SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 647445d6cad5dec92b6e96873853a4f96c845e4a.

Database Entry


SHA1 Fingerprint:647445d6cad5dec92b6e96873853a4f96c845e4a
Certificate Common Name (CN):kievteplo.kiev.ua
Issuer Distinguished Name (DN):WE1
TLS Version:TLS 1.2
First seen:2026-01-02 16:16:30 UTC
Last seen:2026-01-06 03:48:29 UTC
Status:Blacklisted
Listing reason:Vidar C&C
Listing date:2026-01-06 07:20:49
Malware samples:24
Botnet C&Cs:2

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2026-01-06 03:48:299c1e0aad3e5f84784aecdd96f47c9630n/a172.67.194.118:443
2026-01-06 00:39:13c40d37685679970a33b7c71161e8ce2en/a172.67.194.118:443
2026-01-05 13:36:081a0c6ff31808f647537342ea625d7e30n/a172.67.194.118:443
2026-01-05 06:53:3699b9cc84f94cb812a5792e4267bd4ab7n/a172.67.194.118:443
2026-01-05 06:29:079929778287800846b33fecab4ece1eb0n/a172.67.194.118:443
2026-01-04 21:25:51e5af968bd5c5d662e3f60ccbfc4fdc32n/a104.21.12.123:443
2026-01-04 20:39:00cdca4428337fda33b236ebdfdb11e16dn/a104.21.12.123:443
2026-01-04 16:49:08626eff030b7c364f188c8aff23eca7a8n/a172.67.194.118:443
2026-01-04 16:43:4953947098f8c5cf4c0d833f8072bfcbe3n/a104.21.12.123:443
2026-01-04 12:27:29a22f876f4f5e654000aee78de1cfd23fn/a172.67.194.118:443
2026-01-04 11:45:480e66d13be2115c10ebba4145944d3278n/a172.67.194.118:443
2026-01-04 09:19:04000dd4a02f8ee3834695c73057447bb8n/a104.21.12.123:443
2026-01-04 09:19:007e094b5015f930e13ce99fc5a3f6e4b6n/a172.67.194.118:443
2026-01-04 07:51:34a75963f16226c1e67b0254411c045e5fn/a172.67.194.118:443
2026-01-03 14:12:061c755c5169331e63f9c214c2ce3b58ddn/a172.67.194.118:443
2026-01-03 12:57:312769ddf431ca677ae15b6a4a4a447383n/a104.21.12.123:443
2026-01-03 11:14:58c572c5317cf590755ca75a57bd9d1674n/a172.67.194.118:443
2026-01-03 09:25:10111784af752270f398114faf85d36d8fn/a172.67.194.118:443
2026-01-03 08:40:48f717720ec56a05d1a2af4cd231f6840en/a104.21.12.123:443
2026-01-03 01:59:13b00e4448ff28a1e2254e341d681224f5n/a104.21.12.123:443
2026-01-02 20:05:19c233c64deb4db279ca4e746b0aa6b984n/a172.67.194.118:443
2026-01-02 18:46:22535b016dd4e35e4f329edd338b3b2906n/a172.67.194.118:443
2026-01-02 17:20:009ff050b6a6db38e4f16fb21dad7f1cc7n/a172.67.194.118:443
2026-01-02 16:16:305251318d67f74cf3ae92b14a18488c61n/a104.21.12.123:443

# of entries: 24 (max: 100)