SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1d4be8f125619bbe6ed8153579e878debf7369a4.

Database Entry


SHA1 Fingerprint:1d4be8f125619bbe6ed8153579e878debf7369a4
Certificate Common Name (CN):tedidrterentht.eh
Issuer Distinguished Name (DN):tedidrterentht.eh
TLS Version:TLS 1.2
First seen:2016-01-20 06:21:07 UTC
Last seen:2016-01-21 11:09:49 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-01-20 07:14:37
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-01-21 11:09:49e6f67b358009f66f1a4840c1eff19c2eVirustotal results 4/53 (7.55%) Dridex 114.113.148.141:443
2016-01-21 11:09:49e6f67b358009f66f1a4840c1eff19c2eVirustotal results 4/53 (7.55%) Dridex 114.113.148.141:443
2016-01-20 06:21:076c96708f61ed1119dd6f9710b1945a23Virustotal results 24/54 (44.44%) Dridex 114.113.148.141:443
2016-01-20 06:21:076c96708f61ed1119dd6f9710b1945a23Virustotal results 24/54 (44.44%) Dridex 114.113.148.141:443

# of entries: 4 (max: 100)