SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 34aa83727f2be543fecc45f474fc5af46cc77287.

Database Entry


SHA1 Fingerprint:34aa83727f2be543fecc45f474fc5af46cc77287
Certificate Common Name (CN):ofsrelethatmin.tk
Issuer Distinguished Name (DN):ofsrelethatmin.tk
TLS Version:TLS 1.2
First seen:2015-12-15 18:58:18 UTC
Last seen:2016-01-08 16:59:15 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-12-16 06:03:22
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-01-08 16:59:15a81a19478dbe13778f06191cf39c8143Virustotal results 6/54 (11.11%) Dridex 80.96.150.201:9943
2016-01-08 16:59:15a81a19478dbe13778f06191cf39c8143Virustotal results 6/54 (11.11%) Dridex 80.96.150.201:9943
2015-12-15 18:58:18f4dcd9f9868aa0bbbedf279149f67892Virustotal results 8/54 (14.81%) Dridex 80.96.150.201:9943
2015-12-15 18:58:18f4dcd9f9868aa0bbbedf279149f67892Virustotal results 8/54 (14.81%) Dridex 80.96.150.201:9943

# of entries: 4 (max: 100)