SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6746072c2f7c0577e405562e3e2172c9d300370d.

Database Entry


SHA1 Fingerprint:6746072c2f7c0577e405562e3e2172c9d300370d
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2
First seen:2018-11-06 11:49:27 UTC
Last seen:2018-11-06 14:59:04 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2018-11-06 15:43:39
Malware samples:8
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-11-06 14:59:044511d3be87e54f74b8a4bd34bb2d24fbn/aGozi 95.181.198.116:443
2018-11-06 14:54:09d4f1505e8d6675f2873ac27ead39c124Virustotal results 44/67 (65.67%) Gozi 95.181.198.116:443
2018-11-06 13:43:300cf452a84a2f3d025884273a4dd4808bn/aGozi 95.181.198.116:443
2018-11-06 13:27:23383850dd6dbc627f76af345d11803991n/aGozi 95.181.198.116:443
2018-11-06 12:25:0425c7b140442e44984de49345af751032n/aGozi 95.181.198.116:443
2018-11-06 12:04:5952105242aa5afb03ceb4f1075baca440Virustotal results 25/57 (43.86%) Gozi 95.181.198.116:443
2018-11-06 11:53:18458e2f3ea7d98ec7e57f9baa875777edn/aGozi 95.181.198.116:443
2018-11-06 11:49:2853208e956a4f862c3ea96272ff60f672Virustotal results 25/57 (43.86%) Gozi 95.181.198.116:443

# of entries: 8 (max: 100)