SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5d47e102ad3ac8ff5910aa411ca5520482b4f05f.

Database Entry


SHA1 Fingerprint:5d47e102ad3ac8ff5910aa411ca5520482b4f05f
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-09-26 09:48:41 UTC
Last seen:2016-11-24 01:06:27 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-10-28 13:41:38
Malware samples:106
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-11-24 01:06:27bf7863fe6f4ff9cb60ca6e1110fb4221Virustotal results 40/57 (70.18%) Gootkit 43.239.221.51:80
2016-11-24 01:06:27bf7863fe6f4ff9cb60ca6e1110fb4221Virustotal results 40/57 (70.18%) Gootkit 43.239.221.51:80
2016-11-23 20:32:123579852cc6d1bacf5021d83c6634ec51Virustotal results 36/57 (63.16%) Gootkit 43.239.221.51:80
2016-11-23 20:32:123579852cc6d1bacf5021d83c6634ec51Virustotal results 36/57 (63.16%) Gootkit 43.239.221.51:80
2016-11-23 19:09:259226afb1fdffb9d866c6dffc78365ef9n/aGootkit 43.239.221.51:80
2016-11-23 19:09:259226afb1fdffb9d866c6dffc78365ef9n/aGootkit 43.239.221.51:80
2016-11-23 18:48:30db7efadc8084ff4b5ddd94fd035d9577n/aGootkit 43.239.221.51:80
2016-11-23 18:48:30db7efadc8084ff4b5ddd94fd035d9577n/aGootkit 43.239.221.51:80
2016-11-22 14:16:28d21ab10e9779fa6f7d68b877fd01113cVirustotal results 38/66 (57.58%) Gootkit 43.239.221.51:80
2016-11-22 14:16:28d21ab10e9779fa6f7d68b877fd01113cVirustotal results 38/66 (57.58%) Gootkit 43.239.221.51:80
2016-11-22 06:22:09ad8f6360f496002071ae6960ed2f5607n/aGootkit 43.239.221.51:80
2016-11-22 06:22:09ad8f6360f496002071ae6960ed2f5607n/aGootkit 43.239.221.51:80
2016-11-22 05:49:29415e5e2536677956a21cefc42bc290c2Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-11-22 05:49:29415e5e2536677956a21cefc42bc290c2Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-11-20 22:16:39dceb2b9102e7ad2ca4bc0b487040985en/aGootkit 43.239.221.51:80
2016-11-20 22:16:39dceb2b9102e7ad2ca4bc0b487040985en/aGootkit 43.239.221.51:80
2016-11-20 00:05:41f0d976d0990ddf5f28e26c976ed54980n/aGootkit 43.239.221.51:80
2016-11-20 00:05:41f0d976d0990ddf5f28e26c976ed54980n/aGootkit 43.239.221.51:80
2016-11-19 23:11:19f4661e03ad109c299a6354bca6157e01n/aGootkit 43.239.221.51:80
2016-11-19 23:11:19f4661e03ad109c299a6354bca6157e01n/aGootkit 43.239.221.51:80
2016-11-19 21:11:458efdeba44b411aa0afe773760af13d42Virustotal results 40/56 (71.43%) Gootkit 43.239.221.51:80
2016-11-19 21:11:458efdeba44b411aa0afe773760af13d42Virustotal results 40/56 (71.43%) Gootkit 43.239.221.51:80
2016-11-18 20:23:379cb6a178fb186cb6808921bd81da9040Virustotal results 30/57 (52.63%) Gootkit 43.239.221.51:80
2016-11-18 20:23:379cb6a178fb186cb6808921bd81da9040Virustotal results 30/57 (52.63%) Gootkit 43.239.221.51:80
2016-11-17 11:30:04c4b9c199373385746b989f06b1f42142Virustotal results 37/57 (64.91%) Gootkit 43.239.221.51:80
2016-11-17 11:30:04c4b9c199373385746b989f06b1f42142Virustotal results 37/57 (64.91%) Gootkit 43.239.221.51:80
2016-11-16 21:00:35a688b87620efc9b3d24a66845f0a86f4n/aGootkit 43.239.221.51:80
2016-11-16 21:00:35a688b87620efc9b3d24a66845f0a86f4n/aGootkit 43.239.221.51:80
2016-11-16 12:51:30e70227fc921b6c00db264b7d7d0c4de3Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-11-16 12:51:30e70227fc921b6c00db264b7d7d0c4de3Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-11-16 10:27:5062d97d5142e754857517888af12d0015Virustotal results 35/56 (62.50%) Gootkit 43.239.221.51:80
2016-11-16 10:27:5062d97d5142e754857517888af12d0015Virustotal results 35/56 (62.50%) Gootkit 43.239.221.51:80
2016-11-16 09:45:36439f657965cef8c88558bd4020363010Virustotal results 44/60 (73.33%) Gootkit 43.239.221.51:80
2016-11-16 09:45:36439f657965cef8c88558bd4020363010Virustotal results 44/60 (73.33%) Gootkit 43.239.221.51:80
2016-11-16 00:15:41eacfb3e0feb3234c42961618b4fef373Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-11-16 00:15:41eacfb3e0feb3234c42961618b4fef373Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-11-15 11:56:407ee80e55f5c3fda028af29c4f7d5b889Virustotal results 42/57 (73.68%) Gootkit 43.239.221.51:80
2016-11-15 11:56:407ee80e55f5c3fda028af29c4f7d5b889Virustotal results 42/57 (73.68%) Gootkit 43.239.221.51:80
2016-11-14 14:04:001f1505ffd91965c31fb4f02809a432b9n/aGootkit 43.239.221.51:80
2016-11-14 14:04:001f1505ffd91965c31fb4f02809a432b9n/aGootkit 43.239.221.51:80
2016-11-05 06:02:132416eea3e1f8ea24994f2a6067acdcf7n/aGootkit 43.239.221.51:80
2016-11-05 06:02:132416eea3e1f8ea24994f2a6067acdcf7n/aGootkit 43.239.221.51:80
2016-11-04 18:08:592018a776be49d3a85c588a64ec1fa3c1Virustotal results 42/67 (62.69%) Gootkit 43.239.221.51:80
2016-11-04 18:08:592018a776be49d3a85c588a64ec1fa3c1Virustotal results 42/67 (62.69%) Gootkit 43.239.221.51:80
2016-11-04 15:11:26c6574674350456cc5ee978c2a493a537n/aGootkit 43.239.221.51:80
2016-11-04 15:11:26c6574674350456cc5ee978c2a493a537n/aGootkit 43.239.221.51:80
2016-11-04 13:35:26edc2b1a8c359fb4a61ae7ba31d98b159Virustotal results 45/68 (66.18%) Gootkit 43.239.221.51:80
2016-11-04 13:35:26edc2b1a8c359fb4a61ae7ba31d98b159Virustotal results 45/68 (66.18%) Gootkit 43.239.221.51:80
2016-11-04 11:37:546eed8860927b6e04301d8a2147091b23Virustotal results 35/55 (63.64%) Gootkit 43.239.221.51:80
2016-11-04 11:37:546eed8860927b6e04301d8a2147091b23Virustotal results 35/55 (63.64%) Gootkit 43.239.221.51:80
2016-11-04 11:08:415c0be7bff7fd8546c86c648198905627n/aGootkit 43.239.221.51:80
2016-11-04 11:08:415c0be7bff7fd8546c86c648198905627n/aGootkit 43.239.221.51:80
2016-11-04 08:52:26d60093a98cc249bc028f2a89e41559c0n/aGootkit 43.239.221.51:80
2016-11-04 08:52:26d60093a98cc249bc028f2a89e41559c0n/aGootkit 43.239.221.51:80
2016-11-04 02:18:1518df97b814849ee92e464e3f352261c5n/aGootkit 43.239.221.51:80
2016-11-04 02:18:1518df97b814849ee92e464e3f352261c5n/aGootkit 43.239.221.51:80
2016-11-03 23:27:22d0d4621030267388a1dc35d7a80cf588n/aGootkit 43.239.221.51:80
2016-11-03 23:27:22d0d4621030267388a1dc35d7a80cf588n/aGootkit 43.239.221.51:80
2016-11-03 04:32:234737945a5410e642f9c87f94b28a9447Virustotal results 40/56 (71.43%) Gootkit 43.239.221.51:80
2016-11-03 04:32:234737945a5410e642f9c87f94b28a9447Virustotal results 40/56 (71.43%) Gootkit 43.239.221.51:80
2016-11-02 20:40:36444d589ac136c75856b7d4ae8b24b84fVirustotal results 12/56 (21.43%) Gootkit 43.239.221.51:80
2016-11-02 20:40:36444d589ac136c75856b7d4ae8b24b84fVirustotal results 12/56 (21.43%) Gootkit 43.239.221.51:80
2016-11-01 10:54:541053301dc05904bef497a69166fe9643Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-11-01 10:54:541053301dc05904bef497a69166fe9643Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-11-01 09:59:012f330019a1d637155b7ccf99ab126df8Virustotal results 37/57 (64.91%) Gootkit 43.239.221.51:80
2016-11-01 09:59:012f330019a1d637155b7ccf99ab126df8Virustotal results 37/57 (64.91%) Gootkit 43.239.221.51:80
2016-10-31 11:59:45b866e139c5d08977422203b3ff97af50Virustotal results 31/57 (54.39%) Gootkit 43.239.221.51:80
2016-10-31 11:59:45b866e139c5d08977422203b3ff97af50Virustotal results 31/57 (54.39%) Gootkit 43.239.221.51:80
2016-10-30 23:03:44e813eeb707f13725bb881880df797a40n/aGootkit 43.239.221.51:80
2016-10-30 23:03:44e813eeb707f13725bb881880df797a40n/aGootkit 43.239.221.51:80
2016-10-30 07:20:36f3e6c6c03c352b282b1fd4388a33e981Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-10-30 07:20:36f3e6c6c03c352b282b1fd4388a33e981Virustotal results 43/57 (75.44%) Gootkit 43.239.221.51:80
2016-10-28 15:52:232acb0e4daebd077e3e228bec6ae6b1feVirustotal results 42/64 (65.62%) Gootkit 43.239.221.51:80
2016-10-28 15:52:232acb0e4daebd077e3e228bec6ae6b1feVirustotal results 42/64 (65.62%) Gootkit 43.239.221.51:80
2016-10-28 12:51:034d80be2d296101359bac4302fb507738Virustotal results 32/54 (59.26%) Gootkit 43.239.221.51:80
2016-10-28 12:51:034d80be2d296101359bac4302fb507738Virustotal results 32/54 (59.26%) Gootkit 43.239.221.51:80
2016-10-28 09:47:416cade1c992f5c0bf36eb398be75e7bb2Virustotal results 29/57 (50.88%) Gootkit 43.239.221.51:80
2016-10-28 09:47:416cade1c992f5c0bf36eb398be75e7bb2Virustotal results 29/57 (50.88%) Gootkit 43.239.221.51:80
2016-10-27 18:12:31000e9d57443e37b285efe175bdc92fadVirustotal results 25/57 (43.86%) Gootkit 43.239.221.51:80
2016-10-27 18:12:31000e9d57443e37b285efe175bdc92fadVirustotal results 25/57 (43.86%) Gootkit 43.239.221.51:80
2016-10-27 11:18:57b14433591a43b650983ce08d11f6b58fVirustotal results 39/57 (68.42%) Gootkit 43.239.221.51:80
2016-10-27 11:18:57b14433591a43b650983ce08d11f6b58fVirustotal results 39/57 (68.42%) Gootkit 43.239.221.51:80
2016-10-26 22:40:43d22077c4b1bde37ea419387be922b7f0n/aGootkit 43.239.221.51:80
2016-10-26 22:40:43d22077c4b1bde37ea419387be922b7f0n/aGootkit 43.239.221.51:80
2016-10-26 13:07:329454e1f0c44e424c0a09dcbee75fea31Virustotal results 35/57 (61.40%) Gootkit 43.239.221.51:80
2016-10-26 13:07:329454e1f0c44e424c0a09dcbee75fea31Virustotal results 35/57 (61.40%) Gootkit 43.239.221.51:80
2016-10-26 10:39:30093f1611a1c238ffc4ff770f08426626Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-10-26 10:39:30093f1611a1c238ffc4ff770f08426626Virustotal results 41/57 (71.93%) Gootkit 43.239.221.51:80
2016-10-25 18:42:08ac3059902c011e9d0a29229880fe2717Virustotal results 35/57 (61.40%) Shylock 43.239.221.51:80
2016-10-25 18:42:08ac3059902c011e9d0a29229880fe2717Virustotal results 35/57 (61.40%) Shylock 43.239.221.51:80
2016-10-25 18:14:0327fd7bda3b006c671bf78bfde4e87c5fVirustotal results 32/56 (57.14%) Shylock 43.239.221.51:80
2016-10-25 18:14:0327fd7bda3b006c671bf78bfde4e87c5fVirustotal results 32/56 (57.14%) Shylock 43.239.221.51:80
2016-10-25 14:20:5711d8cfea37cd341acb6518bdfccaaaeeVirustotal results 32/56 (57.14%) Gootkit 43.239.221.51:80
2016-10-25 14:20:5711d8cfea37cd341acb6518bdfccaaaeeVirustotal results 32/56 (57.14%) Gootkit 43.239.221.51:80
2016-10-24 19:13:16bd2bc96b7f3c5c3828532bddce72cbd4Virustotal results 34/55 (61.82%) Shylock 43.239.221.51:80
2016-10-24 19:13:16bd2bc96b7f3c5c3828532bddce72cbd4Virustotal results 34/55 (61.82%) Shylock 43.239.221.51:80
2016-10-24 13:08:36e9ff9825c7e4241da51625a5f038a400n/aGootkit 43.239.221.51:80
2016-10-24 13:08:36e9ff9825c7e4241da51625a5f038a400n/aGootkit 43.239.221.51:80
2016-10-24 02:13:264dd2be3ee3b147263e9e27422b2b0cc1n/aGootkit 43.239.221.51:80
2016-10-24 02:13:264dd2be3ee3b147263e9e27422b2b0cc1n/aGootkit 43.239.221.51:80

# of entries: 100 (max: 100)