SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 5f6410207fda5abbe01b9add33a77418e567b71a.

Database Entry

SHA1 Fingerprint:5f6410207fda5abbe01b9add33a77418e567b71a
Certificate Common Name (CN):AsyncRAT Server
Issuer Distinguished Name (DN):AsyncRAT Server
TLS Version:TLSv1' NOTBEFOR
First seen:2019-08-29 04:25:41 UTC
Last seen:2019-09-13 11:16:19 UTC
Status:Blacklisted
Listing reason:AsyncRAT C&C
Listing date:2019-09-10 05:09:49
Malware samples:5
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-09-13 11:16:19c384a146b46388b0973c7f91f12fa57bVirustotal results 21 / 70 (30.00%) AgentTesla79.134.225.72:1819
2019-09-13 11:16:19c384a146b46388b0973c7f91f12fa57bVirustotal results 21 / 70 (30.00%) AgentTesla79.134.225.72:1819
2019-09-12 06:34:48f621e98f232df554a2996969f3cf97bdVirustotal results 32/65 (49.23%) AsyncRAT79.134.225.72:1819
2019-09-12 06:34:48f621e98f232df554a2996969f3cf97bdVirustotal results 32/65 (49.23%) AsyncRAT79.134.225.72:1819
2019-09-10 04:46:49a8132fa83521b0cec9e9259c889535feVirustotal results 32/68 (47.06%) AsyncRAT79.134.225.72:1819
2019-09-10 04:46:49a8132fa83521b0cec9e9259c889535feVirustotal results 32/68 (47.06%) AsyncRAT79.134.225.72:1819
2019-09-05 00:32:10961cc035ed4135d8d0e1c09b23fbda96Virustotal results 47/68 (69.12%) AgentTesla79.134.225.72:1819
2019-09-05 00:32:10961cc035ed4135d8d0e1c09b23fbda96Virustotal results 47/68 (69.12%) AgentTesla79.134.225.72:1819
2019-08-29 04:25:41eb34836a09c87c14e5fd77c95e7d71afVirustotal results 38 / 69 (55.07%) 79.134.225.72:1819
2019-08-29 04:25:41eb34836a09c87c14e5fd77c95e7d71afVirustotal results 38 / 69 (55.07%) 79.134.225.72:1819

# of entries: 10 (max: 100)