SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 52a252a714d391228c4f791b4a0bfee13df36a93.

Database Entry


SHA1 Fingerprint:52a252a714d391228c4f791b4a0bfee13df36a93
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2' NOTBEF
First seen:2021-03-17 14:22:18 UTC
Last seen:2021-03-18 07:42:31 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2021-03-18 06:55:32
Malware samples:10
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-03-18 07:42:315fd20c1884f0ed0c8e72b0ff041c2db1n/aGozi 185.189.151.126:443
2021-03-18 07:39:576eb4e9eae07825cd09510e107239f41dn/aGozi 185.189.151.126:443
2021-03-18 07:38:2872982390e4f5196a541cc7f3b4bed79fn/aGozi 185.189.151.126:443
2021-03-18 07:34:46390357cbc38965bfc9e53b8428fe59ben/aGozi 185.189.151.126:443
2021-03-18 07:29:54bae60f2c8a14eb4bb86366508a86092fn/aGozi 185.189.151.126:443
2021-03-18 06:44:50878c75d9cf00b6ef98231cc6a3e34a36n/aGozi 185.189.151.126:443
2021-03-18 05:43:5911fabcb45618b325da47dadd6dbe4ca7n/aGozi 185.189.151.126:443
2021-03-17 21:54:29b53edc7386e80162fbccfc6fb16dddc5n/aGozi 185.189.151.126:443
2021-03-17 17:50:42d25e57a088d1328f444d9f60828b478cn/aQuakbot185.189.151.126:443
2021-03-17 14:22:184a974598ecf53d58875df09db2db3f4dn/aQuakbot185.189.151.126:443

# of entries: 10 (max: 100)