SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0fa737e6069d650d7014f01ebe679f47b6288a93.

Database Entry


SHA1 Fingerprint:0fa737e6069d650d7014f01ebe679f47b6288a93
Certificate Common Name (CN):amadeamadey.at
Issuer Distinguished Name (DN):amadeamadey.at
TLS Version:TLS 1.2
First seen:2021-07-07 18:26:04 UTC
Last seen:2021-07-09 06:59:58 UTC
Status:Blacklisted
Listing reason:BazaLoader C&C
Listing date:2021-07-07 19:04:14
Malware samples:8
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-07-09 06:59:58f24a918232c43ef92fef5bdbc15acc59Virustotal results 41 / 69 (59.42%) BazaLoader3.223.125.168:443
2021-07-09 05:49:13235865a2592838e3921e20e08ffd4458Virustotal results 40 / 69 (57.97%) BazaLoader3.223.125.168:443
2021-07-08 22:11:55ff85c3d567d55e6d896f187e2de3726cVirustotal results 40 / 69 (57.97%) BazaLoader3.223.125.168:443
2021-07-08 14:53:130da03c46458be16f88b29862fea0b736n/aBazaLoader3.223.125.168:443
2021-07-08 13:59:47eeedf706d0dca685480695975b2a39bfn/aBazaLoader3.223.125.168:443
2021-07-08 13:34:44d9ccbdfbd23873fb8414563aada61818n/aBazaLoader3.223.125.168:443
2021-07-08 11:14:217e18f0ed1ca6f7226efa0275e996056bn/aBazaLoader3.223.125.168:443
2021-07-07 18:26:047484d7f01dc2ddb30a6e3027389d53a6n/aBazaLoader3.223.125.168:443

# of entries: 8 (max: 100)