SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 53584969dc1d06b9153c78ef29846db0457efa87.

Database Entry


SHA1 Fingerprint:53584969dc1d06b9153c78ef29846db0457efa87
Certificate Common Name (CN):OrcusServerCertificate
Issuer Distinguished Name (DN):OrcusServerCertificate
TLS Version:TLSv1
First seen:2019-06-17 02:27:27 UTC
Last seen:2019-11-25 19:17:49 UTC
Status:Blacklisted
Listing reason:OrcusRAT C&C
Listing date:2019-11-26 14:51:29
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-11-25 19:17:49a1ad1d8bf556fc22d2cd51c59e7e772eVirustotal results 57 / 69 (82.61%) 176.227.191.12:2002
2019-06-17 02:27:27bc829ab349849c27f1d96e3164387a82Virustotal results 47/70 (67.14%) Worm.Ribaj176.227.191.12:2002

# of entries: 2 (max: 100)