SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1d6d1f2bfbcade17be4233c88dedd2ceb802602e.
Database Entry
| SHA1 Fingerprint: | 1d6d1f2bfbcade17be4233c88dedd2ceb802602e |
|---|---|
| Certificate Common Name (CN): | www.ran0cnmi.com/O=ran0cnmi./C=US |
| Issuer Distinguished Name (DN): | www.ran0cnmi.com/O=ran0cnmi./C=US |
| TLS Version: | TLS 1.2 |
| First seen: | 2016-01-29 15:21:36 UTC |
| Last seen: | never |
| Status: | Blacklisted |
| Listing reason: | Gootkit C&C |
| Listing date: | 2016-01-29 15:53:05 |
| Malware samples: | 1 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-01-29 15:21:36 | 2a4d62ec2629fc9dd57ac47b46a0671c |  4/55 (7.27%)
| Gootkit | 192.157.239.137:80 |
| 2016-01-29 15:21:36 | 2a4d62ec2629fc9dd57ac47b46a0671c | 4/55 (7.27%)
| Gootkit | 192.157.239.137:80 |
# of entries: 2 (max: 100)