SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 51fa6c8107cde55976a035992e490e6f100a1ca1.

Database Entry


SHA1 Fingerprint:51fa6c8107cde55976a035992e490e6f100a1ca1
Certificate Common Name (CN):example.com
Issuer Distinguished Name (DN):example.com
TLS Version:TLS 1.2
First seen:2018-05-24 12:52:56 UTC
Last seen:2018-05-27 02:24:30 UTC
Status:Blacklisted
Listing reason:TrickBot C&C
Listing date:2018-05-24 12:57:42
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-05-27 02:24:300f8bb4ca1e5d47f3a65f280469439744Virustotal results 49/66 (74.24%) Trickbot 109.234.35.166:447
2018-05-27 02:24:300f8bb4ca1e5d47f3a65f280469439744Virustotal results 49/66 (74.24%) Trickbot 109.234.35.166:447
2018-05-25 03:21:2371d277d14440d744726f442c19f5fc62Virustotal results 37/66 (56.06%) Trickbot 109.234.35.166:447
2018-05-25 03:21:2371d277d14440d744726f442c19f5fc62Virustotal results 37/66 (56.06%) Trickbot 109.234.35.166:447
2018-05-24 23:29:54ce9a40aec2e4610aa7ed179cbe30e7d1Virustotal results 46/66 (69.70%) TrickBot 109.234.35.166:447
2018-05-24 23:29:54ce9a40aec2e4610aa7ed179cbe30e7d1Virustotal results 46/66 (69.70%) TrickBot 109.234.35.166:447
2018-05-24 12:52:56edccfe5ef48de6b0f3bbf53cc1012533Virustotal results 11/66 (16.67%) TrickBot 109.234.35.166:447
2018-05-24 12:52:56edccfe5ef48de6b0f3bbf53cc1012533Virustotal results 11/66 (16.67%) TrickBot 109.234.35.166:447

# of entries: 8 (max: 100)