotal results 29/57 (50.88%) Quakbot188.0.85.176:443
2016-03-13 00:37:2756e7e81248afd055c4a4857371aaf738n/aQuakbot98.116.11.226:443
2016-02-23 14:25:5656dc5acd163f9ba53e5acf00e8c107e9n/aQuakbot193.111.188.230:443
2016-02-23 09:18:42e842bbbf76565843fd553ae73178642bn/aQuakbot178.137.80.252:443
2016-02-04 00:57:359cf65f4b8724de6808331f6a6c429fedVirustotal results 21/53 (39.62%) Redyms93.78.217.148:443
2016-01-30 03:16:01a365fd2d4dd651ee93320f799c2ca161Virustotal results 22/54 (40.74%) Redyms195.72.158.150:443
2016-01-29 12:36:09e515673f3289dd68ddc216aa6f45be5en/aQuakbot46.63.1.192:443

# of entries: 7 (max: 100)