SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1d05c6fef14d2671d759a05b496464b831c650e8.
Database Entry
SHA1 Fingerprint: | 1d05c6fef14d2671d759a05b496464b831c650e8 |
---|---|
Certificate Common Name (CN): | host/emailAddress=web@host |
Issuer Distinguished Name (DN): | host/emailAddress=web@host |
TLS Version: | TLS 1.2 |
First seen: | 2016-12-29 17:49:25 UTC |
Last seen: | 2017-01-03 22:39:01 UTC |
Status: | Blacklisted |
Listing reason: | Gootkit C&C |
Listing date: | 2016-12-30 07:54:19 |
Malware samples: | 2 |
Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
---|---|---|---|---|
2017-01-03 22:39:01 | 0e7271008da870658f4d25da8bb24e85 | 8/57 (14.04%) | Gootkit | 89.46.78.221:80 |
2017-01-03 22:39:01 | 0e7271008da870658f4d25da8bb24e85 | 8/57 (14.04%) | Gootkit | 89.46.78.221:80 |
2016-12-29 17:49:25 | 209071cf4ae0578321f340f5819a1bc1 | n/a | Gootkit | 89.46.78.221:80 |
2016-12-29 17:49:25 | 209071cf4ae0578321f340f5819a1bc1 | n/a | Gootkit | 89.46.78.221:80 |
# of entries: 4 (max: 100)