SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6a13917daa4ec20277cb509daf143d15f4048d8f.

Database Entry


SHA1 Fingerprint:6a13917daa4ec20277cb509daf143d15f4048d8f
Certificate Common Name (CN):C=US, ST=Denial, L=Springfield, O=Dis
Issuer Distinguished Name (DN):C=US, ST=Denial, L=Springfield, O=Dis
TLS Version:TLS 1.2
First seen:2016-04-13 06:02:37 UTC
Last seen:2016-04-13 06:32:01 UTC
Status:Blacklisted
Listing reason:TorrentLocker C&C
Listing date:2016-04-13 07:47:08
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-04-13 06:32:01746c08c28a8c62dc4593519d5ebcda43Virustotal results 1/56 (1.79%) TorrentLocker 5.187.5.204:443
2016-04-13 06:32:01746c08c28a8c62dc4593519d5ebcda43Virustotal results 1/56 (1.79%) TorrentLocker 5.187.5.204:443
2016-04-13 06:14:37fd626696d8d7100a30c113dd2e2301caVirustotal results 2/57 (3.51%) TorrentLocker 5.187.5.204:443
2016-04-13 06:14:37fd626696d8d7100a30c113dd2e2301caVirustotal results 2/57 (3.51%) TorrentLocker 5.187.5.204:443
2016-04-13 06:02:37faf825375bb6e13338dc16376deca6cfVirustotal results 4/56 (7.14%) TorrentLocker 5.187.5.204:443
2016-04-13 06:02:37faf825375bb6e13338dc16376deca6cfVirustotal results 4/56 (7.14%) TorrentLocker 5.187.5.204:443

# of entries: 6 (max: 100)