SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 446ecf82fa1aec7f00a047ffe24b2b597c9ac08e.

Database Entry


SHA1 Fingerprint:446ecf82fa1aec7f00a047ffe24b2b597c9ac08e
Certificate Common Name (CN):ihjfahpwb.biz
Issuer Distinguished Name (DN):ihjfahpwb.biz
TLS Version:TLS 1.2
First seen:2016-04-05 13:43:23 UTC
Last seen:2016-04-09 13:11:50 UTC
Status:Blacklisted
Listing reason:Quakbot C&C
Listing date:2016-04-09 10:04:24
Malware samples:8
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-04-09 13:11:5073c1d92f1cab634f13b4a60d9291ecb6n/aQuakbot198.144.184.96:443
2016-04-09 11:53:17e5ccbcc4ee76c3a298e0221cde30344an/aQuakbot198.144.184.96:443
2016-04-09 11:25:19ea89aa5b2d83970571eec553ca34ed1an/aQuakbot198.144.184.96:443
2016-04-09 07:52:0497f91188f282c9a7a0154ce0703e8dc5Virustotal results 31/57 (54.39%) Quakbot198.144.184.96:443
2016-04-08 02:39:52c5fbef67a126533e3a5cffadb3745ed0n/aQuakbot198.144.184.96:443
2016-04-07 06:08:215b598a4bd09e2ed36d67421c0ee76ab8n/aQuakbot198.144.184.96:443
2016-04-05 14:28:11939b3e75a19d2b7afda3f92f1e7e2fc5n/aQuakbot191.101.251.163:443
2016-04-05 13:43:2380aa6456381969af971374711d78209cn/aQuakbot191.101.251.163:443

# of entries: 8 (max: 100)