SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5f1f3725db5f77872c27b2d4b1a6c8c32e4ee257.
Database Entry
| SHA1 Fingerprint: | 5f1f3725db5f77872c27b2d4b1a6c8c32e4ee257 |
|---|---|
| Certificate Common Name (CN): | SeroServer |
| Issuer Distinguished Name (DN): | SeroServer |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-04-23 04:43:29 UTC |
| Last seen: | 2026-06-21 22:54:46 UTC |
| Status: | Blacklisted |
| Listing reason: | SeroRAT C&C |
| Listing date: | 2026-09-23 09:28:53 |
| Malware samples: | 9 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-06-21 22:54:46 | 1f4b9d3c78457ec9a1d0249696e6d131 | n/a | 176.160.157.96:6669 | |
| 2026-05-27 01:54:31 | cf5ee1a12b467b8a5d44354c3e6051d5 | n/a | 176.160.157.96:8887 | |
| 2026-05-20 06:54:53 | 7a44f0b104dde313917e30d8d2aa8ab2 | n/a | 176.160.157.96:7878 | |
| 2026-05-14 16:52:39 | f77cfad4cadff7777249aa8d1aab0168 | n/a | 176.160.157.96:7878 | |
| 2026-05-10 03:20:04 | 98f592617fda0e116aba0bc467af5990 | n/a | 176.160.157.96:7878 | |
| 2026-05-03 17:24:55 | e2aafabbae84d258998e1b8bd64923c8 | n/a | 176.160.157.96:7878 | |
| 2026-04-30 13:20:13 | 7cc1da433e19987f29e99406dbbad489 | n/a | 176.160.157.96:7878 | |
| 2026-04-29 21:30:05 | 108e5c7335fd7d0696bdb80525a767b8 | n/a | 176.160.157.96:7878 | |
| 2026-04-23 04:43:29 | 1cd78549ff4bfbc19670921e44ec29f4 | n/a | 176.160.157.96:7878 |
# of entries: 9 (max: 100)