SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 52de995a2469c6fd5f434b1e9a328799558926c9.

Database Entry


SHA1 Fingerprint:52de995a2469c6fd5f434b1e9a328799558926c9
Certificate Common Name (CN):tonotherondde.ve
Issuer Distinguished Name (DN):tonotherondde.ve
TLS Version:TLS 1.2
First seen:2015-07-22 01:15:30 UTC
Last seen:2015-07-23 12:17:33 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-07-22 06:24:00
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-23 12:17:335ff793211e76a036f60a933cc21c4897Virustotal results 2/55 (3.64%) Dridex 95.163.121.252:443
2015-07-23 12:17:335ff793211e76a036f60a933cc21c4897Virustotal results 2/55 (3.64%) Dridex 95.163.121.252:443
2015-07-23 11:16:5699d4d4560b67b4c00459630d1d7735d1Virustotal results 4/55 (7.27%) Dridex 95.163.121.252:443
2015-07-23 11:16:5699d4d4560b67b4c00459630d1d7735d1Virustotal results 4/55 (7.27%) Dridex 95.163.121.252:443
2015-07-22 01:15:30e3edd95312cbe7d4cde9c2d9ec251ee2Virustotal results 1/55 (1.82%) Dridex 95.163.121.252:443
2015-07-22 01:15:30e3edd95312cbe7d4cde9c2d9ec251ee2Virustotal results 1/55 (1.82%) Dridex 95.163.121.252:443

# of entries: 6 (max: 100)