SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1e5ea2749884d3aac805979eadd0e45f9848a95b.
Database Entry
| SHA1 Fingerprint: | 1e5ea2749884d3aac805979eadd0e45f9848a95b |
|---|---|
| Certificate Common Name (CN): | localhost |
| Issuer Distinguished Name (DN): | localhost |
| TLS Version: | TLSv1 |
| First seen: | 2016-10-03 03:48:07 UTC |
| Last seen: | 2016-11-16 08:37:29 UTC |
| Status: | Blacklisted |
| Listing reason: | Gootkit C&C |
| Listing date: | 2016-10-25 10:13:37 |
| Malware samples: | 51 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-11-16 08:37:29 | 862416f138b109399b66609cb678d845 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-16 08:37:29 | 862416f138b109399b66609cb678d845 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-15 08:16:23 | 7c4a00cf1410eec493069af3a06a5391 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-15 08:16:23 | 7c4a00cf1410eec493069af3a06a5391 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 22:13:21 | 6a16e9d209df5196de25ee772fe0d1f5 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 22:13:21 | 6a16e9d209df5196de25ee772fe0d1f5 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 18:05:46 | 79ca1f0abeb1b7e392af587f5a24ecd6 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 18:05:46 | 79ca1f0abeb1b7e392af587f5a24ecd6 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 08:49:28 | d5c4b02d734af9564d85f3134ed38307 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-14 08:49:28 | d5c4b02d734af9564d85f3134ed38307 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-04 21:30:35 | 740c5f59df4c0ca20e456a4574efaef8 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-04 21:30:35 | 740c5f59df4c0ca20e456a4574efaef8 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-04 08:49:28 | b9c244d1578589c2f1f70cfcf43aba47 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-04 08:49:28 | b9c244d1578589c2f1f70cfcf43aba47 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-03 11:48:41 | 4d6350bcc42398e715c50461b89ab5e9 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-03 11:48:41 | 4d6350bcc42398e715c50461b89ab5e9 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-03 01:42:26 | bb68fa0d3ac07fd6689e7dcd9cc414da | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-03 01:42:26 | bb68fa0d3ac07fd6689e7dcd9cc414da | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-02 11:49:24 | 946bf98656180fae26bb2072b0ab063f | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-02 11:49:24 | 946bf98656180fae26bb2072b0ab063f | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-02 04:24:36 | 750bf62c973fe0edcfc35d9b91dbb3c8 | n/a | Shylock | 79.110.251.102:80 |
| 2016-11-02 04:24:36 | 750bf62c973fe0edcfc35d9b91dbb3c8 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-30 14:55:08 | dde1e8cb5e19ec89bbf3522c91bd4849 |  23/57 (40.35%)
| Shylock | 79.110.251.102:80 |
| 2016-10-30 14:55:08 | dde1e8cb5e19ec89bbf3522c91bd4849 | 23/57 (40.35%)
| Shylock | 79.110.251.102:80 |
| 2016-10-28 13:01:11 | 4374f2d3eb5d2cc9e982817fc3ccd5a6 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-28 13:01:11 | 4374f2d3eb5d2cc9e982817fc3ccd5a6 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-28 05:19:26 | e4a48916f08b18f6529d184e5826547a | 6/56 (10.71%)
| Shylock | 79.110.251.102:80 |
| 2016-10-28 05:19:26 | e4a48916f08b18f6529d184e5826547a | 6/56 (10.71%)
| Shylock | 79.110.251.102:80 |
| 2016-10-28 05:13:52 | 652bcb9c9790526f56c579b892735084 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-28 05:13:52 | 652bcb9c9790526f56c579b892735084 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-27 22:55:05 | d746edd288065b9f6e8b609b9fe6768c | 6/56 (10.71%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-27 22:55:05 | d746edd288065b9f6e8b609b9fe6768c | 6/56 (10.71%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-27 10:52:07 | f9f8ec3472b423a5b6d7ad7606ae36c1 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-27 10:52:07 | f9f8ec3472b423a5b6d7ad7606ae36c1 | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-26 12:10:30 | 2fafc1dd85504f748efbceff1b0385bf | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-26 12:10:30 | 2fafc1dd85504f748efbceff1b0385bf | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-26 09:46:08 | fb3670d5ceceeb776ab85ac0e15a5259 | 38/57 (66.67%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-26 09:46:08 | fb3670d5ceceeb776ab85ac0e15a5259 | 38/57 (66.67%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-26 09:13:51 | c0c5a7d683bb63fb2cf82726bb1f4ecc | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-26 09:13:51 | c0c5a7d683bb63fb2cf82726bb1f4ecc | n/a | Shylock | 79.110.251.102:80 |
| 2016-10-26 06:07:27 | 77bff8f6b951eecc21e9112f45ac6d74 | 25/62 (40.32%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-26 06:07:27 | 77bff8f6b951eecc21e9112f45ac6d74 | 25/62 (40.32%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-26 00:15:43 | 006c17b514b412575ff49df4c1cd8409 | 27/57 (47.37%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-26 00:15:43 | 006c17b514b412575ff49df4c1cd8409 | 27/57 (47.37%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-25 14:25:13 | c38a7471b124b09c27089d5c62b1d7e0 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-25 14:25:13 | c38a7471b124b09c27089d5c62b1d7e0 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-25 09:59:09 | 0307e7a3ec5f36973eb5347c46b916c0 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-25 09:59:09 | 0307e7a3ec5f36973eb5347c46b916c0 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-25 05:13:37 | 2fccae2c76dde169cb2f672d55dfe48a | 35/57 (61.40%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-25 05:13:37 | 2fccae2c76dde169cb2f672d55dfe48a | 35/57 (61.40%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-24 16:40:50 | 7ec0ce513b0baa1d99812f8ca6b47cee | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 16:40:50 | 7ec0ce513b0baa1d99812f8ca6b47cee | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 15:43:38 | 74e84110ef70665c066bb3fd10c94e12 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 15:43:38 | 74e84110ef70665c066bb3fd10c94e12 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 13:12:43 | eb66706f8b417315e9e7a9e45a63d96a | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 13:12:43 | eb66706f8b417315e9e7a9e45a63d96a | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 02:27:58 | a8b868431c80ed47498d8a6f5cdde7f3 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-24 02:27:58 | a8b868431c80ed47498d8a6f5cdde7f3 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-23 10:48:41 | e7af6579a8c095d604233bcd5657c2fa | 6/55 (10.91%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-23 10:48:41 | e7af6579a8c095d604233bcd5657c2fa | 6/55 (10.91%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-23 00:53:52 | a7b69172175ba9f1a720bd3b9ced4e57 | 7/55 (12.73%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-23 00:53:52 | a7b69172175ba9f1a720bd3b9ced4e57 | 7/55 (12.73%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-21 02:44:24 | 278fc3d549f143ac2635509f71e85cc4 | 8/57 (14.04%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-21 02:44:24 | 278fc3d549f143ac2635509f71e85cc4 | 8/57 (14.04%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-17 02:03:41 | 944b8f49905fea21849077127c5f9eed | 39/56 (69.64%)
| Shylock | 79.110.251.102:80 |
| 2016-10-17 02:03:41 | 944b8f49905fea21849077127c5f9eed | 39/56 (69.64%)
| Shylock | 79.110.251.102:80 |
| 2016-10-15 15:17:06 | 17bc8a2718f9534ce4b78d79d9487857 | 18/67 (26.87%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-15 15:17:06 | 17bc8a2718f9534ce4b78d79d9487857 | 18/67 (26.87%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-15 00:46:29 | 75ae25b6f9a833f2844c8579ec502182 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-15 00:46:29 | 75ae25b6f9a833f2844c8579ec502182 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-13 12:14:41 | b47d4095b03b2eb4594b8bf3ce3b1ea7 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-13 12:14:41 | b47d4095b03b2eb4594b8bf3ce3b1ea7 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-13 06:38:46 | 7062b8c21e5fa31d21c1dad675417903 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-13 06:38:46 | 7062b8c21e5fa31d21c1dad675417903 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-12 18:16:03 | dc33f8042c4ecb698d91e482604e40d9 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-12 18:16:03 | dc33f8042c4ecb698d91e482604e40d9 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-11 09:31:57 | 651faaa7086da711470b651431f9d9d9 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-11 09:31:57 | 651faaa7086da711470b651431f9d9d9 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-11 07:45:01 | 82fba654457c4add45fae38589a57a43 | 11/55 (20.00%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-11 07:45:01 | 82fba654457c4add45fae38589a57a43 | 11/55 (20.00%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-08 17:48:51 | b516388470621cb6fd7b2909bfe9f904 | 6/56 (10.71%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-08 17:48:51 | b516388470621cb6fd7b2909bfe9f904 | 6/56 (10.71%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-08 16:06:50 | 0b0a8b06ce6a20343d4b2d923b8604ae | 33/56 (58.93%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-08 16:06:50 | 0b0a8b06ce6a20343d4b2d923b8604ae | 33/56 (58.93%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-08 16:01:38 | 213f85def378b146c8470847e1f4f52c | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-08 16:01:38 | 213f85def378b146c8470847e1f4f52c | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 21:12:54 | 91789ef3f06ec3da536741b9cc4c261e | 24/56 (42.86%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-07 21:12:54 | 91789ef3f06ec3da536741b9cc4c261e | 24/56 (42.86%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-07 16:20:08 | 3c7cb993aa07b7fa4c33d6a7be7684d4 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 16:20:08 | 3c7cb993aa07b7fa4c33d6a7be7684d4 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 10:16:52 | c4f17c8b852521c109d29276db5773e6 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 10:16:52 | c4f17c8b852521c109d29276db5773e6 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 00:48:37 | 0d7ab10ad81185e96d3e059d8fc8ea24 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-07 00:48:37 | 0d7ab10ad81185e96d3e059d8fc8ea24 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-06 23:57:01 | fdb7093ffb472f6abfa71073f3136a85 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-06 23:57:01 | fdb7093ffb472f6abfa71073f3136a85 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-04 21:40:23 | aba564a978b0042c0707b4b7b1fb7c53 | 32/56 (57.14%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-04 21:40:23 | aba564a978b0042c0707b4b7b1fb7c53 | 32/56 (57.14%)
| Gootkit | 79.110.251.102:80 |
| 2016-10-04 10:33:05 | fbd9f6422ff1ccd0754d3f807fa3c729 | n/a | Gootkit | 79.110.251.102:80 |
| 2016-10-04 10:33:05 | fbd9f6422ff1ccd0754d3f807fa3c729 | n/a | Gootkit | 79.110.251.102:80 |
# of entries: 100 (max: 100)