SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 120de53c383886e618516713331d4b91f87cd855.
Database Entry
| SHA1 Fingerprint: | 120de53c383886e618516713331d4b91f87cd855 |
|---|---|
| Certificate Common Name (CN): | marblegrove.cfd |
| Issuer Distinguished Name (DN): | YE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-10-05 16:49:38 UTC |
| Last seen: | 2026-10-06 02:24:42 UTC |
| Status: | Blacklisted |
| Listing reason: | OffLoader C&C |
| Listing date: | 2026-10-06 06:18:40 |
| Malware samples: | 12 |
| Botnet C&Cs: | 8 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-10-06 02:24:42 | edae14406128e70893e2d6562248eeef | n/a | 188.114.96.0:443 | |
| 2026-10-06 01:22:30 | c24df1406a458c226a104cab51dd993c | n/a | 172.67.189.173:443 | |
| 2026-10-06 00:04:40 | 921f90e615dfd77595692dcb2dfcee6c | n/a | 188.114.96.12:443 | |
| 2026-10-05 21:30:23 | 2a8c21c4f3c27e2a340295fef8cf3542 | n/a | 188.114.96.12:443 | |
| 2026-10-05 21:20:10 | 299b4ff20c2d0f42fccf1dc19585f538 | n/a | 188.114.97.0:443 | |
| 2026-10-05 21:15:42 | 290846a1bcfbd306e334840ef9ca9d56 | n/a | 188.114.97.3:443 | |
| 2026-10-05 20:47:40 | 2696cdc42ee60a1f96ad044c5d46ee85 | n/a | 188.114.96.3:443 | |
| 2026-10-05 19:22:09 | 1ec822ac847ee40cf22db6a1e24b5241 | n/a | 104.21.57.75:443 | |
| 2026-10-05 18:49:26 | 1b9f4f4d4c1917d7eaeb417adfdb8669 | n/a | 188.114.97.12:443 | |
| 2026-10-05 18:14:18 | 188a595dd55f05af33e458508d999d49 | n/a | 188.114.96.12:443 | |
| 2026-10-05 17:43:43 | 15a684651c1dde3b0614339aae3838ba | n/a | 104.21.57.75:443 | |
| 2026-10-05 16:49:38 | 10b8fb020c6070060036e89e30b86065 | n/a | 188.114.97.12:443 |
# of entries: 12 (max: 100)