SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6b989ad31844a89c4cef094983cfa67ac04eed37.

Database Entry


SHA1 Fingerprint:6b989ad31844a89c4cef094983cfa67ac04eed37
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2
First seen:2020-04-22 12:10:33 UTC
Last seen:2020-04-24 23:06:44 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2020-04-23 07:40:57
Malware samples:9
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2020-04-24 23:06:44393dca0466583a0c9066fc8b9ef0679cn/aGozi 178.79.158.245:443
2020-04-24 22:16:08d3099f9d968447d754108638f7f87ea9n/aGozi 178.79.158.245:443
2020-04-24 15:31:2306be74220dd06e0204e5ecd46c231085n/aGozi 178.79.158.245:443
2020-04-24 14:07:321d94cc32838b73795b6578564b80905an/aGozi 178.79.158.245:443
2020-04-24 12:52:17b4ab969747e863a936b3aca56d7268can/aGozi 178.79.158.245:443
2020-04-24 07:24:48e704302809da8bdef8e97ae3a05a4020Virustotal results 30 / 73 (41.10%) Gozi 178.79.158.245:443
2020-04-23 04:14:24c804695bb2eb6776706ac4e7d586773bn/aGozi 178.79.158.245:443
2020-04-22 21:56:1928413377efd5904321eee5db4c299134n/aGozi 178.79.158.245:443
2020-04-22 12:10:3388c736232fb454d269f854e9f16558cfn/aGozi 178.79.158.245:443

# of entries: 9 (max: 100)