SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6a7082d678a42a1f99e5a0e086bea62a82a3f9fc.

Database Entry

SHA1 Fingerprint:	6a7082d678a42a1f99e5a0e086bea62a82a3f9fc
Certificate Common Name (CN):	codetohaven.com
Issuer Distinguished Name (DN):	WE1
TLS Version:	TLS 1.2
First seen:	2026-03-12 18:42:36 UTC
Last seen:	2026-04-01 12:02:57 UTC
Status:	Blacklisted
Listing reason:	Vidar C&C
Listing date:	2026-04-01 13:58:32
Malware samples:	14
Botnet C&Cs:	2

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)	Malware Sample (MD5 hash)	VT	Botnet C&C (IP:port)
2026-04-01 12:02:57	bc3027a8af6a7c07ab4e6dd3d3e0376d	n/a	104.21.74.2:443
2026-04-01 11:24:16	1dbeaa0d52b10cd4a92716f94545f924	n/a	104.21.74.2:443
2026-04-01 03:00:08	124d86b8682b392c4311558ef71067c6	n/a	172.67.194.54:443
2026-04-01 02:58:17	11c9999aefbde86b1a1b71a3d1c06b99	n/a	104.21.74.2:443
2026-03-31 16:53:06	05a24382078970a66ede63f3bfb90f51	n/a	104.21.74.2:443
2026-03-31 13:34:19	fb67d796202ea6bb8178e48ded107469	n/a	104.21.74.2:443
2026-03-31 13:31:48	cbde8ae0d00710e40fd7a2186c14fc56	n/a	172.67.194.54:443
2026-03-31 13:28:51	ca2c271ba4866a42623802be7b8d9908	n/a	172.67.194.54:443
2026-03-31 11:47:45	28fd8f9dcbeb556862818c3da106b324	n/a	104.21.74.2:443
2026-03-31 10:43:14	9c0bc293d9153a7ee211d4bce74d5f0a	n/a	104.21.74.2:443
2026-03-30 15:32:02	b995cc86f57a59c0a45ecc3f0151f43c	n/a	104.21.74.2:443
2026-03-20 00:20:26	0f4d30df8e480d1fa6c4593a5329f6a8	n/a	104.21.74.2:443
2026-03-14 08:07:50	670feea5f79acee8b10f15cec05f4eff	n/a	104.21.74.2:443
2026-03-12 18:42:36	12c130da3e73e6455b32af094bbaa62f	n/a	104.21.74.2:443

# of entries: 14 (max: 100)