SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 59fb8a90649cac57e345fbd3af9f76d6a73fac12.

Database Entry

SHA1 Fingerprint:59fb8a90649cac57e345fbd3af9f76d6a73fac12
Certificate Common Name (CN):reasongrove.cfd
Issuer Distinguished Name (DN):YE2
TLS Version:TLS 1.2
First seen:2026-10-18 15:34:39 UTC
Last seen:2026-10-20 05:03:51 UTC
Status:Blacklisted
Listing reason:OffLoader C&C
Listing date:2026-10-20 06:27:30
Malware samples:16
Botnet C&Cs:2

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-10-20 05:03:51f3ca45236783f87be5fca61cb81d8452n/a104.21.40.8:443
2026-10-20 04:32:10d4bd2531ba64961ea231083be5d94b57n/a172.67.173.213:443
2026-10-20 04:19:47c93bbf22b8388a7004a1a8e331326500n/a172.67.173.213:443
2026-10-20 02:56:467c978c77396a5da58141878643605714n/a104.21.40.8:443
2026-10-19 23:10:332bdb2489b5f7d3b28df077e4e711de93n/a104.21.40.8:443
2026-10-19 22:35:5928bde669acb0ec2e1d55a3a157e6b096n/a104.21.40.8:443
2026-10-19 20:05:111bf812388ed89e2771d9af6141231b07n/a172.67.173.213:443
2026-10-19 19:28:521863c7371b5f265f1f2d0d885657a77an/a104.21.40.8:443
2026-10-19 17:24:420e34c96bf535b4c3226527ac456c6ba0n/a172.67.173.213:443
2026-10-19 16:53:110048f3b72224f5b74a7a6418b180b89cn/a104.21.40.8:443
2026-10-19 15:49:4402f29eb8dc63c8dc7dc8de52916239f4n/a104.21.40.8:443
2026-10-19 14:32:020e593fdaeaa2695c20dbc34d6be5f6e1n/a104.21.40.8:443
2026-10-18 20:25:04299b14e00ab11e9e2443106525b23aa0n/a172.67.173.213:443
2026-10-18 18:43:341f0f937a85d4dffaed0209a43367b0e6n/a104.21.40.8:443
2026-10-18 15:54:280e9da9ba01ca612df37a91847544cedan/a172.67.173.213:443
2026-10-18 15:34:390cf5d6a93d0f9374d309101f68de221an/a172.67.173.213:443

# of entries: 16 (max: 100)