SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5b8a6e1e0714fd71836092fbbebf49243a97a376.

Database Entry


SHA1 Fingerprint:5b8a6e1e0714fd71836092fbbebf49243a97a376
Certificate Common Name (CN):tigsirsshathat.st
Issuer Distinguished Name (DN):tigsirsshathat.st
TLS Version:TLSv1
First seen:2015-07-22 01:15:30 UTC
Last seen:2015-07-23 12:17:33 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2015-07-22 06:23:59
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-07-23 12:17:335ff793211e76a036f60a933cc21c4897Virustotal results 2/55 (3.64%) Dridex 194.58.96.45:4543
2015-07-23 12:17:335ff793211e76a036f60a933cc21c4897Virustotal results 2/55 (3.64%) Dridex 194.58.96.45:4543
2015-07-23 11:16:5699d4d4560b67b4c00459630d1d7735d1Virustotal results 4/55 (7.27%) Dridex 194.58.96.45:4543
2015-07-23 11:16:5699d4d4560b67b4c00459630d1d7735d1Virustotal results 4/55 (7.27%) Dridex 194.58.96.45:4543
2015-07-22 07:29:08c44d26cddcf03aa18addc0568f8d2e19Virustotal results 2/55 (3.64%) Dridex 194.58.96.45:4543
2015-07-22 07:29:08c44d26cddcf03aa18addc0568f8d2e19Virustotal results 2/55 (3.64%) Dridex 194.58.96.45:4543
2015-07-22 01:15:30e3edd95312cbe7d4cde9c2d9ec251ee2Virustotal results 1/55 (1.82%) Dridex 194.58.96.45:4543
2015-07-22 01:15:30e3edd95312cbe7d4cde9c2d9ec251ee2Virustotal results 1/55 (1.82%) Dridex 194.58.96.45:4543

# of entries: 8 (max: 100)