SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 527831abf9ec62b08c759c9c146fe9c38b8c694a.
Database Entry
| SHA1 Fingerprint: | 527831abf9ec62b08c759c9c146fe9c38b8c694a |
|---|---|
| Certificate Common Name (CN): | blatnoidomen.com |
| Issuer Distinguished Name (DN): | AlphaSSL CA - SHA256 - G2 |
| TLS Version: | SSLv3 |
| First seen: | 2015-09-01 01:17:50 UTC |
| Last seen: | 2015-09-02 06:21:53 UTC |
| Status: | Blacklisted |
| Listing reason: | Shifu C&C |
| Listing date: | 2015-09-22 06:46:55 |
| Malware samples: | 2 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-09-02 06:21:53 | d07f6a52bbdffbad227b6e5991ee627f |  20/57 (35.09%)
| Shifu | 5.149.249.181:443 |
| 2015-09-02 06:21:53 | d07f6a52bbdffbad227b6e5991ee627f | 20/57 (35.09%)
| Shifu | 5.149.249.181:443 |
| 2015-09-01 01:17:50 | 189f6a4be8e82083155d56e00682ea89 | 10/57 (17.54%)
| Shifu | 5.149.249.181:443 |
| 2015-09-01 01:17:50 | 189f6a4be8e82083155d56e00682ea89 | 10/57 (17.54%)
| Shifu | 5.149.249.181:443 |
# of entries: 4 (max: 100)