SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 4112fd7e6a5f6d4990ef99d310c1e2031523be38.
Database Entry
| SHA1 Fingerprint: | 4112fd7e6a5f6d4990ef99d310c1e2031523be38 |
|---|---|
| Certificate Common Name (CN): | Orcus Server |
| Issuer Distinguished Name (DN): | Orcus Server |
| TLS Version: | TLSv1 |
| First seen: | 2018-12-02 00:14:24 UTC |
| Last seen: | 2019-08-16 11:59:38 UTC |
| Status: | Blacklisted |
| Listing reason: | OrcusRAT C&C |
| Listing date: | 2018-12-02 14:31:07 |
| Malware samples: | 7 |
| Botnet C&Cs: | 5 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2019-08-16 11:59:38 | 3d8809b098cda9577bb6a6fb038ffa63 |  19 / 66 (28.79%)
| OrcusRAT | 109.234.34.133:10134 |
| 2019-08-16 11:59:38 | 3d8809b098cda9577bb6a6fb038ffa63 | 19 / 66 (28.79%)
| OrcusRAT | 109.234.34.133:10134 |
| 2019-03-12 01:35:54 | 140b7bfc1d82899ba452e171bc635344 | 27/62 (43.55%)
| OrcusRAT | 13.53.94.89:25565 |
| 2019-03-12 01:35:54 | 140b7bfc1d82899ba452e171bc635344 | 27/62 (43.55%)
| OrcusRAT | 13.53.94.89:25565 |
| 2019-03-10 17:22:36 | 5da690292e7b8d785691bf2d182ba58f | 37/64 (57.81%)
| OrcusRAT | 13.53.94.89:25565 |
| 2019-03-10 17:22:36 | 5da690292e7b8d785691bf2d182ba58f | 37/64 (57.81%)
| OrcusRAT | 13.53.94.89:25565 |
| 2019-02-26 11:48:18 | d434acd2238c290a4ef72e19277ddf44 | 26/70 (37.14%)
| OrcusRAT | 3.121.182.157:1604 |
| 2019-02-26 11:48:18 | d434acd2238c290a4ef72e19277ddf44 | 26/70 (37.14%)
| OrcusRAT | 3.121.182.157:1604 |
| 2019-02-26 09:52:53 | 4f2607faec3cb30dc8c476c7029f9046 | 21/66 (31.82%)
| Spambot.Kelihos | 3.121.182.157:1604 |
| 2019-02-26 09:52:53 | 4f2607faec3cb30dc8c476c7029f9046 | 21/66 (31.82%)
| Spambot.Kelihos | 3.121.182.157:1604 |
| 2018-12-20 10:18:37 | 9b7198c4c83728544165932dfb266f32 | 6/70 (8.57%)
| LimeRAT | 160.20.147.219:1000 |
| 2018-12-20 10:18:37 | 9b7198c4c83728544165932dfb266f32 | 6/70 (8.57%)
| LimeRAT | 160.20.147.219:1000 |
| 2018-12-02 00:14:24 | b1648ae29325ae12cf60e5587f50202d | 48/70 (68.57%)
| OrcusRAT | 109.234.36.198:1616 |
| 2018-12-02 00:14:24 | b1648ae29325ae12cf60e5587f50202d | 48/70 (68.57%)
| OrcusRAT | 109.234.36.198:1616 |
# of entries: 14 (max: 100)