SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 2cf80fa78c7ab8031d801a8af329c48c99bf79f5.

Database Entry


SHA1 Fingerprint:2cf80fa78c7ab8031d801a8af329c48c99bf79f5
Certificate Common Name (CN):joyfuller.space
Issuer Distinguished Name (DN):joyfuller.space
TLS Version:TLS 1.2
First seen:2018-12-08 12:25:23 UTC
Last seen:2019-03-11 15:39:28 UTC
Status:Blacklisted
Listing reason:IcedID C&C
Listing date:2018-12-09 09:34:03
Malware samples:2
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-03-11 15:39:28021e33c57b54a42c79ca2bc55dbb6ea4Virustotal results 27/68 (39.71%) IcedID 46.183.218.124:443
2019-03-11 15:39:28021e33c57b54a42c79ca2bc55dbb6ea4Virustotal results 27/68 (39.71%) IcedID 46.183.218.124:443
2018-12-08 12:25:23b7df11a38a2d77720294f4470bd8f0f8Virustotal results 45/71 (63.38%) IcedId 185.66.9.143:443
2018-12-08 12:25:23b7df11a38a2d77720294f4470bd8f0f8Virustotal results 45/71 (63.38%) IcedId 185.66.9.143:443

# of entries: 4 (max: 100)