SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 186568553a81a8b3fd3e332ea336a9fce24160f1.

Database Entry

SHA1 Fingerprint:186568553a81a8b3fd3e332ea336a9fce24160f1
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2
First seen:2019-10-15 17:11:20 UTC
Last seen:2019-10-21 12:16:01 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2019-10-16 15:23:01
Malware samples:11
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-10-21 12:16:01cabf06d4baa08285db5f2fa86bb6bac4Virustotal results 39/69 (56.52%) Gozi 83.166.246.250:443
2019-10-21 12:16:01cabf06d4baa08285db5f2fa86bb6bac4Virustotal results 39/69 (56.52%) Gozi 83.166.246.250:443
2019-10-21 12:01:1774dceda326e27dc9df6f3c7b7c2babf9Virustotal results 10/71 (14.08%) Gozi 83.166.246.250:443
2019-10-21 12:01:1774dceda326e27dc9df6f3c7b7c2babf9Virustotal results 10/71 (14.08%) Gozi 83.166.246.250:443
2019-10-21 11:57:0513c9eea9e9bcae4495f3619c172d0e24Virustotal results 9/70 (12.86%) Gozi 83.166.246.250:443
2019-10-21 11:57:0513c9eea9e9bcae4495f3619c172d0e24Virustotal results 9/70 (12.86%) Gozi 83.166.246.250:443
2019-10-21 11:57:01a3bf87d8ca8671d4e0fe87b3770f7c58Virustotal results 49/70 (70.00%) Gozi 83.166.246.250:443
2019-10-21 11:57:01a3bf87d8ca8671d4e0fe87b3770f7c58Virustotal results 49/70 (70.00%) Gozi 83.166.246.250:443
2019-10-21 11:51:3382dab6fdb8073f078585617d78e3e054Virustotal results 48/70 (68.57%) Gozi 83.166.246.250:443
2019-10-21 11:51:3382dab6fdb8073f078585617d78e3e054Virustotal results 48/70 (68.57%) Gozi 83.166.246.250:443
2019-10-21 11:51:29ade3580c557d4f5a1a10cfa176ef717bVirustotal results 48/70 (68.57%) Gozi 83.166.246.250:443
2019-10-21 11:51:29ade3580c557d4f5a1a10cfa176ef717bVirustotal results 48/70 (68.57%) Gozi 83.166.246.250:443
2019-10-16 13:57:422212e5f65690700786153ef1bbd21f6cVirustotal results 5/70 (7.14%) Gozi 83.166.246.250:443
2019-10-16 13:57:422212e5f65690700786153ef1bbd21f6cVirustotal results 5/70 (7.14%) Gozi 83.166.246.250:443
2019-10-16 13:47:5738664e0edca27578888d86f059107ae5Virustotal results 4/71 (5.63%) Gozi 83.166.246.250:443
2019-10-16 13:47:5738664e0edca27578888d86f059107ae5Virustotal results 4/71 (5.63%) Gozi 83.166.246.250:443
2019-10-16 13:44:50c8e8c9622b14a44ca1bb99aa18825cefVirustotal results 14/71 (19.72%) Gozi 83.166.246.250:443
2019-10-16 13:44:50c8e8c9622b14a44ca1bb99aa18825cefVirustotal results 14/71 (19.72%) Gozi 83.166.246.250:443
2019-10-16 13:44:16fd7b43edb21e4dbfe499fa95dcca937eVirustotal results 4/70 (5.71%) Gozi 83.166.246.250:443
2019-10-16 13:44:16fd7b43edb21e4dbfe499fa95dcca937eVirustotal results 4/70 (5.71%) Gozi 83.166.246.250:443
2019-10-15 17:11:20a75154a40c745b8356c086be7347b095Virustotal results 12/70 (17.14%) Gozi 83.166.246.250:443
2019-10-15 17:11:20a75154a40c745b8356c086be7347b095Virustotal results 12/70 (17.14%) Gozi 83.166.246.250:443

# of entries: 22 (max: 100)