SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 69fdf0eea24052986678d0e849de279205b1beb6.

Database Entry


SHA1 Fingerprint:69fdf0eea24052986678d0e849de279205b1beb6
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-05-26 03:08:22 UTC
Last seen:2016-05-26 08:09:50 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-06-02 07:58:31
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-05-26 08:09:50126ab55e7ca00408282ec531b3e7a177Virustotal results 20/57 (35.09%) Gootkit 185.118.142.116:80
2016-05-26 08:09:50126ab55e7ca00408282ec531b3e7a177Virustotal results 20/57 (35.09%) Gootkit 185.118.142.116:80
2016-05-26 03:08:220c599a36ddca27097e7b05d7f6671c06Virustotal results 8/57 (14.04%) Gootkit 185.118.142.116:80
2016-05-26 03:08:220c599a36ddca27097e7b05d7f6671c06Virustotal results 8/57 (14.04%) Gootkit 185.118.142.116:80

# of entries: 4 (max: 100)