SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 446ecf82fa1aec7f00a047ffe24b2b597c9ac08e.
Database Entry
| SHA1 Fingerprint: | 446ecf82fa1aec7f00a047ffe24b2b597c9ac08e |
|---|---|
| Certificate Common Name (CN): | ihjfahpwb.biz |
| Issuer Distinguished Name (DN): | ihjfahpwb.biz |
| TLS Version: | TLS 1.2 |
| First seen: | 2016-04-05 13:43:23 UTC |
| Last seen: | 2016-04-09 13:11:50 UTC |
| Status: | Blacklisted |
| Listing reason: | Quakbot C&C |
| Listing date: | 2016-04-09 10:04:24 |
| Malware samples: | 8 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-04-09 13:11:50 | 73c1d92f1cab634f13b4a60d9291ecb6 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 13:11:50 | 73c1d92f1cab634f13b4a60d9291ecb6 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 11:53:17 | e5ccbcc4ee76c3a298e0221cde30344a | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 11:53:17 | e5ccbcc4ee76c3a298e0221cde30344a | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 11:25:19 | ea89aa5b2d83970571eec553ca34ed1a | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 11:25:19 | ea89aa5b2d83970571eec553ca34ed1a | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-09 07:52:04 | 97f91188f282c9a7a0154ce0703e8dc5 |  31/57 (54.39%)
| Quakbot | 198.144.184.96:443 |
| 2016-04-09 07:52:04 | 97f91188f282c9a7a0154ce0703e8dc5 | 31/57 (54.39%)
| Quakbot | 198.144.184.96:443 |
| 2016-04-08 02:39:52 | c5fbef67a126533e3a5cffadb3745ed0 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-08 02:39:52 | c5fbef67a126533e3a5cffadb3745ed0 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-07 06:08:21 | 5b598a4bd09e2ed36d67421c0ee76ab8 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-07 06:08:21 | 5b598a4bd09e2ed36d67421c0ee76ab8 | n/a | Quakbot | 198.144.184.96:443 |
| 2016-04-05 14:28:11 | 939b3e75a19d2b7afda3f92f1e7e2fc5 | n/a | Quakbot | 191.101.251.163:443 |
| 2016-04-05 14:28:11 | 939b3e75a19d2b7afda3f92f1e7e2fc5 | n/a | Quakbot | 191.101.251.163:443 |
| 2016-04-05 13:43:23 | 80aa6456381969af971374711d78209c | n/a | Quakbot | 191.101.251.163:443 |
| 2016-04-05 13:43:23 | 80aa6456381969af971374711d78209c | n/a | Quakbot | 191.101.251.163:443 |
# of entries: 16 (max: 100)