SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 509df02a7022bb5da85fcf556bac689d664d6d4c.

Database Entry


SHA1 Fingerprint:509df02a7022bb5da85fcf556bac689d664d6d4c
Certificate Common Name (CN):palmists.space
Issuer Distinguished Name (DN):palmists.space
TLS Version:TLS 1.2
First seen:2019-03-04 12:15:42 UTC
Last seen:2019-04-20 07:57:59 UTC
Status:Blacklisted
Listing reason:IcedID C&C
Listing date:2019-03-04 14:41:28
Malware samples:33
Botnet C&Cs:5

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-04-20 07:57:59f542390ae8c76360e3cf0976a91db511Virustotal results 17/71 (23.94%) 194.28.84.254:443
2019-04-20 06:51:4666a864e1cff2262d050e890c1697bd15Virustotal results 29/66 (43.94%) IcedID 194.28.84.254:443
2019-04-18 22:42:56c9493b0289e08df69d18b23066ce9043Virustotal results 35/70 (50.00%) IcedID 194.28.84.254:443
2019-04-18 18:08:3224741e87572b57dd5955ce1174ef61b7Virustotal results 28/70 (40.00%) IcedID 194.28.84.254:443
2019-04-18 16:56:282f196fca47e0c9722b557d71d45d6c9bVirustotal results 40/70 (57.14%) 194.28.84.254:443
2019-04-06 02:48:376552c422daff0ba6e77770b5d2cfc816Virustotal results 8/71 (11.27%) 91.230.61.178:443
2019-03-26 18:41:32741af2b549b2b8a9ce725ca08d20ba0bVirustotal results 38/64 (59.38%) IcedID 185.48.56.231:443
2019-03-22 14:25:07fef94ea166a466b36722844bb4dae20bVirustotal results 40/66 (60.61%) IcedID 185.48.56.231:443
2019-03-17 20:19:0328e6e38e7b688be8ae2b1bc2eb033bc1Virustotal results 22/63 (34.92%) 185.48.56.231:443
2019-03-15 14:34:49797bffd3459a3f9e541d5b9d6e0961bfVirustotal results 21/65 (32.31%) IcedID 185.48.56.231:443
2019-03-14 17:33:43eda81b8797b40fc7ca7fae27a4831bcdVirustotal results 16/64 (25.00%) IcedID 185.48.56.231:443
2019-03-11 09:32:51e8fc03b7d3b2d03ec7dcbc8c26e5d301Virustotal results 42/68 (61.76%) IcedID 109.94.209.127:443
2019-03-10 09:20:57299191e4e449d8db47749b817d5281ebn/a109.94.209.127:443
2019-03-09 11:30:4942dc6c4541e822ad8bcce23b7a9800b1Virustotal results 9/68 (13.24%) IcedID 109.94.209.127:443
2019-03-09 04:31:5290c43535190ce8627babbd0f20e9f058Virustotal results 36/64 (56.25%) IcedID 109.94.209.127:443
2019-03-08 00:57:17ba250e5972ee00fa3c964335b4d24131Virustotal results 37/61 (60.66%) IcedID 109.94.209.127:443
2019-03-07 14:34:07e12b6d2384e392da6cf6ebc2fcc6c425Virustotal results 17/69 (24.64%) IcedID 109.94.209.127:443
2019-03-07 13:00:07844c10e1ba396663bda5fbfc0619437cVirustotal results 42/63 (66.67%) IcedID 109.94.209.127:443
2019-03-06 00:29:165ee8bb8f0f75002df7374b9564e55a81Virustotal results 41/66 (62.12%) IcedID 109.94.209.127:443
2019-03-05 05:50:18452f2047734f4774ddf1b4eab53bf90aVirustotal results 34/65 (52.31%) IcedID 146.120.110.93:443
2019-03-05 05:40:445b229e42b6987054c8b5bb33de117cc7Virustotal results 36/65 (55.38%) IcedID 146.120.110.93:443
2019-03-05 05:19:305bcfeb376b1e96aba75c4f4ab5b34a38Virustotal results 36/68 (52.94%) IcedID 146.120.110.93:443
2019-03-05 05:06:0066a0a3a62749ce2b1427a6d3ca6bd2efVirustotal results 37/65 (56.92%) IcedID 146.120.110.93:443
2019-03-05 03:57:254e1d189cbb9332acb1bb1dcd06b23e7cVirustotal results 38/69 (55.07%) IcedID 146.120.110.93:443
2019-03-05 03:50:43b5ea9103504e010383b50e64bd79ec78Virustotal results 34/64 (53.12%) IcedID 146.120.110.93:443
2019-03-05 03:18:0204ad6630948b2484d6c649a7a689f682Virustotal results 36/63 (57.14%) IcedID 146.120.110.93:443
2019-03-04 23:52:4950d0fdd9714aaf77b10c599281b0b5faVirustotal results 36/62 (58.06%) IcedID 146.120.110.93:443
2019-03-04 21:17:423f234ac38d5abcde9fd1e2f135abf39eVirustotal results 28/63 (44.44%) IcedID 146.120.110.93:443
2019-03-04 20:30:23d40ab13bcea243e437b6856d840137f4Virustotal results 33/63 (52.38%) 146.120.110.93:443
2019-03-04 18:25:36638586e885727f7b24df1e048448c6fbVirustotal results 16/64 (25.00%) IcedID 146.120.110.93:443
2019-03-04 18:22:5640b93c72d2ea8db655455277e42f254dVirustotal results 40/63 (63.49%) IcedID 146.120.110.93:443
2019-03-04 17:14:279384bd0faa4788e936e2063fa4921fecVirustotal results 36/65 (55.38%) IcedID 146.120.110.93:443
2019-03-04 12:15:4229019aa14f7cd619e625c8d8f3083e6aVirustotal results 36/64 (56.25%) IcedID 146.120.110.93:443

# of entries: 33 (max: 100)