SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0f47d296ca2a764238bfd644c7b716cffafa1352.
Database Entry
| SHA1 Fingerprint: | 0f47d296ca2a764238bfd644c7b716cffafa1352 |
|---|---|
| Certificate Common Name (CN): | 11gokil.org |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-08-20 10:39:37 UTC |
| Last seen: | 2026-08-21 04:39:40 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-08-21 07:27:19 |
| Malware samples: | 23 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-08-21 04:39:40 | d652a1d552b690afccf8b6b623553f85 | n/a | 104.21.43.112:443 | |
| 2026-08-21 01:54:30 | 29a989a4d415cc9e794a7ebd1523fadb | n/a | 104.21.43.112:443 | |
| 2026-08-21 01:49:03 | 2a13ddd89f55032b96aed21df30908c4 | n/a | 104.21.43.112:443 | |
| 2026-08-21 01:09:26 | 272f061b8ecf262c7eaa7b7b419885ee | n/a | 104.21.43.112:443 | |
| 2026-08-21 01:07:56 | 273a05d6e6f012e21fbb7ae04d81c234 | n/a | 172.67.178.139:443 | |
| 2026-08-21 00:56:00 | 260a057ffdb6a187b757eff3546a1a21 | n/a | 104.21.43.112:443 | |
| 2026-08-21 00:32:40 | 2426076a3cc60f1c3bcdb4f4c94e5ebb | n/a | 172.67.178.139:443 | |
| 2026-08-20 23:20:36 | 1f64505173a7ebf27ec53c058ce10a52 | n/a | 172.67.178.139:443 | |
| 2026-08-20 22:30:12 | 1ab75b026279b932d4741689097df35a | n/a | 104.21.43.112:443 | |
| 2026-08-20 21:25:18 | 166e126a9f191837d82298d71f067e73 | n/a | 172.67.178.139:443 | |
| 2026-08-20 21:20:07 | edc8338feddcdc93e69c966d26a8e94e | n/a | 104.21.43.112:443 | |
| 2026-08-20 20:52:15 | 13eff89cf1d56be86cb315a6c30a3f6e | n/a | 104.21.43.112:443 | |
| 2026-08-20 20:16:19 | ae562ddc495a05b75fe617e4feec91bf | n/a | 172.67.178.139:443 | |
| 2026-08-20 19:48:18 | 072866738907ad278b328385093a9112 | n/a | 172.67.178.139:443 | |
| 2026-08-20 19:38:55 | 2d5e486b948451d889f610190262e46e | n/a | 104.21.43.112:443 | |
| 2026-08-20 19:05:25 | 0a8763e5e37e17db9e5b29008fca3c11 | n/a | 104.21.43.112:443 | |
| 2026-08-20 18:32:32 | 42827d49f61840a633db9ad71c192777 | n/a | 172.67.178.139:443 | |
| 2026-08-20 17:58:57 | 36bacf205d33d706d8fe7028fe57b5cc | n/a | 172.67.178.139:443 | |
| 2026-08-20 17:57:30 | d317596433f7bce41c4596823298acc2 | n/a | 104.21.43.112:443 | |
| 2026-08-20 17:57:15 | c78e75ccb87dadaedfee6044aa001d4e | n/a | 172.67.178.139:443 | |
| 2026-08-20 17:34:28 | b302baa68f41cfcfed30eaff14569b5e | n/a | 172.67.178.139:443 | |
| 2026-08-20 16:21:28 | 2b07c4bb3c43f7bb6630141e6f25f403 | n/a | 104.21.43.112:443 | |
| 2026-08-20 10:39:37 | 7728bcf0f162fd2ca9d941caf274547c | n/a | 104.21.43.112:443 |
# of entries: 23 (max: 100)