SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5b4211d71bea47b65fdcd526b17a6ef32af65c5d.

Database Entry


SHA1 Fingerprint:5b4211d71bea47b65fdcd526b17a6ef32af65c5d
Certificate Common Name (CN):Mainab_ewhetha.trv
Issuer Distinguished Name (DN):Mainab_ewhetha.trv
TLS Version:TLSv1' NOTBEFOR
First seen:2018-10-28 13:42:21 UTC
Last seen:2018-10-28 14:54:19 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2018-10-28 14:36:56
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-10-28 14:54:19b5949d46713f6136496d697b966a1c16Virustotal results 17/58 (29.31%) Gozi 192.48.88.118:443
2018-10-28 13:42:22b54607d797af36fb6ec4db5dd0916ec8Virustotal results 23/57 (40.35%) Gozi 192.48.88.118:443

# of entries: 2 (max: 100)