SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 4e73f6155ee7d6ab862fb322cd8a3dd29c0b8958.

Database Entry

SHA1 Fingerprint:	4e73f6155ee7d6ab862fb322cd8a3dd29c0b8958
Certificate Common Name (CN):	bexca.org
Issuer Distinguished Name (DN):	WE1
TLS Version:	TLS 1.2
First seen:	2026-01-22 14:48:48 UTC
Last seen:	2026-01-27 15:51:59 UTC
Status:	Blacklisted
Listing reason:	Vidar C&C
Listing date:	2026-02-04 13:12:18
Malware samples:	16
Botnet C&Cs:	2

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Botnet C&C (IP:port)
2026-01-27 15:51:59	793813ddcc1ea542c98b0c082a025a2a	n/a	172.67.159.144:443
2026-01-27 03:18:20	5f2e19fa89441c85439df0ef374488d9	n/a	172.67.159.144:443
2026-01-25 17:37:20	1a3339e77d15564672da49cbc9b05ccb	n/a	104.21.57.56:443
2026-01-24 19:34:25	8c864fbc472fafb816942e73731eb9f8	n/a	172.67.159.144:443
2026-01-24 17:55:09	69bcac5be1b4dbc4c864674bde8efe0e	n/a	104.21.57.56:443
2026-01-24 11:27:16	d4eba24211012a7080a983e630cb5d18	n/a	172.67.159.144:443
2026-01-23 19:44:20	fa20f9f479ea18e75bda41d4600ea45a	n/a	172.67.159.144:443
2026-01-23 18:38:10	473d1a577989f6d77f2327aacecbdc71	n/a	172.67.159.144:443
2026-01-23 10:08:09	9aae289de2a344c8f84656da941a33c4	n/a	172.67.159.144:443
2026-01-23 03:42:32	f43ebb7c5ab0de7423a3a2c5ed101bf6	n/a	104.21.57.56:443
2026-01-22 21:52:12	653706c79edec9c5d64ad6afbe56b420	n/a	104.21.57.56:443
2026-01-22 20:58:09	acccc1b40483255b0fdf1e59714f3bcf	n/a	172.67.159.144:443
2026-01-22 19:02:18	9fc8253dca462ae602605b676a9e7bba	n/a	104.21.57.56:443
2026-01-22 18:10:33	bbef5e097987e72a2da600021bb9053b	n/a	172.67.159.144:443
2026-01-22 14:52:47	c54bf8276bb2360e6623fbdf928dd8ca	n/a	104.21.57.56:443
2026-01-22 14:48:48	dea48642c02741dcdb1709ecfd305afa	n/a	172.67.159.144:443

# of entries: 16 (max: 100)