SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 289499bec90a5c76774bdc4eaa6aa6ab3d12eef7.
Database Entry
| SHA1 Fingerprint: | 289499bec90a5c76774bdc4eaa6aa6ab3d12eef7 |
|---|---|
| Certificate Common Name (CN): | * |
| Issuer Distinguished Name (DN): | * |
| TLS Version: | TLS 1.2' NOTBEF |
| First seen: | 2021-04-22 13:11:27 UTC |
| Last seen: | 2021-04-22 16:43:04 UTC |
| Status: | Blacklisted |
| Listing reason: | Gozi C&C |
| Listing date: | 2021-04-23 06:18:43 |
| Malware samples: | 3 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-04-22 16:43:04 | 5f23f758f24d0e13f9d499fc6b83daf3 | n/a | Gozi | 193.239.84.194:443 |
| 2021-04-22 16:43:04 | 5f23f758f24d0e13f9d499fc6b83daf3 | n/a | Gozi | 193.239.84.194:443 |
| 2021-04-22 14:30:06 | 6689ae7167a26a4f126c584151250c80 |  2 / 67 (2.99%)
| Gozi | 193.239.84.194:443 |
| 2021-04-22 14:30:06 | 6689ae7167a26a4f126c584151250c80 | 2 / 67 (2.99%)
| Gozi | 193.239.84.194:443 |
| 2021-04-22 13:11:27 | 8ae208c2087200335b521476aace6805 | n/a | Gozi | 193.239.84.194:443 |
| 2021-04-22 13:11:27 | 8ae208c2087200335b521476aace6805 | n/a | Gozi | 193.239.84.194:443 |
# of entries: 6 (max: 100)