SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 535bea5950f28c905e73148a5d0d69229eca4ad2.
Database Entry
| SHA1 Fingerprint: | 535bea5950f28c905e73148a5d0d69229eca4ad2 |
|---|---|
| Certificate Common Name (CN): | 167.233.125.106 |
| Issuer Distinguished Name (DN): | 167.233.125.106 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-06-18 13:18:03 UTC |
| Last seen: | 2026-06-20 03:54:25 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-06-20 06:13:31 |
| Malware samples: | 11 |
| Botnet C&Cs: | 2 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-06-20 03:54:25 | f05d44b7ccfedce2a7b9c5c79ae764b9 | n/a | 5.75.221.125:443 | |
| 2026-06-20 00:49:49 | 7ebc34c767f3a1976b78b131f67ed5bf | n/a | 91.98.109.24:443 | |
| 2026-06-19 20:27:14 | 1968a37072115db052118f2da926c89d | n/a | 5.75.221.125:443 | |
| 2026-06-19 19:36:51 | 167e63a907fdbae33a98aece7d783786 | n/a | 5.75.221.125:443 | |
| 2026-06-19 17:21:51 | 05d4d1bb568c709ee0680102d4fb9a2d | n/a | 91.98.109.24:443 | |
| 2026-06-19 16:41:31 | 84449b190b30285c0edee2e72e47ee60 | n/a | 91.98.109.24:443 | |
| 2026-06-19 15:38:29 | 02337c2f194b73d92f5bd0bd0e0b6eba | n/a | 5.75.221.125:443 | |
| 2026-06-19 13:54:48 | 9deaa375ddc0e81a000d36afb47d121f | n/a | 5.75.221.125:443 | |
| 2026-06-18 14:29:47 | 990143b90c23deb2cb149faae712288a | n/a | 5.75.221.125:443 | |
| 2026-06-18 13:32:01 | 866be65d47608384c640386f4f39a236 | n/a | 5.75.221.125:443 | |
| 2026-06-18 13:18:03 | 9525dfb3c0318a1036593598c341d48c | n/a | 5.75.221.125:443 |
# of entries: 11 (max: 100)