SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5e9de84aab8968d3a10710904a0844d0c360d2a8.
Database Entry
| SHA1 Fingerprint: | 5e9de84aab8968d3a10710904a0844d0c360d2a8 |
|---|---|
| Certificate Common Name (CN): | 13balien.org |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-09-02 14:10:34 UTC |
| Last seen: | 2026-09-03 04:54:17 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-09-03 05:31:24 |
| Malware samples: | 32 |
| Botnet C&Cs: | 7 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-09-03 04:54:17 | a4d13e782a2f1fe7f59d6c60539908de | n/a | 104.21.86.67:443 | |
| 2026-09-03 04:41:37 | afee8b1b35405c2cbf5be6ea4d515561 | n/a | 188.114.96.12:443 | |
| 2026-09-03 04:09:16 | 7eba73fde69fbfbaedb7cfa1aef66e99 | n/a | 188.114.96.12:443 | |
| 2026-09-03 03:47:32 | 6aa6d5b82ddc1dde86b8c685b99c3b89 | n/a | 172.67.216.90:443 | |
| 2026-09-03 02:31:17 | 301772d8458c540c5881e387d360970c | n/a | 188.114.97.0:443 | |
| 2026-09-03 02:19:04 | 2f0f03f5d91dbec8e44c87504ce2c89b | n/a | 188.114.96.0:443 | |
| 2026-09-03 01:59:00 | ab1801280f0266457be50d78ac198581 | n/a | 188.114.96.0:443 | |
| 2026-09-03 01:54:15 | 9a161422c933602162575732787e6a1e | n/a | 172.67.216.90:443 | |
| 2026-09-03 01:49:15 | 35ec690a3ffff6dc3fd104e644bb2c13 | n/a | 188.114.96.12:443 | |
| 2026-09-03 01:22:11 | 2bbe831a8ae270b33c14256675ac1fc4 | n/a | 188.114.96.12:443 | |
| 2026-09-03 00:25:46 | 26f9eca6e0a5c76606eea0060011d070 | n/a | 104.21.86.67:443 | |
| 2026-09-02 23:54:48 | 24f04f3200687970d67f3d25d862caed | n/a | 188.114.97.12:443 | |
| 2026-09-02 23:34:59 | 234a425649ba6a22e8f488edb2421709 | n/a | 188.114.97.3:443 | |
| 2026-09-02 23:11:24 | 9bf34cdd5ded1a967fa2bf428071ea89 | n/a | 188.114.96.0:443 | |
| 2026-09-02 21:47:17 | 1bda530c9b1bfb3037e5d60445ed487f | n/a | 172.67.216.90:443 | |
| 2026-09-02 20:56:16 | 0f80e4f22f658b423b08200fa930aa13 | n/a | 104.21.86.67:443 | |
| 2026-09-02 19:56:35 | 2e4cb2205425cb606a0bdc0a2ecc3abe | n/a | 172.67.216.90:443 | |
| 2026-09-02 19:37:23 | 11e741893c0d27194267569eaba78a6f | n/a | 188.114.97.12:443 | |
| 2026-09-02 19:28:48 | 11338ef131b7668b528ff929cbfef039 | n/a | 172.67.216.90:443 | |
| 2026-09-02 18:58:45 | 31f4986728b8c317d340f3d878a84f01 | n/a | 188.114.96.0:443 | |
| 2026-09-02 18:58:31 | caceea71d546b5324465c18a06b1be42 | n/a | 104.21.86.67:443 | |
| 2026-09-02 18:37:41 | 07a901f7b9d81145e70f6aea10c3e1ae | n/a | 188.114.97.12:443 | |
| 2026-09-02 18:36:28 | 05efa20b8424ea384e02d40507aa66ec | n/a | 104.21.86.67:443 | |
| 2026-09-02 17:48:03 | add0230dd2b8aed2b45ef888f73cfa2c | n/a | 104.21.86.67:443 | |
| 2026-09-02 17:13:01 | 0b159430f2e60ff6413f067a02d2a86a | n/a | 188.114.97.12:443 | |
| 2026-09-02 16:30:27 | c1d7a0d80b01eb4510794aeae8975701 | n/a | 172.67.216.90:443 | |
| 2026-09-02 16:22:34 | 06da232d5203b47f3159b7b646af6ee7 | n/a | 188.114.97.12:443 | |
| 2026-09-02 16:22:21 | 0d9f5babfe91722fb698582dc56f7894 | n/a | 172.67.216.90:443 | |
| 2026-09-02 16:19:52 | 0819645be89d854b6f61f89dee113e6b | n/a | 188.114.96.0:443 | |
| 2026-09-02 16:09:55 | 46e4d0c20bd47db22b78998552846605 | n/a | 104.21.86.67:443 | |
| 2026-09-02 15:20:12 | 0775021d72001992af8d27683be4db2c | n/a | 188.114.96.0:443 | |
| 2026-09-02 14:10:34 | 77181625fe6febd72c2753f4fa5304a6 | n/a | 188.114.97.12:443 |
# of entries: 32 (max: 100)