SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 4a0557913a4b6e5a8e69745b41149e5b16f8964f.

Database Entry


SHA1 Fingerprint:4a0557913a4b6e5a8e69745b41149e5b16f8964f
Certificate Common Name (CN):proat.com
Issuer Distinguished Name (DN):proat.com
TLS Version:TLS 1.2
First seen:2018-05-31 11:10:56 UTC
Last seen:2018-06-10 01:14:42 UTC
Status:Blacklisted
Listing reason:Quakbot C&C
Listing date:2018-07-16 13:17:43
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-06-10 01:14:4256d7dcff548e4294a6f919ed019d994cVirustotal results 13/65 (20.00%) Quakbot71.85.72.9:443
2018-06-10 01:14:4256d7dcff548e4294a6f919ed019d994cVirustotal results 13/65 (20.00%) Quakbot71.85.72.9:443
2018-06-01 17:16:52024a67c4a601046f2c9f0a40a034fe86Virustotal results 44/66 (66.67%) Quakbot71.85.72.9:443
2018-06-01 17:16:52024a67c4a601046f2c9f0a40a034fe86Virustotal results 44/66 (66.67%) Quakbot71.85.72.9:443
2018-05-31 11:10:56efcc4de4a7771bfd95fb7631a0d145dbVirustotal results 37/65 (56.92%) Quakbot71.85.72.9:443
2018-05-31 11:10:56efcc4de4a7771bfd95fb7631a0d145dbVirustotal results 37/65 (56.92%) Quakbot71.85.72.9:443

# of entries: 6 (max: 100)