SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 35962b05f2defddfe334a459e912219a32ed325c.
Database Entry
| SHA1 Fingerprint: | 35962b05f2defddfe334a459e912219a32ed325c |
|---|---|
| Certificate Common Name (CN): | ezcube.ru |
| Issuer Distinguished Name (DN): | R3 |
| TLS Version: | TLS 1.2 |
| First seen: | 2021-06-07 18:39:25 UTC |
| Last seen: | 2021-06-11 07:10:31 UTC |
| Status: | Blacklisted |
| Listing reason: | Malware C&C |
| Listing date: | 2021-06-10 06:33:01 |
| Malware samples: | 17 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2021-06-11 07:10:31 | 2c663b3f330f2adfda4339c8990f53c2 |  46 / 69 (66.67%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-11 07:10:31 | 2c663b3f330f2adfda4339c8990f53c2 | 46 / 69 (66.67%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-11 05:29:45 | 86234cc193309f58baa991edc17e6e4c | 40 / 69 (57.97%)
| FickerStealer | 185.239.243.112:443 |
| 2021-06-11 05:29:45 | 86234cc193309f58baa991edc17e6e4c | 40 / 69 (57.97%)
| FickerStealer | 185.239.243.112:443 |
| 2021-06-11 05:20:13 | 84d7fc6978ca74c42913acdf24acc31d | 42 / 69 (60.87%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-11 05:20:13 | 84d7fc6978ca74c42913acdf24acc31d | 42 / 69 (60.87%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-11 04:10:25 | 678f949b944feed0bfc4d93c6c99647d | 39 / 67 (58.21%)
| RedLineStealer | 185.239.243.112:443 |
| 2021-06-11 04:10:25 | 678f949b944feed0bfc4d93c6c99647d | 39 / 67 (58.21%)
| RedLineStealer | 185.239.243.112:443 |
| 2021-06-11 00:27:23 | 0280fb07ef705ee4bcf30994004271ed | 46 / 69 (66.67%)
| Smoke Loader | 185.239.243.112:443 |
| 2021-06-11 00:27:23 | 0280fb07ef705ee4bcf30994004271ed | 46 / 69 (66.67%)
| Smoke Loader | 185.239.243.112:443 |
| 2021-06-10 20:07:35 | 2eff901ef4cf8b00de5175f76d3ac063 | 28 / 70 (40.00%)
| RedLineStealer | 185.239.243.112:443 |
| 2021-06-10 20:07:35 | 2eff901ef4cf8b00de5175f76d3ac063 | 28 / 70 (40.00%)
| RedLineStealer | 185.239.243.112:443 |
| 2021-06-10 20:02:05 | 2addaadc910383f2753b62c8e1cde0c0 | 26 / 69 (37.68%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-10 20:02:05 | 2addaadc910383f2753b62c8e1cde0c0 | 26 / 69 (37.68%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-10 19:55:59 | 41ccf2991faf22d76a6d0f1bc576676c | 33 / 69 (47.83%)
| NetSupport | 185.239.243.112:443 |
| 2021-06-10 19:55:59 | 41ccf2991faf22d76a6d0f1bc576676c | 33 / 69 (47.83%)
| NetSupport | 185.239.243.112:443 |
| 2021-06-10 01:38:54 | eba289a809ed60ec21d064268fdf0bb3 | 48 / 70 (68.57%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-10 01:38:54 | eba289a809ed60ec21d064268fdf0bb3 | 48 / 70 (68.57%)
| Adware.FileTour | 185.239.243.112:443 |
| 2021-06-09 23:08:00 | e12b3d810276e5300981cdbbe7cda010 | 41 / 69 (59.42%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-09 23:08:00 | e12b3d810276e5300981cdbbe7cda010 | 41 / 69 (59.42%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-09 19:32:13 | 89807de693c5d845d463f6da8990befd | 39 / 70 (55.71%)
| RaccoonStealer | 185.239.243.112:443 |
| 2021-06-09 19:32:13 | 89807de693c5d845d463f6da8990befd | 39 / 70 (55.71%)
| RaccoonStealer | 185.239.243.112:443 |
| 2021-06-09 16:23:17 | d0cd0b55d658b5c1109f87af54cf7a0f | 27 / 70 (38.57%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-09 16:23:17 | d0cd0b55d658b5c1109f87af54cf7a0f | 27 / 70 (38.57%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-08 21:55:54 | 033aeb2c4b8b4432572f524240218117 | 24 / 68 (35.29%)
| RaccoonStealer | 185.239.243.112:443 |
| 2021-06-08 21:55:54 | 033aeb2c4b8b4432572f524240218117 | 24 / 68 (35.29%)
| RaccoonStealer | 185.239.243.112:443 |
| 2021-06-08 10:11:19 | af362f72300208164c8822e1ee3a9d6f | 30 / 70 (42.86%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-08 10:11:19 | af362f72300208164c8822e1ee3a9d6f | 30 / 70 (42.86%)
| ArkeiStealer | 185.239.243.112:443 |
| 2021-06-07 22:22:40 | 5f0a9910cbd57c9fa69c2ed2f484d4a1 | 37 / 70 (52.86%)
| CoinMiner | 185.239.243.112:443 |
| 2021-06-07 22:22:40 | 5f0a9910cbd57c9fa69c2ed2f484d4a1 | 37 / 70 (52.86%)
| CoinMiner | 185.239.243.112:443 |
| 2021-06-07 20:18:19 | ba1d74087dc03c20bb8550580817ad17 | 27 / 69 (39.13%)
| 185.239.243.112:443 | |
| 2021-06-07 20:18:19 | ba1d74087dc03c20bb8550580817ad17 | 27 / 69 (39.13%)
| 185.239.243.112:443 | |
| 2021-06-07 18:39:25 | 18be39daf69b6139f2e8c7e96cac0a5f | n/a | ArkeiStealer | 185.239.243.112:443 |
| 2021-06-07 18:39:25 | 18be39daf69b6139f2e8c7e96cac0a5f | n/a | ArkeiStealer | 185.239.243.112:443 |
# of entries: 34 (max: 100)