SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 571fc6e9d1fc25e1c016a48cfa68d0901cef9f77.

Database Entry

SHA1 Fingerprint:571fc6e9d1fc25e1c016a48cfa68d0901cef9f77
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-06-19 17:35:21 UTC
Last seen:2014-06-21 16:53:53 UTC
Listing reason:Shylock C&C
Listing date:2014-06-19 18:19:29
Malware samples:6
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-06-21 16:53:53800faea6db1667f395ee536a5c14859fVirustotal results 34/55 (61.82%) Shylock
2014-06-19 21:25:504b38ad425ed957671f986972db357c95Virustotal results 2/53 (3.77%) Shylock
2014-06-19 20:13:465744da1321bd28971f7a0645d22c4f69Virustotal results 26/54 (48.15%) Shylock
2014-06-19 19:25:15e2a6479c3b6b243be6257c99055dac19Virustotal results 21/53 (39.62%) Shylock
2014-06-19 19:13:2664fc61e9293f446c56ec45d8681ab828Virustotal results 8/54 (14.81%) Shylock
2014-06-19 17:35:2171cc5e0e29efcc78e384bac8a1f04f75Virustotal results 10/53 (18.87%) Shylock

# of entries: 6 (max: 100)