SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 4273d103c5fec2ede6f9cad092a83417a43fe741.
Database Entry
| SHA1 Fingerprint: | 4273d103c5fec2ede6f9cad092a83417a43fe741 |
|---|---|
| Certificate Common Name (CN): | disaaxpalallow.me |
| Issuer Distinguished Name (DN): | COMODO RSA Domain Validation Secure Server CA |
| TLS Version: | TLSv1 |
| First seen: | 2016-08-28 13:46:03 UTC |
| Last seen: | 2016-12-13 16:59:04 UTC |
| Status: | Blacklisted |
| Listing reason: | Gozi C&C |
| Listing date: | 2016-12-15 14:11:48 |
| Malware samples: | 3 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-12-13 16:59:04 | 50752cba6ac343b18c750d8ad5e8d8ee |  14/57 (24.56%)
| Gozi | 62.75.195.117:443 |
| 2016-12-13 16:59:04 | 50752cba6ac343b18c750d8ad5e8d8ee | 14/57 (24.56%)
| Gozi | 62.75.195.117:443 |
| 2016-09-26 08:29:15 | 08f1c11106c4a30830e7c4365430b555 | n/a | Gozi | 62.75.195.117:443 |
| 2016-09-26 08:29:15 | 08f1c11106c4a30830e7c4365430b555 | n/a | Gozi | 62.75.195.117:443 |
| 2016-08-28 13:46:03 | 0933031521c9d458e3361612ec93c4f2 | n/a | 62.75.195.103:443 | |
| 2016-08-28 13:46:03 | 0933031521c9d458e3361612ec93c4f2 | n/a | 62.75.195.103:443 |
# of entries: 6 (max: 100)