SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5ac8259f3989ba8c515f6ca97061368f5bab216d.
Database Entry
SHA1 Fingerprint: | 5ac8259f3989ba8c515f6ca97061368f5bab216d |
---|---|
Certificate Common Name (CN): | unuasher.fo |
Issuer Distinguished Name (DN): | unuasher.fo |
TLS Version: | TLSv1 |
First seen: | 2015-07-23 21:45:16 UTC |
Last seen: | 2015-07-31 09:18:20 UTC |
Status: | Blacklisted |
Listing reason: | Dridex C&C |
Listing date: | 2015-07-24 05:05:02 |
Malware samples: | 15 |
Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
---|---|---|---|---|
2015-07-31 09:18:20 | 853742ebaaa2e4a3dc29b9fe8c3822d4 | 14/56 (25.00%) | Dridex | 199.241.30.233:449 |
2015-07-31 09:18:20 | 853742ebaaa2e4a3dc29b9fe8c3822d4 | 14/56 (25.00%) | Dridex | 199.241.30.233:449 |
2015-07-30 18:47:54 | 5f93237c3eb6f756f0d95f56635b0ae8 | 11/56 (19.64%) | Dridex | 199.241.30.233:449 |
2015-07-30 18:47:54 | 5f93237c3eb6f756f0d95f56635b0ae8 | 11/56 (19.64%) | Dridex | 199.241.30.233:449 |
2015-07-30 18:29:51 | 5ee27ac177cf9667219ac9d01e6aa175 | 18/56 (32.14%) | Dridex | 199.241.30.233:449 |
2015-07-30 18:29:51 | 5ee27ac177cf9667219ac9d01e6aa175 | 18/56 (32.14%) | Dridex | 199.241.30.233:449 |
2015-07-29 13:37:16 | e751a941b7cb8e85b4949cc3e7e39027 | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-29 13:37:16 | e751a941b7cb8e85b4949cc3e7e39027 | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-27 09:18:22 | f480cf68fbc0e2b60a490e2d54de3a62 | 0/56 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-27 09:18:22 | f480cf68fbc0e2b60a490e2d54de3a62 | 0/56 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-26 18:00:57 | 4011190388f764a9d1aab78bed4713b3 | 0/56 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-26 18:00:57 | 4011190388f764a9d1aab78bed4713b3 | 0/56 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-26 11:50:02 | 0478e2634f04e06c2ade5ba1e77b79de | 0/55 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-26 11:50:02 | 0478e2634f04e06c2ade5ba1e77b79de | 0/55 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-26 03:20:49 | a26fbbd72f9dd680a5bc224a89819a00 | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-26 03:20:49 | a26fbbd72f9dd680a5bc224a89819a00 | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-25 22:08:30 | 4990926cc1815d318eb1dc06c2831133 | 1/56 (1.79%) | Dridex | 199.241.30.233:449 |
2015-07-25 22:08:30 | 4990926cc1815d318eb1dc06c2831133 | 1/56 (1.79%) | Dridex | 199.241.30.233:449 |
2015-07-25 17:20:06 | 9d1d0632329f04d8b1ec21aff4ce6493 | 3/55 (5.45%) | Dridex | 199.241.30.233:449 |
2015-07-25 17:20:06 | 9d1d0632329f04d8b1ec21aff4ce6493 | 3/55 (5.45%) | Dridex | 199.241.30.233:449 |
2015-07-24 13:41:48 | 32230d747829dcf77841f594aa54915a | 0/55 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-24 13:41:48 | 32230d747829dcf77841f594aa54915a | 0/55 (0.00%) | Dridex | 199.241.30.233:449 |
2015-07-24 11:39:50 | 9e73e0c4b92253c5f8b6648f29b28b5b | 4/55 (7.27%) | Dridex | 199.241.30.233:449 |
2015-07-24 11:39:50 | 9e73e0c4b92253c5f8b6648f29b28b5b | 4/55 (7.27%) | Dridex | 199.241.30.233:449 |
2015-07-24 08:45:33 | 948c59ea3039951d312fb1190242f20e | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-24 08:45:33 | 948c59ea3039951d312fb1190242f20e | 2/55 (3.64%) | Dridex | 199.241.30.233:449 |
2015-07-23 23:33:36 | dd11a8abcecc2e95d96f1e84cfcc33bb | 4/56 (7.14%) | Dridex | 199.241.30.233:449 |
2015-07-23 23:33:36 | dd11a8abcecc2e95d96f1e84cfcc33bb | 4/56 (7.14%) | Dridex | 199.241.30.233:449 |
2015-07-23 21:45:20 | fbd07085e643f13e54d33fc694bd5c33 | 18/56 (32.14%) | Dridex | 199.241.30.233:449 |
2015-07-23 21:45:20 | fbd07085e643f13e54d33fc694bd5c33 | 18/56 (32.14%) | Dridex | 199.241.30.233:449 |
# of entries: 30 (max: 100)