SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 3583d51f40329a49282b52bafc8251d55531faa1.

Database Entry


SHA1 Fingerprint:3583d51f40329a49282b52bafc8251d55531faa1
Certificate Common Name (CN):thtwhenhangagy.it
Issuer Distinguished Name (DN):thtwhenhangagy.it
TLS Version:TLSv1
First seen:2015-07-10 18:13:33 UTC
Last seen:2015-07-12 16:57:33 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-07-13 07:25:32
Malware samples:5
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-12 16:57:33c35724366b56798cb9d084d8c3a4fc56n/aDridex 79.143.191.147:6443
2015-07-12 16:57:33c35724366b56798cb9d084d8c3a4fc56n/aDridex 79.143.191.147:6443
2015-07-11 23:55:21db25a869ba7a14806cb917625f46be07Virustotal results 0/55 (0.00%) Dridex 79.143.191.147:6443
2015-07-11 23:55:21db25a869ba7a14806cb917625f46be07Virustotal results 0/55 (0.00%) Dridex 79.143.191.147:6443
2015-07-11 18:38:28587803ef6da656ee38ab93a0ea091babVirustotal results 3/56 (5.36%) Dridex 79.143.191.147:6443
2015-07-11 18:38:28587803ef6da656ee38ab93a0ea091babVirustotal results 3/56 (5.36%) Dridex 79.143.191.147:6443
2015-07-11 14:23:041f23f467f12ca8f523e76d6953a0148bVirustotal results 4/55 (7.27%) Dridex 79.143.191.147:6443
2015-07-11 14:23:041f23f467f12ca8f523e76d6953a0148bVirustotal results 4/55 (7.27%) Dridex 79.143.191.147:6443
2015-07-10 18:13:33a3144ab525c8976947a941bcce7945dbVirustotal results 2/56 (3.57%) 79.143.191.147:6443
2015-07-10 18:13:33a3144ab525c8976947a941bcce7945dbVirustotal results 2/56 (3.57%) 79.143.191.147:6443

# of entries: 10 (max: 100)