SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1d9d452d95886def36659e0401fd66f23f727754.
Database Entry
| SHA1 Fingerprint: | 1d9d452d95886def36659e0401fd66f23f727754 |
|---|---|
| Certificate Common Name (CN): | plerdorea.ky |
| Issuer Distinguished Name (DN): | plerdorea.ky |
| TLS Version: | TLS 1.2 |
| First seen: | 2015-10-05 09:38:12 UTC |
| Last seen: | 2015-10-08 07:51:30 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-10-05 09:41:04 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-10-08 07:51:30 | 1028e693ef761566b3cafc6c9c602a9e | Dridex | 84.246.226.211:448 | |
| 2015-10-08 07:51:30 | 1028e693ef761566b3cafc6c9c602a9e | Dridex | 84.246.226.211:448 | |
| 2015-10-07 07:18:45 | 94862498d85b9e3b25894ac77dccfc46 | Dridex | 84.246.226.211:448 | |
| 2015-10-07 07:18:45 | 94862498d85b9e3b25894ac77dccfc46 | Dridex | 84.246.226.211:448 | |
| 2015-10-06 12:51:09 | 8982410d05e1839148299ca96af9e4c8 | Dridex | 84.246.226.211:448 | |
| 2015-10-06 12:51:09 | 8982410d05e1839148299ca96af9e4c8 | Dridex | 84.246.226.211:448 | |
| 2015-10-05 09:38:12 | 87b01608b8170029816df5eed11cd9c5 | Dridex | 84.246.226.211:448 | |
| 2015-10-05 09:38:12 | 87b01608b8170029816df5eed11cd9c5 | Dridex | 84.246.226.211:448 |
# of entries: 8 (max: 100)