SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 495daa71be4c93361272ebbbcef6009a46fddeaa.
Database Entry
| SHA1 Fingerprint: | 495daa71be4c93361272ebbbcef6009a46fddeaa |
|---|---|
| Certificate Common Name (CN): | southnorth.org |
| Issuer Distinguished Name (DN): | southnorth.org |
| TLS Version: | SSLv3 |
| First seen: | 2015-05-27 04:44:27 UTC |
| Last seen: | 2015-05-29 15:09:15 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-05-28 09:06:22 |
| Malware samples: | 4 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-05-29 15:09:15 | 8a3cde828322fa6dc189627f1e987012 |  21/57 (36.84%)
| Dridex | 178.32.53.123:443 |
| 2015-05-29 15:09:15 | 8a3cde828322fa6dc189627f1e987012 | 21/57 (36.84%)
| Dridex | 178.32.53.123:443 |
| 2015-05-27 23:44:06 | 39641ca134d30da1dd93ea663f6c024c | 33/56 (58.93%)
| Dridex | 95.163.121.137:443 |
| 2015-05-27 23:44:06 | 39641ca134d30da1dd93ea663f6c024c | 33/56 (58.93%)
| Dridex | 95.163.121.137:443 |
| 2015-05-27 15:29:06 | 3b3584ca242581605f812ca385461ae1 | 39/56 (69.64%)
| 95.163.121.137:443 | |
| 2015-05-27 15:29:06 | 3b3584ca242581605f812ca385461ae1 | 39/56 (69.64%)
| 95.163.121.137:443 | |
| 2015-05-27 04:44:27 | 3cecc935eb92ed03dc9908fc96b0f795 | 35/57 (61.40%)
| Dridex | 95.163.121.137:443 |
| 2015-05-27 04:44:27 | 3cecc935eb92ed03dc9908fc96b0f795 | 35/57 (61.40%)
| Dridex | 95.163.121.137:443 |
# of entries: 8 (max: 100)