SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 27879436526183bf047b7fb99e64f5a349093c61.

Database Entry

SHA1 Fingerprint:27879436526183bf047b7fb99e64f5a349093c61
Certificate Common Name (CN):tdsjsext4.life
Issuer Distinguished Name (DN):R3
TLS Version:TLS 1.2
First seen:2021-05-19 14:10:42 UTC
Last seen:2021-05-22 08:45:15 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2021-05-21 16:12:19
Malware samples:5
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-05-22 08:45:15d1253fcbf6ae056cff716ff6670c2c11Virustotal results 38 / 67 (56.72%) Gozi 185.50.248.47:443
2021-05-22 08:45:15d1253fcbf6ae056cff716ff6670c2c11Virustotal results 38 / 67 (56.72%) Gozi 185.50.248.47:443
2021-05-21 13:39:281e3ff0ecf3cf8a022e9b78da8f9a8c46Virustotal results 37 / 68 (54.41%) Gozi 185.50.248.47:443
2021-05-21 13:39:281e3ff0ecf3cf8a022e9b78da8f9a8c46Virustotal results 37 / 68 (54.41%) Gozi 185.50.248.47:443
2021-05-21 11:50:38f0aeb5feef11e0a8b6c4e1fd3a766c68Virustotal results 36 / 69 (52.17%) Gozi 185.50.248.47:443
2021-05-21 11:50:38f0aeb5feef11e0a8b6c4e1fd3a766c68Virustotal results 36 / 69 (52.17%) Gozi 185.50.248.47:443
2021-05-20 13:20:24f5f66d00116da2fc106282c86ce8a3c2Virustotal results 37 / 67 (55.22%) Gozi 185.50.248.47:443
2021-05-20 13:20:24f5f66d00116da2fc106282c86ce8a3c2Virustotal results 37 / 67 (55.22%) Gozi 185.50.248.47:443
2021-05-19 14:10:42f9bd8e7a4357003bfdd459d61d602074n/aGozi 185.50.248.47:443
2021-05-19 14:10:42f9bd8e7a4357003bfdd459d61d602074n/aGozi 185.50.248.47:443

# of entries: 10 (max: 100)