SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 0fffd3c4d67d0477013f86eb09641271fbbad2c8.

Database Entry


SHA1 Fingerprint:0fffd3c4d67d0477013f86eb09641271fbbad2c8
Certificate Common Name (CN):138.226.236.182
Issuer Distinguished Name (DN):138.226.236.182
TLS Version:TLS 1.2
First seen:2026-01-17 03:16:59 UTC
Last seen:2026-01-18 16:07:25 UTC
Status:Blacklisted
Listing reason:Vidar C&C
Listing date:2026-01-30 09:30:36
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-01-18 16:07:2513ede6cc02091cfe0c3d3c085e54bc69n/a138.226.236.182:443
2026-01-17 18:17:07c425d922b6dcccbd5d9149b7d9aa7060n/a138.226.236.182:443
2026-01-17 03:16:59171105c8f544ffd505daa15d0d5fbb6cn/a138.226.236.182:443

# of entries: 3 (max: 100)