SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 1f02e525130415326196c9a3946558d662fe8cbd.

Database Entry


SHA1 Fingerprint:1f02e525130415326196c9a3946558d662fe8cbd
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-07-13 02:33:59 UTC
Last seen:2014-07-14 04:04:51 UTC
Status:Blacklisted
Listing reason:KINS C&C
Listing date:2014-07-13 08:01:00
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-07-14 04:04:5120b475f2c8ce958e6de9f180891e2c3cVirustotal results 9/53 (16.98%) ZeuS 166.63.124.226:443
2014-07-14 04:04:5120b475f2c8ce958e6de9f180891e2c3cVirustotal results 9/53 (16.98%) ZeuS 166.63.124.226:443
2014-07-13 19:49:31f61f675dfce3817b3d3fef3824d38376Virustotal results 33/53 (62.26%) ZeuS 166.63.124.226:443
2014-07-13 19:49:31f61f675dfce3817b3d3fef3824d38376Virustotal results 33/53 (62.26%) ZeuS 166.63.124.226:443
2014-07-13 02:33:59e3e76f373406941602fb090835d95e5bVirustotal results 25/54 (46.30%) ZeuS 166.63.124.226:443
2014-07-13 02:33:59e3e76f373406941602fb090835d95e5bVirustotal results 25/54 (46.30%) ZeuS 166.63.124.226:443

# of entries: 6 (max: 100)