SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6b1675355588ac8adc1a87c302eef2d10868caa8.
Database Entry
| SHA1 Fingerprint: | 6b1675355588ac8adc1a87c302eef2d10868caa8 |
|---|---|
| Certificate Common Name (CN): | * |
| Issuer Distinguished Name (DN): | * |
| TLS Version: | TLS 1.2 |
| First seen: | 2019-07-02 13:29:41 UTC |
| Last seen: | 2019-07-02 14:00:46 UTC |
| Status: | Blacklisted |
| Listing reason: | Gozi C&C |
| Listing date: | 2019-07-02 13:46:38 |
| Malware samples: | 3 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2019-07-02 14:00:46 | 4b2f5513dcdc19ed93482afa7777b6d1 |  15/73 (20.55%)
| Gozi | 5.39.119.175:443 |
| 2019-07-02 14:00:46 | 4b2f5513dcdc19ed93482afa7777b6d1 | 15/73 (20.55%)
| Gozi | 5.39.119.175:443 |
| 2019-07-02 13:59:01 | 381b1cb59a84367167406ede23025113 | 16/70 (22.86%)
| Gozi | 5.39.119.175:443 |
| 2019-07-02 13:59:01 | 381b1cb59a84367167406ede23025113 | 16/70 (22.86%)
| Gozi | 5.39.119.175:443 |
| 2019-07-02 13:29:41 | 2b6dfc3f06af5da3c4c7a8dd7f53f2fa | n/a | Gozi | 5.39.119.175:443 |
| 2019-07-02 13:29:41 | 2b6dfc3f06af5da3c4c7a8dd7f53f2fa | n/a | Gozi | 5.39.119.175:443 |
# of entries: 6 (max: 100)