SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 28b511d09f7a0f654d220b9b049f92ab3bb513fa.

Database Entry

SHA1 Fingerprint:28b511d09f7a0f654d220b9b049f92ab3bb513fa
Certificate Common Name (CN):hostname/
Issuer Distinguished Name (DN):hostname/
TLS Version:TLS 1.2
First seen:2016-03-01 13:11:31 UTC
Last seen:2016-03-04 10:43:18 UTC
Listing reason:Quakbot C&C
Listing date:2016-03-04 13:29:52
Malware samples:2
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-03-04 10:43:18492949d2f1d9bedd3c8736a2a2d5a94dVirustotal results 30/55 (54.55%) Quakbot181.215.115.202:443
2016-03-01 13:11:31eaaefc7788ecf48de83ac43f51a173bfn/aQuakbot181.215.115.202:443

# of entries: 2 (max: 100)