SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 34dc882d28b3c17ff3df9a6bbe406145449f288e.

Database Entry


SHA1 Fingerprint:34dc882d28b3c17ff3df9a6bbe406145449f288e
Certificate Common Name (CN):NinaDobrev
Issuer Distinguished Name (DN):NinaDobrev
TLS Version:TLS 1.2
First seen:2021-07-15 12:00:16 UTC
Last seen:2021-08-01 23:31:08 UTC
Status:Blacklisted
Listing reason:BitRAT C&C
Listing date:2021-07-15 13:45:59
Malware samples:4
Botnet C&Cs:4

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-08-01 23:31:0841965fc5d071ce4b42bba9b7c486f784Virustotal results 34 / 68 (50.00%) BitRAT91.109.180.8:25874
2021-08-01 23:31:0841965fc5d071ce4b42bba9b7c486f784Virustotal results 34 / 68 (50.00%) BitRAT91.109.180.8:25874
2021-07-25 22:42:16260974cf7cd8c4f6dc9af96ed8f96e39Virustotal results 42 / 70 (60.00%) BitRAT91.109.186.4:25874
2021-07-25 22:42:16260974cf7cd8c4f6dc9af96ed8f96e39Virustotal results 42 / 70 (60.00%) BitRAT91.109.186.4:25874
2021-07-18 15:32:2880b4bade5685de1c11fba8fae8c78b91Virustotal results 38 / 68 (55.88%) BitRAT91.109.190.9:25874
2021-07-18 15:32:2880b4bade5685de1c11fba8fae8c78b91Virustotal results 38 / 68 (55.88%) BitRAT91.109.190.9:25874
2021-07-15 12:00:16c422444e1ea79c35e7e83f2beabf052eVirustotal results 43 / 67 (64.18%) BitRAT91.109.190.4:25874
2021-07-15 12:00:16c422444e1ea79c35e7e83f2beabf052eVirustotal results 43 / 67 (64.18%) BitRAT91.109.190.4:25874

# of entries: 8 (max: 100)