SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6c194c35aa5be04c429e06d95815c82e7b87ecca.
Database Entry
| SHA1 Fingerprint: | 6c194c35aa5be04c429e06d95815c82e7b87ecca |
|---|---|
| Certificate Common Name (CN): | ssffaa2.xyz |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-03-18 23:32:30 UTC |
| Last seen: | 2026-03-19 09:52:53 UTC |
| Status: | Blacklisted |
| Listing reason: | Vidar C&C |
| Listing date: | 2026-03-19 12:57:23 |
| Malware samples: | 12 |
| Botnet C&Cs: | 5 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-03-19 09:52:53 | 892aac1614521bbeb7b06e8fe84ff4bc | n/a | 172.67.164.229:443 | |
| 2026-03-19 09:18:56 | 0f1342da9744462d6fab313a7730f2b0 | n/a | 188.114.96.0:443 | |
| 2026-03-19 08:41:32 | 0a70f2d462e1d9b6dbee9fa24fff4809 | n/a | 188.114.96.0:443 | |
| 2026-03-19 08:25:53 | e7e0a97612b2b5127f16f220c1db8657 | n/a | 188.114.96.12:443 | |
| 2026-03-19 08:22:11 | ee92509e85099451fdb94f09bc2d5f94 | n/a | 188.114.96.12:443 | |
| 2026-03-19 07:59:56 | 137c3d7860939af239d99f3c1c8e8c9d | n/a | 188.114.97.12:443 | |
| 2026-03-19 07:43:02 | 36961a26de03257caeb8485c9c196dd6 | n/a | 188.114.96.3:443 | |
| 2026-03-19 07:04:46 | 11a7ca633e0a23596f3a695bc8ed528f | n/a | 188.114.96.3:443 | |
| 2026-03-19 02:06:30 | bd65d402f2065cd7ad972151b2df5c9a | n/a | 188.114.96.12:443 | |
| 2026-03-19 00:43:54 | 94f556b9bf5861129a6099c79b1f4048 | n/a | 188.114.96.12:443 | |
| 2026-03-19 00:30:58 | 0cf2280f068e7258f307c2d89d025799 | n/a | 188.114.97.12:443 | |
| 2026-03-18 23:32:30 | 0981ee712bf9e66ea4552ee63e64df36 | n/a | 188.114.96.3:443 |
# of entries: 12 (max: 100)