SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1106c395fd9f9281632b712bb34effdcb9016378.

Database Entry


SHA1 Fingerprint:1106c395fd9f9281632b712bb34effdcb9016378
Certificate Common Name (CN):cortisone.org
Issuer Distinguished Name (DN):cortisone.org
TLS Version:TLS 1.2
First seen:2019-01-28 12:01:31 UTC
Last seen:2019-02-09 08:48:09 UTC
Status:Blacklisted
Listing reason:IcedID C&C
Listing date:2019-02-04 15:24:55
Malware samples:98
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-02-09 08:48:09d798a67fe34de9b387ea04bb6913c7c9n/aIcedID 95.47.161.68:443
2019-02-09 08:43:073e7653f1cf05f1f0e2bad6289cb141ben/aIcedID 95.47.161.68:443
2019-02-09 08:23:384a8c50f9ff3f9e0b42c503e2d956c80fVirustotal results 44/69 (63.77%) IcedID 95.47.161.68:443
2019-02-09 06:35:361580faa4d416f3e9e8ed884917840d67n/aIcedID 95.47.161.68:443
2019-02-09 06:34:20735e706286971cd48c0a65d696e92960n/aIcedID 95.47.161.68:443
2019-02-09 06:29:267d3be5428c99d4448139266c1a469858n/aIcedID 95.47.161.68:443
2019-02-09 06:26:269691a709e0972a45f1cff165e1a0cf16Virustotal results 13/69 (18.84%) IcedID 95.47.161.68:443
2019-02-09 06:26:0097a581a825107d51bc71ef513f01a8c1n/aIcedID 95.47.161.68:443
2019-02-09 06:21:42d6e54449870752dc11f16a00d2a70d02n/aIcedID 95.47.161.68:443
2019-02-09 06:09:052c617de7ca5c5be9b108c94c96d19ccdn/aIcedID 95.47.161.68:443
2019-02-09 01:46:43cf11d40899286b9d423a6108baa07fd3Virustotal results 28/71 (39.44%) IcedID 95.47.161.68:443
2019-02-09 01:44:31639b146fef4a7a18bc6b0db6b1272884Virustotal results 24/70 (34.29%) IcedID 95.47.161.68:443
2019-02-09 00:04:55be262273fa729c1e2679b52b31d3b8beVirustotal results 33/70 (47.14%) IcedID 95.47.161.68:443
2019-02-08 17:19:0300b9826690ae56d5772311053a2e20ddn/aHeodo95.47.161.68:443
2019-02-08 15:28:3404493412797ab00b41c607fd3122e0c5Virustotal results 33/68 (48.53%) IcedID 95.47.161.68:443
2019-02-08 14:44:09ed4ac077f66e3e1be2579c84c9a50d3fVirustotal results 20/71 (28.17%) IcedID 95.47.161.68:443
2019-02-08 10:44:43c5b94fa895e3913cd1a257d0a367c461Virustotal results 46/71 (64.79%) IcedID 95.47.161.68:443
2019-02-08 08:56:014002b5cb0a7c3f4b23118969969e1b0cVirustotal results 15/70 (21.43%) IcedID 95.47.161.68:443
2019-02-08 08:51:49ec3fc9750d768e19c8e89a255f3f82c4Virustotal results 18/70 (25.71%) IcedID 95.47.161.68:443
2019-02-08 08:24:447f4be7d2be0f6b048c1a00976abe8f70Virustotal results 15/70 (21.43%) IcedID 95.47.161.68:443
2019-02-08 08:12:17ed72851efb2418a613e4c9f9620e56f2Virustotal results 19/70 (27.14%) IcedID 95.47.161.68:443
2019-02-08 07:42:42f6245fb7a6fa953b2fe5b9ae597389bbVirustotal results 25/71 (35.21%) IcedID 95.47.161.68:443
2019-02-08 07:32:3775e670a7f5fb3ac38a1c397550d6ee77Virustotal results 20/70 (28.57%) IcedID 95.47.161.68:443
2019-02-08 07:19:00ac7b6b82c2d0686e2bb3db75946ca687Virustotal results 45/69 (65.22%) IcedID 95.47.161.68:443
2019-02-08 07:01:01f133bd9939a8a61c7b6af9f71482ef15Virustotal results 18/69 (26.09%) IcedID 95.47.161.68:443
2019-02-08 06:38:4043ab414abec3a315e4ab66a438c1ac8fn/aIcedID 95.47.161.68:443
2019-02-08 06:32:04f469566406eba198cdc6faa69513f2f3n/aIcedID 95.47.161.68:443
2019-02-08 06:19:10ab35aec90c4c1b24acb20b795895e09dVirustotal results 27/69 (39.13%) IcedID 95.47.161.68:443
2019-02-08 06:18:56390b9c9076f2ef372e3655c080080587Virustotal results 33/71 (46.48%) IcedID 95.47.161.68:443
2019-02-08 02:29:51d9cd7ed00add9ca47e25fc73c48ce6d7n/aIcedID 95.47.161.68:443
2019-02-07 23:39:44c45433aff6a8afb12ede466c1a327f73Virustotal results 25/70 (35.71%) IcedID 95.47.161.68:443
2019-02-07 23:16:38a7add48af4db18009773b0f5e6bfc0cfVirustotal results 42/70 (60.00%) IcedID 95.47.161.68:443
2019-02-07 21:45:16a72e764514d3c2a05af3862434d86b4dn/aIcedID 95.47.161.68:443
2019-02-07 20:05:5958f8971a75e27414c222cfaec0cf691cn/aIcedID 95.47.161.68:443
2019-02-07 18:08:119d4b3127da5c887a1755a07321955106Virustotal results 20/70 (28.57%) IcedID 95.47.161.68:443
2019-02-07 17:33:0029dbfb2538b39cf895dd3ce1c160a9a8Virustotal results 19/69 (27.54%) IcedID 95.47.161.68:443
2019-02-07 14:44:4771fc2eacd18fdb943a52e73fd4be9cc2Virustotal results 32/71 (45.07%) IcedID 95.47.161.68:443
2019-02-07 14:28:4595796d3e756a0484e6174d29e7b5f728Virustotal results 14/71 (19.72%) IcedID 95.47.161.68:443
2019-02-07 14:21:4452a9cb7693dc625fadd930d160417b65Virustotal results 16/70 (22.86%) IcedID 95.47.161.68:443
2019-02-07 13:20:2588eb54729f6fc366e21e8ed7f5e1fd13Virustotal results 12/69 (17.39%) IcedID 95.47.161.68:443
2019-02-07 11:56:548f8836caf34d693d789f6b580fa3f7b7Virustotal results 31/69 (44.93%) IcedID 95.47.161.68:443
2019-02-07 10:56:47f0e178d0e31acdacff1c99de4531457eVirustotal results 13/70 (18.57%) IcedID 95.47.161.68:443
2019-02-07 10:52:361eb223527485d92edd63b83dec0eea3bVirustotal results 14/68 (20.59%) IcedID 95.47.161.68:443
2019-02-07 10:45:3413d12146ff0f100797202d8f7b97ac64Virustotal results 38/69 (55.07%) IcedID 95.47.161.68:443
2019-02-07 09:59:577504d93c66e036a94d25a17d20883f56Virustotal results 19/71 (26.76%) IcedID 95.47.161.68:443
2019-02-07 09:45:52759835c4be1fa98aed025779c0ead409Virustotal results 17/70 (24.29%) IcedID 95.47.161.68:443
2019-02-07 08:43:141886b62d536e717dc1897a6e6602e2fdn/aIcedID 95.47.161.68:443
2019-02-07 08:24:575ecf4dd7ece49a7c0222001e9fe3be32Virustotal results 33/69 (47.83%) IcedID 95.47.161.68:443
2019-02-07 06:21:43926a15341bdce4671de24f0792de0ad7Virustotal results 15/69 (21.74%) IcedID 95.47.161.68:443
2019-02-07 04:51:5552cd99321cf2a8c72e30d3e309620108Virustotal results 31/71 (43.66%) IcedID 95.47.161.68:443
2019-02-07 03:43:45fa6979bcd9cf04aa5a41ba33a6ac2dcdVirustotal results 13/69 (18.84%) IcedID 95.47.161.68:443
2019-02-07 01:38:466e2ff3f73d52c0e7f4b36828039f688aVirustotal results 24/70 (34.29%) 95.47.161.68:443
2019-02-06 23:22:033e7e9d1b3c616437bd1077548f477017Virustotal results 29/69 (42.03%) IcedID 95.47.161.68:443
2019-02-06 21:43:33f968ba1dc0b5fbbbf4ef9fb94e2ade47Virustotal results 13/70 (18.57%) IcedID 95.47.161.68:443
2019-02-06 20:55:1885be769f6c8c78b6da410b95ab2d0234Virustotal results 23/70 (32.86%) 95.47.161.68:443
2019-02-06 19:44:47d8ebfced6bac1d2895c059628a4acbffVirustotal results 13/70 (18.57%) IcedID 95.47.161.68:443
2019-02-06 18:23:01a5f0e05734c58f9182e83aebf66a7e44Virustotal results 29/69 (42.03%) IcedID 95.47.161.68:443
2019-02-06 17:29:28a96665392fb091335813d0dbf178cb6cVirustotal results 9/68 (13.24%) IcedID 95.47.161.68:443
2019-02-06 12:40:526885eac5a6ff6d7c1fb4cdc2e9afff89Virustotal results 11/70 (15.71%) IcedID 95.47.161.68:443
2019-02-06 10:00:1103da7e570bd1a2b5ba01845e9d934df7Virustotal results 4/71 (5.63%) IcedID 95.47.161.68:443
2019-02-06 09:01:052a9a832b859da1b270ab3e480fd5554eVirustotal results 16/71 (22.54%) IcedID 95.47.161.68:443
2019-02-06 05:04:34ac15ae783f6029b0adc27a9546c15843Virustotal results 22/70 (31.43%) 95.47.161.68:443
2019-02-06 01:47:38af4cd874361940cbfcf19898ea198971Virustotal results 26/70 (37.14%) IcedID 95.47.161.68:443
2019-02-05 22:23:51fd8ee6840a6ce51991dd50b03fb1383dVirustotal results 30/71 (42.25%) 95.47.161.68:443
2019-02-05 22:23:131588aeb92109a9bcb813ba3b7c7b1c47Virustotal results 30/71 (42.25%) IcedID 95.47.161.68:443
2019-02-05 21:54:26b418dfb8dca9839184128652b0878322n/aIcedID 95.47.161.68:443
2019-02-05 21:50:29b7d60f042ed35447bf4b53a24ce79379n/aIcedID 95.47.161.68:443
2019-02-05 21:49:53b82a176a08b4773ae942c3941d54f46cn/aIcedID 95.47.161.68:443
2019-02-05 19:48:06d3461508c1bbdced56dda9f491d39e80Virustotal results 31/70 (44.29%) 95.47.161.68:443
2019-02-05 19:14:4741c84ca364a93974c6d1808c67bebad3Virustotal results 13/68 (19.12%) IcedID 95.47.161.68:443
2019-02-05 18:00:0615ecf8da3831899f3c0b086f29f18029n/aIcedID 95.47.161.68:443
2019-02-04 14:32:53494c47130a1e964dc5f1d9e16436303dVirustotal results 45/70 (64.29%) IcedID 95.47.161.68:443
2019-02-04 14:06:55194a3d1e2785839d00edc9263d60cf78Virustotal results 44/69 (63.77%) IcedID 95.47.161.68:443
2019-02-04 14:06:4978ad48c241364f3e78a6d3494dec6e81Virustotal results 10/58 (17.24%) IcedID 95.47.161.68:443
2019-02-04 13:48:35cada41d08a49bc0b1d2552d55179493cn/aIcedID 95.47.161.68:443
2019-02-04 13:26:55f1d5c950556cc2e0429b5a21a05ba830Virustotal results 12/58 (20.69%) IcedID 95.47.161.68:443
2019-02-04 08:33:279de48677a0ffa329fd9e9347a4d2b0ccn/a95.47.161.68:443
2019-02-02 09:13:4028cf5ebe7cca4f596abdada5d2ab23b0Virustotal results 39/69 (56.52%) 95.47.161.68:443
2019-01-31 03:27:19a301a63bbf3c3c81d051556d16093844Virustotal results 42/71 (59.15%) IcedID 95.47.161.68:443
2019-01-30 07:05:528963b9242f021797a384074a8828993cVirustotal results 46/70 (65.71%) IcedID 95.47.161.68:443
2019-01-29 10:37:531b36b2fa42a60279b9e87b9fc724cedbVirustotal results 45/70 (64.29%) IcedID 95.47.161.68:443
2019-01-29 09:25:3086b35beea55c48f822e8c99416e2e0f9Virustotal results 39/70 (55.71%) IcedID 95.47.161.68:443
2019-01-29 09:17:56970094900065ee959dcea5e6273031c6Virustotal results 40/71 (56.34%) IcedID 95.47.161.68:443
2019-01-29 08:36:3055985fbec29e27f9aa0ab01ddf6e3438Virustotal results 44/68 (64.71%) IcedID 95.47.161.68:443
2019-01-29 00:33:15505c0bb6d713e8813ed426d2360300beVirustotal results 45/71 (63.38%) IcedID 95.47.161.68:443
2019-01-28 23:59:0977fa5f73912c63dbe854b5f2fd967f30Virustotal results 47/70 (67.14%) IcedID 95.47.161.68:443
2019-01-28 23:34:367d30ac19d5ab6674679a521b21e44301Virustotal results 40/71 (56.34%) IcedID 95.47.161.68:443
2019-01-28 19:32:40b8823ef797738ef1bb3e7df2d4f8ec5eVirustotal results 42/71 (59.15%) IcedID 95.47.161.68:443
2019-01-28 17:07:05cc2b6ee5106a03ae304ac22d6994a8e2Virustotal results 32/71 (45.07%) IcedID 95.47.161.68:443
2019-01-28 17:02:33a649dd28b4dea908ebd6d3f741b7b258Virustotal results 29/71 (40.85%) IcedID 95.47.161.68:443
2019-01-28 16:27:13c3a839d0fbd4c75fbdbd8b9a5ae28a29Virustotal results 27/71 (38.03%) IcedID 95.47.161.68:443
2019-01-28 14:42:3092308fda64ef111706f8159d9a507ea7Virustotal results 29/71 (40.85%) IcedID 95.47.161.68:443
2019-01-28 14:40:3756c5938f16a5b1514f98804f023d4e88Virustotal results 25/70 (35.71%) IcedID 95.47.161.68:443
2019-01-28 14:11:3570c842cfbe6e9d4777e8a526f7a8d4e2Virustotal results 38/70 (54.29%) IcedID 95.47.161.68:443
2019-01-28 14:10:0322b9a4263f59b228b55791d3c7fb3853Virustotal results 29/70 (41.43%) IcedID 95.47.161.68:443
2019-01-28 14:09:0846887eb05f1522dd6adf6ec1d95db071Virustotal results 26/70 (37.14%) IcedID 95.47.161.68:443
2019-01-28 13:39:057b5b49247efa7ede6c83b669aa60ad82Virustotal results 27/69 (39.13%) IcedID 95.47.161.68:443
2019-01-28 12:01:312f005182791823971d16c400e22035a1Virustotal results 33/71 (46.48%) IcedID 95.47.161.68:443

# of entries: 98 (max: 100)