SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 242726515b5501f1df9e2dbd8b3bdf4ce2fed3a9.

Database Entry

SHA1 Fingerprint:242726515b5501f1df9e2dbd8b3bdf4ce2fed3a9
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2' NOTBEF
First seen:2019-01-03 06:58:09 UTC
Last seen:2019-01-03 14:28:54 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2019-01-03 07:17:53
Malware samples:4
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-01-03 14:28:545e470e065810ee21dac5cac7d0b54e0fVirustotal results 32/71 (45.07%) Gozi 185.158.249.138:443
2019-01-03 14:28:545e470e065810ee21dac5cac7d0b54e0fVirustotal results 32/71 (45.07%) Gozi 185.158.249.138:443
2019-01-03 10:54:48627ba09c59524c5e232d8632630f6758Virustotal results 24/71 (33.80%) Gozi 185.158.249.138:443
2019-01-03 10:54:48627ba09c59524c5e232d8632630f6758Virustotal results 24/71 (33.80%) Gozi 185.158.249.138:443
2019-01-03 09:50:132c6d2d388553fa8e6e8720c05beaab82Virustotal results 44/70 (62.86%) Gozi 185.158.249.138:443
2019-01-03 09:50:132c6d2d388553fa8e6e8720c05beaab82Virustotal results 44/70 (62.86%) Gozi 185.158.249.138:443
2019-01-03 06:58:095a3888394fb4f556c43cc6576b898e8aVirustotal results 26/69 (37.68%) Gozi 185.158.249.138:443
2019-01-03 06:58:095a3888394fb4f556c43cc6576b898e8aVirustotal results 26/69 (37.68%) Gozi 185.158.249.138:443

# of entries: 8 (max: 100)