SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 55abbf415e485192b1bb1fdf7ed1212dc986c351.

Database Entry


SHA1 Fingerprint:55abbf415e485192b1bb1fdf7ed1212dc986c351
Certificate Common Name (CN):jasper/L=Some-city/O=jasper/ST=Some-state/OU=unit
Issuer Distinguished Name (DN):root
TLS Version:TLS 1.2
First seen:2018-03-10 04:53:10 UTC
Last seen:2018-03-18 17:03:02 UTC
Status:Blacklisted
Listing reason:Corebot C&C
Listing date:2018-03-19 10:13:13
Malware samples:4
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-03-18 17:03:02a2680616dd8bd869f207bb92b9538a1dVirustotal results 24/67 (35.82%) Corebot 199.247.7.16:443
2018-03-18 17:03:02a2680616dd8bd869f207bb92b9538a1dVirustotal results 24/67 (35.82%) Corebot 199.247.7.16:443
2018-03-16 05:16:575667863ea4d86e23a669ad2f46d02ce3Virustotal results 18/66 (27.27%) Corebot 45.77.61.121:443
2018-03-16 05:16:575667863ea4d86e23a669ad2f46d02ce3Virustotal results 18/66 (27.27%) Corebot 45.77.61.121:443
2018-03-11 11:33:13a7ecb801dfc1b2ab3eade1802647e15cVirustotal results 14/68 (20.59%) Corebot 45.77.61.121:443
2018-03-11 11:33:13a7ecb801dfc1b2ab3eade1802647e15cVirustotal results 14/68 (20.59%) Corebot 45.77.61.121:443
2018-03-10 04:53:102272357f0b76e6e063856339c379feacVirustotal results 15/68 (22.06%) Corebot 199.247.7.16:443
2018-03-10 04:53:102272357f0b76e6e063856339c379feacVirustotal results 15/68 (22.06%) Corebot 199.247.7.16:443

# of entries: 8 (max: 100)