SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 29489e12a9074a70024350cbd9d0d59445f9a655.

Database Entry


SHA1 Fingerprint:29489e12a9074a70024350cbd9d0d59445f9a655
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-09-13 18:52:17 UTC
Last seen:2016-09-18 07:17:25 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-09-17 11:31:32
Malware samples:6
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-09-18 07:17:256a9945367fd10044d778866da5394d44Virustotal results 36/55 (65.45%) Gootkit 148.251.222.143:80
2016-09-17 16:56:49a7f9ac267b123f536954d2716cef5434Virustotal results 36/57 (63.16%) Gootkit 148.251.222.143:80
2016-09-17 14:56:03e6a4cf5e5187c99d58af41735c0a2100Virustotal results 39/57 (68.42%) Gootkit 148.251.222.143:80
2016-09-17 13:13:14a071d47bbc7ac1f256ce85d3d5df97f4Virustotal results 14/57 (24.56%) Gootkit 148.251.222.143:80
2016-09-16 23:48:1970713cfc4d55cf40576568c869abb34aVirustotal results 36/57 (63.16%) Gootkit 148.251.222.143:80
2016-09-13 18:52:175602435135c62c0b99a2d579944fa5e5n/aGootkit 148.251.222.143:80

# of entries: 6 (max: 100)