SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5d64578798fe792c1ff4c671d3c08db426dc55ca.

Database Entry


SHA1 Fingerprint:5d64578798fe792c1ff4c671d3c08db426dc55ca
Certificate Common Name (CN):forenzik.kz
Issuer Distinguished Name (DN):forenzik.kz
TLS Version:TLS 1.2
First seen:2021-07-15 16:04:53 UTC
Last seen:2021-07-17 14:04:24 UTC
Status:Blacklisted
Listing reason:BazaLoader C&C
Listing date:2021-07-16 07:46:42
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-07-17 14:04:24b994491242b498325a9d4f57f484330cVirustotal results 28 / 67 (41.79%) 13.56.160.68:443
2021-07-17 14:04:24b994491242b498325a9d4f57f484330cVirustotal results 28 / 67 (41.79%) 13.56.160.68:443
2021-07-16 13:25:06e058272c59abd921dc5338633a8a5342Virustotal results 10 / 67 (14.93%) 13.56.160.68:443
2021-07-16 13:25:06e058272c59abd921dc5338633a8a5342Virustotal results 10 / 67 (14.93%) 13.56.160.68:443
2021-07-15 16:04:535f11f2db1295fa419b190bd7478d9b23Virustotal results 11 / 67 (16.42%) BazaLoader13.56.160.68:443
2021-07-15 16:04:535f11f2db1295fa419b190bd7478d9b23Virustotal results 11 / 67 (16.42%) BazaLoader13.56.160.68:443

# of entries: 6 (max: 100)