SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 178d9159f095c36efb007f18ac11f75e060bc964.

Database Entry


SHA1 Fingerprint:178d9159f095c36efb007f18ac11f75e060bc964
Certificate Common Name (CN):rsttrs.site
Issuer Distinguished Name (DN):Let's Encrypt Authority X3
TLS Version:TLS 1.2
First seen:2020-09-30 19:28:38 UTC
Last seen:2020-10-12 20:26:09 UTC
Status:Blacklisted
Listing reason:RaccoonStealer C&C
Listing date:2020-10-08 10:55:39
Malware samples:30
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2020-10-12 20:26:09cbd88951a78686afe074779b5f46bb46Virustotal results 42 / 68 (61.76%) RaccoonStealer101.32.97.85:443
2020-10-12 18:18:31a3440bb0b5a289468fb6a42ae81dcfadn/aRaccoonStealer101.32.97.85:443
2020-10-12 16:46:1261ec312c498addb6567138734d729defn/aRaccoonStealer101.32.97.85:443
2020-10-12 12:32:30e757ec56b52b61109c5d83a285a88851Virustotal results 46 / 69 (66.67%) 101.32.97.85:443
2020-10-12 05:06:18cf80d818744aac9409f8f9c4c23d9ca3Virustotal results 19 / 70 (27.14%) Adware.ExtenBro101.32.97.85:443
2020-10-12 05:04:08cfa5664357b79b7e39ced85105412f04Virustotal results 39 / 70 (55.71%) RaccoonStealer101.32.97.85:443
2020-10-11 07:09:10b39714f55fd79c0ff1a2af955463ee28Virustotal results 22 / 70 (31.43%) RaccoonStealer101.32.97.85:443
2020-10-11 04:11:547f7ef498d62d25a9df4af144b11202e5Virustotal results 21 / 70 (30.00%) RaccoonStealer101.32.97.85:443
2020-10-11 01:23:2416891323f3ebbb7e87c0bc1be3f29c08Virustotal results 27 / 69 (39.13%) RaccoonStealer101.32.97.85:443
2020-10-08 18:55:462a06ef18204a8ea6fa41c495ecd12a4bVirustotal results 32 / 70 (45.71%) RaccoonStealer161.117.254.2:443
2020-10-08 18:11:291032a4533fd0ca99b6df7f5da8c3c49eVirustotal results 49 / 69 (71.01%) RaccoonStealer161.117.254.2:443
2020-10-08 12:19:31b875c928df23f3e365ac643166432cb3Virustotal results 45 / 66 (68.18%) RaccoonStealer161.117.254.2:443
2020-10-08 07:54:4324ffe0dcd9078d0e8ad4f35cad159f91Virustotal results 37 / 70 (52.86%) RaccoonStealer161.117.254.2:443
2020-10-08 07:49:33244e2b33409a9e54f6b1cc980ea663a4Virustotal results 11 / 70 (15.71%) RaccoonStealer161.117.254.2:443
2020-10-08 07:00:186818329ca33d751d13a0cba07212488fn/aAsyncRAT161.117.254.2:443
2020-10-08 06:57:0076bcbb2aa116aa713dc99159888f457cn/aAsyncRAT161.117.254.2:443
2020-10-06 20:25:56aaf3b4aac9236db215c58091f7910c1cVirustotal results 18 / 70 (25.71%) Adware.ExtenBro161.117.254.2:443
2020-10-06 12:43:55ca06d570d76a176f87cff3500dbc7163Virustotal results 44 / 69 (63.77%) 161.117.254.2:443
2020-10-05 08:24:5610c6c63357de8ae750fe6cc2c840517fVirustotal results 46 / 68 (67.65%) RaccoonStealer161.117.254.2:443
2020-10-05 04:53:29c82505da7972f638a9aa294541f3ebd6Virustotal results 20 / 70 (28.57%) 161.117.254.2:443
2020-10-04 19:56:06a38ed39b520f6643a453da6481cead9bVirustotal results 47 / 69 (68.12%) 161.117.254.2:443
2020-10-04 16:48:580b60bc264f9e8ddef1ed866b5a6ebd35Virustotal results 45 / 70 (64.29%) RaccoonStealer161.117.254.2:443
2020-10-04 16:41:161f24642946529e48727b6ed981cc1d07Virustotal results 31 / 70 (44.29%) RaccoonStealer161.117.254.2:443
2020-10-04 14:11:086754f10af6ecb656d75b2ef3d27a0e04n/aArkeiStealer161.117.254.2:443
2020-10-03 21:08:01d7d6295999744c9434e10daf7e5e776fVirustotal results 23 / 71 (32.39%) RaccoonStealer161.117.254.2:443
2020-10-03 12:01:04bf6e1e17b6afd813f73c7cffd16eb778Virustotal results 27 / 70 (38.57%) 161.117.254.2:443
2020-10-02 16:58:325020353b1d2f59a25cc37134a7ae1d86Virustotal results 34 / 67 (50.75%) RaccoonStealer161.117.254.2:443
2020-10-02 16:17:5725e806c8e9a523538a0c53ad06a4a57bVirustotal results 57 / 70 (81.43%) RaccoonStealer161.117.254.2:443
2020-10-01 10:57:48fe7c5089045e8bce06dc5711b3b8f247n/aRaccoonStealer161.117.254.2:443
2020-09-30 19:28:384b0b1948b1363ebbc213fbfa5d2a16b8n/aRaccoonStealer161.117.254.2:443

# of entries: 30 (max: 100)