SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 2e4a9128ea31dd8c6a789f47757847ba89cad228.
Database Entry
| SHA1 Fingerprint: | 2e4a9128ea31dd8c6a789f47757847ba89cad228 |
|---|---|
| Certificate Common Name (CN): | burvehov.frl |
| Issuer Distinguished Name (DN): | burvehov.frl |
| TLS Version: | SSLv3 |
| First seen: | 2015-12-05 00:15:00 UTC |
| Last seen: | 2015-12-12 02:05:02 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-12-05 07:38:40 |
| Malware samples: | 5 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-12-12 02:05:02 | be87ca35e01dba973d7f95caef9a29c5 |  8/55 (14.55%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-12 02:05:02 | be87ca35e01dba973d7f95caef9a29c5 | 8/55 (14.55%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-12 01:08:28 | feaca8ba663190cbff32892312043b27 | 4/55 (7.27%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-12 01:08:28 | feaca8ba663190cbff32892312043b27 | 4/55 (7.27%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-09 12:37:37 | c4909fa2d363136cb762084048fa0b52 | 2/55 (3.64%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-09 12:37:37 | c4909fa2d363136cb762084048fa0b52 | 2/55 (3.64%)
| Dridex | 94.73.155.11:2448 |
| 2015-12-07 15:05:10 | 1c27b6cbd9a3c38c8bf18657271daa65 | 37/56 (66.07%)
| Dridex | 94.73.155.12:2448 |
| 2015-12-07 15:05:10 | 1c27b6cbd9a3c38c8bf18657271daa65 | 37/56 (66.07%)
| Dridex | 94.73.155.12:2448 |
| 2015-12-05 00:15:00 | c2955759f3edea2111436a12811440e1 | 33/50 (66.00%)
| Dridex | 94.73.155.12:2448 |
| 2015-12-05 00:15:00 | c2955759f3edea2111436a12811440e1 | 33/50 (66.00%)
| Dridex | 94.73.155.12:2448 |
# of entries: 10 (max: 100)