SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6d54a64b57b9fdcffdab43323b1755356a136d42.
Database Entry
| SHA1 Fingerprint: | 6d54a64b57b9fdcffdab43323b1755356a136d42 |
|---|---|
| Certificate Common Name (CN): | 192.236.176.108, OU=gghhhii, ST=uvvwxxyyyz, O=ddeef, C=uu, L=zaabccdd, Email=jjklm@192.236.176.108 |
| Issuer Distinguished Name (DN): | 192.236.176.108, OU=gghhhii, ST=uvvwxxyyyz, O=ddeef, C=uu, L=zaabccdd, Email=jjklm@192.236.176.108 |
| TLS Version: | TLS 1.2 |
| First seen: | 2022-04-19 07:31:45 UTC |
| Last seen: | 2022-04-27 06:23:26 UTC |
| Status: | Blacklisted |
| Listing reason: | DanaBot C&C |
| Listing date: | 2022-04-27 07:26:23 |
| Malware samples: | 14 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2022-04-27 06:23:26 | 724d979aba7f815b2cf939c64c9d0a50 | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-26 20:21:04 | 587832d187a43c3866072d5bf321cfbb | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-26 15:24:24 | c8c68bff2acbd56ce5171ea921425a29 | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-26 11:07:04 | 68ca24a9bf92b8ddcae9ff0ff5ca509c | n/a | 192.236.176.108:443 | |
| 2022-04-26 08:50:05 | 2a92132559505f6635b0a8974070b5d4 | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-26 05:59:29 | 341c386b7a8aeacb84abd0150ea8baad | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-25 20:28:46 | 08c29585f2cbe6e358230af55c2140d8 | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-25 19:42:01 | ac7660c3737561ebb9bfa471f0c5f2a0 | n/a | DanaBot | 192.236.176.108:443 |
| 2022-04-25 07:04:11 | c9ff5738de33e3b6bb7cd01ffa60405b |  40 / 66 (60.61%)
| DanaBot | 192.236.176.108:443 |
| 2022-04-21 07:23:24 | ae6a68f651c30d7c6c914114fa14aa0b | 23 / 69 (33.33%)
| DanaBot | 192.236.176.108:443 |
| 2022-04-21 02:36:13 | cb646d4f9ce74813d500e53d0208e31f | 43 / 70 (61.43%)
| 192.236.176.108:443 | |
| 2022-04-19 15:55:02 | 9b114998d0639e860dc1aecc458f8377 | 23 / 67 (34.33%)
| DanaBot | 192.236.176.108:443 |
| 2022-04-19 13:46:36 | 8fba92e7730c734197c8e5977533df77 | 24 / 67 (35.82%)
| DanaBot | 192.236.176.108:443 |
| 2022-04-19 07:31:45 | 65d49d27f00a57695df2bff626b1607b | 24 / 69 (34.78%)
| RedLineStealer | 192.236.176.108:443 |
# of entries: 14 (max: 100)