SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 4a48decfeb6a4aea4410a77ad308f1b0108ceaa5.
Database Entry
| SHA1 Fingerprint: | 4a48decfeb6a4aea4410a77ad308f1b0108ceaa5 |
|---|---|
| Certificate Common Name (CN): | localhost |
| Issuer Distinguished Name (DN): | localhost |
| TLS Version: | TLSv1 |
| First seen: | 2016-04-28 15:53:06 UTC |
| Last seen: | 2016-05-19 13:45:15 UTC |
| Status: | Blacklisted |
| Listing reason: | Gootkit C&C |
| Listing date: | 2016-05-19 17:34:21 |
| Malware samples: | 3 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2016-05-19 13:45:15 | b9741b15b1f2fdb3688c6a30e2e480a4 | Gootkit | 199.68.198.132:80 | |
| 2016-05-19 13:45:15 | b9741b15b1f2fdb3688c6a30e2e480a4 | Gootkit | 199.68.198.132:80 | |
| 2016-05-19 09:55:39 | b69a1640acdefcbb2dae0468b749ffb6 | Gootkit | 199.68.198.132:80 | |
| 2016-05-19 09:55:39 | b69a1640acdefcbb2dae0468b749ffb6 | Gootkit | 199.68.198.132:80 | |
| 2016-04-28 15:53:06 | 01def4ea12d02a4b769f0e2003c37275 | 199.68.198.132:80 | ||
| 2016-04-28 15:53:06 | 01def4ea12d02a4b769f0e2003c37275 | 199.68.198.132:80 |
# of entries: 6 (max: 100)