SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 282183e64c464841edc424163e36456a489213fe.
Database Entry
| SHA1 Fingerprint: | 282183e64c464841edc424163e36456a489213fe |
|---|---|
| Certificate Common Name (CN): | torontttolerony.info |
| Issuer Distinguished Name (DN): | Let's Encrypt Authority X3 |
| TLS Version: | TLS 1.2 |
| First seen: | 2018-12-13 20:26:31 UTC |
| Last seen: | 2018-12-14 11:47:21 UTC |
| Status: | Blacklisted |
| Listing reason: | Gozi C&C |
| Listing date: | 2018-12-14 11:39:22 |
| Malware samples: | 2 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2018-12-14 11:47:21 | 2f9ba988aa5bf1e16b4c86b92e7f8000 |  23/69 (33.33%)
| Gozi | 62.173.138.139:443 |
| 2018-12-14 11:47:21 | 2f9ba988aa5bf1e16b4c86b92e7f8000 | 23/69 (33.33%)
| Gozi | 62.173.138.139:443 |
| 2018-12-13 20:26:31 | 3905befc240bd61aab69416809d94dd9 | 36/69 (52.17%)
| Gozi | 62.173.138.139:443 |
| 2018-12-13 20:26:31 | 3905befc240bd61aab69416809d94dd9 | 36/69 (52.17%)
| Gozi | 62.173.138.139:443 |
# of entries: 4 (max: 100)