SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 145d04c2ad96e1fb32db17181ec9af3680145935.
Database Entry
| SHA1 Fingerprint: | 145d04c2ad96e1fb32db17181ec9af3680145935 |
|---|---|
| Certificate Common Name (CN): | VenomRAT |
| Issuer Distinguished Name (DN): | VenomRAT Server, OU=Venom, O=VenomRAT By Venom, L=SH, C=CN |
| TLS Version: | TLSv1 |
| First seen: | 2023-02-17 14:20:50 UTC |
| Last seen: | 2023-10-19 16:11:35 UTC |
| Status: | Blacklisted |
| Listing reason: | AsyncRAT C&C |
| Listing date: | 2023-10-19 16:12:10 |
| Malware samples: | 17 |
| Botnet C&Cs: | 15 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2023-10-19 16:11:35 | fbbd8fa745a4efb592932f75386f14ae |  6 / 72 (8.33%)
| AsyncRAT | 20.211.121.138:4449 |
| 2023-10-19 07:10:36 | 18221ca3a79788ca82b75bd8ea337912 | 20 / 72 (27.78%)
| AsyncRAT | 20.211.121.138:4449 |
| 2023-09-21 10:36:43 | addca39503803ebc2679b91ec072e4ea | 21 / 71 (29.58%)
| Heodo | 185.17.0.246:4449 |
| 2023-09-07 06:52:23 | b024305a361da74bd1cba92adf694dbd | 54 / 71 (76.06%)
| AsyncRAT | 185.183.33.129:4449 |
| 2023-09-01 09:14:39 | b7a2f8a222e9a20ba4e1c1a2d4b11fe7 | 0 / 59 (0.00%)
| Formbook | 163.5.215.237:4449 |
| 2023-08-17 01:54:06 | 11e35b0a2eccee472b10632837ff6483 | 45 / 71 (63.38%)
| Formbook | 185.106.94.122:4449 |
| 2023-07-11 18:51:23 | 398b9ad0759866b89722da830a936c46 | 23 / 71 (32.39%)
| 193.233.133.58:5631 | |
| 2023-07-11 11:38:05 | 145c03d8b797326918ab32b688966048 | 56 / 71 (78.87%)
| AsyncRAT | 193.109.85.128:4449 |
| 2023-06-19 15:39:51 | 194be7bd1da9f491a49e1f8bb5330392 | n/a | 91.134.150.158:4449 | |
| 2023-05-27 14:22:49 | aa85abbc1f3bcc19ba6d9c6bd1136dd9 | 52 / 71 (73.24%)
| AsyncRAT | 144.202.52.245:4449 |
| 2023-05-27 07:27:23 | 0b4fc8064e349eadcbe846fb9a8e8ba2 | 53 / 71 (74.65%)
| AsyncRAT | 144.202.52.245:4449 |
| 2023-05-15 02:35:04 | b05249c587e187e96cdc188915358532 | 50 / 71 (70.42%)
| AsyncRAT | 87.121.221.16:4449 |
| 2023-04-21 12:09:52 | ad32ea597fac4a72be0d2ff895d9092d | 55 / 70 (78.57%)
| AsyncRAT | 104.243.37.167:4449 |
| 2023-04-02 10:35:01 | 078657ac502b6d8abd3614f6445f02fa | 54 / 69 (78.26%)
| AsyncRAT | 185.246.220.251:5555 |
| 2023-02-26 23:07:21 | 3ebb0f1557af0bb23ff40eca3a14767d | 38 / 68 (55.88%)
| Formbook | 89.38.131.104:4449 |
| 2023-02-26 16:39:34 | b5d35ca8aebce25fa93596e5a952cac0 | 41 / 67 (61.19%)
| AsyncRAT | 91.134.187.20:4449 |
| 2023-02-17 14:20:50 | bc1722ec205a1c5ed34b8766971fe608 | 18 / 66 (27.27%)
| 179.43.142.197:5789 |
# of entries: 17 (max: 100)