SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 142ef214dcacd78383d86f20a991e539a62c90ca.

Database Entry

SHA1 Fingerprint:142ef214dcacd78383d86f20a991e539a62c90ca
Certificate Common Name (CN):sweatmeat.pw/emailAddress=webmaster@sweatmeat.pw
Issuer Distinguished Name (DN):sweatmeat.pw/emailAddress=webmaster@sweatmeat.pw
TLS Version:TLS 1.2
First seen:2016-11-15 13:41:51 UTC
Last seen:2016-11-17 02:51:24 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-11-18 08:45:49
Malware samples:6
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-11-17 02:51:24ba238111ad503947d0c6a65c38878329n/aGootkit 94.177.247.74:80
2016-11-17 02:51:24ba238111ad503947d0c6a65c38878329n/aGootkit 94.177.247.74:80
2016-11-16 16:31:376dee24790e89d370993f5e28f1a3d7b7Virustotal results 10/56 (17.86%) Gootkit 94.177.247.74:80
2016-11-16 16:31:376dee24790e89d370993f5e28f1a3d7b7Virustotal results 10/56 (17.86%) Gootkit 94.177.247.74:80
2016-11-16 10:13:394b629d09e9f012bfacabdee239c38269Virustotal results 10/57 (17.54%) Gootkit 94.177.247.74:80
2016-11-16 10:13:394b629d09e9f012bfacabdee239c38269Virustotal results 10/57 (17.54%) Gootkit 94.177.247.74:80
2016-11-16 00:45:3847cd3eed090b779dd9deb1be40f367e7n/aGootkit 94.177.247.74:80
2016-11-16 00:45:3847cd3eed090b779dd9deb1be40f367e7n/aGootkit 94.177.247.74:80
2016-11-15 23:39:38d07c740b4ce7edec332e08702e160f5fVirustotal results 8/56 (14.29%) Gootkit 94.177.247.74:80
2016-11-15 23:39:38d07c740b4ce7edec332e08702e160f5fVirustotal results 8/56 (14.29%) Gootkit 94.177.247.74:80
2016-11-15 13:41:51dba8f7f6a16470b1c7e1bc0adae0fa19n/aGootkit 94.177.247.74:80
2016-11-15 13:41:51dba8f7f6a16470b1c7e1bc0adae0fa19n/aGootkit 94.177.247.74:80

# of entries: 12 (max: 100)