SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 29489e12a9074a70024350cbd9d0d59445f9a655.

Database Entry

SHA1 Fingerprint:	29489e12a9074a70024350cbd9d0d59445f9a655
Certificate Common Name (CN):	localhost
Issuer Distinguished Name (DN):	localhost
TLS Version:	TLSv1
First seen:	2016-09-13 18:52:17 UTC
Last seen:	2016-09-18 07:17:25 UTC
Status:	Blacklisted
Listing reason:	Gootkit C&C
Listing date:	2016-09-17 11:31:32
Malware samples:	6
Botnet C&Cs:	1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Signature	Botnet C&C (IP:port)
2016-09-18 07:17:25	6a9945367fd10044d778866da5394d44	36/55 (65.45%)	Gootkit	148.251.222.143:80
2016-09-18 07:17:25	6a9945367fd10044d778866da5394d44	36/55 (65.45%)	Gootkit	148.251.222.143:80
2016-09-17 16:56:49	a7f9ac267b123f536954d2716cef5434	36/57 (63.16%)	Gootkit	148.251.222.143:80
2016-09-17 16:56:49	a7f9ac267b123f536954d2716cef5434	36/57 (63.16%)	Gootkit	148.251.222.143:80
2016-09-17 14:56:03	e6a4cf5e5187c99d58af41735c0a2100	39/57 (68.42%)	Gootkit	148.251.222.143:80
2016-09-17 14:56:03	e6a4cf5e5187c99d58af41735c0a2100	39/57 (68.42%)	Gootkit	148.251.222.143:80
2016-09-17 13:13:14	a071d47bbc7ac1f256ce85d3d5df97f4	14/57 (24.56%)	Gootkit	148.251.222.143:80
2016-09-17 13:13:14	a071d47bbc7ac1f256ce85d3d5df97f4	14/57 (24.56%)	Gootkit	148.251.222.143:80
2016-09-16 23:48:19	70713cfc4d55cf40576568c869abb34a	36/57 (63.16%)	Gootkit	148.251.222.143:80
2016-09-16 23:48:19	70713cfc4d55cf40576568c869abb34a	36/57 (63.16%)	Gootkit	148.251.222.143:80
2016-09-13 18:52:17	5602435135c62c0b99a2d579944fa5e5	n/a	Gootkit	148.251.222.143:80
2016-09-13 18:52:17	5602435135c62c0b99a2d579944fa5e5	n/a	Gootkit	148.251.222.143:80

# of entries: 12 (max: 100)