SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6ebc65b326999b45343b636b7d22efc085f7c674.
Database Entry
| SHA1 Fingerprint: | 6ebc65b326999b45343b636b7d22efc085f7c674 |
|---|---|
| Certificate Common Name (CN): | Predgqupe.Cuvishifolicha.trade |
| Issuer Distinguished Name (DN): | Predgqupe.Cuvishifolicha.trade |
| TLS Version: | TLS 1.2' NOTBEF |
| First seen: | 2018-11-24 00:44:19 UTC |
| Last seen: | 2018-12-07 11:33:17 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2018-12-08 09:41:23 |
| Malware samples: | 19 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2018-12-07 11:33:17 | 0ad4314bc4347dd6bd8e3d170a0f2cb9 |  39/71 (54.93%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 11:33:17 | 0ad4314bc4347dd6bd8e3d170a0f2cb9 | 39/71 (54.93%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 10:33:29 | 164ffe1ffeaa0a954104d79c754c3b45 | 9/67 (13.43%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 10:33:29 | 164ffe1ffeaa0a954104d79c754c3b45 | 9/67 (13.43%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 09:52:57 | b015ebb56916012ffecebc54ba3e5571 | 40/70 (57.14%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 09:52:57 | b015ebb56916012ffecebc54ba3e5571 | 40/70 (57.14%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 00:31:52 | 1afe1fc621f13bf7905a8e1c2384bafe | 41/71 (57.75%)
| Dridex | 185.244.150.230:443 |
| 2018-12-07 00:31:52 | 1afe1fc621f13bf7905a8e1c2384bafe | 41/71 (57.75%)
| Dridex | 185.244.150.230:443 |
| 2018-12-03 18:05:21 | be4733da4ced8716cb092a60291242d5 | 39/70 (55.71%)
| Dridex | 185.244.150.230:443 |
| 2018-12-03 18:05:21 | be4733da4ced8716cb092a60291242d5 | 39/70 (55.71%)
| Dridex | 185.244.150.230:443 |
| 2018-11-27 16:12:17 | 1e4f0502e15f23deb677cd6de11d0ffa | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:12:17 | 1e4f0502e15f23deb677cd6de11d0ffa | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:10:37 | 19cb12ab7944e0e0be5f26f8d57bec96 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:10:37 | 19cb12ab7944e0e0be5f26f8d57bec96 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:09:56 | 6fda62c46c49b83bd11aeabbd3a32904 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:09:56 | 6fda62c46c49b83bd11aeabbd3a32904 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:09:51 | 101734d340958f361f4d412db9a3fd92 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:09:51 | 101734d340958f361f4d412db9a3fd92 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:08:18 | 619dfab9a1acdc33ef0c2a2fcd1f3603 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:08:18 | 619dfab9a1acdc33ef0c2a2fcd1f3603 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 185.244.150.230:443 |
| 2018-11-27 16:08:07 | 0fa497c1a3603a4b629c26afb1e89869 | n/a | AgentTesla | 185.244.150.230:443 |
| 2018-11-27 16:07:43 | 20fc2b55c855deaedd8308da65cc4f25 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:07:43 | 20fc2b55c855deaedd8308da65cc4f25 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:07:04 | 703f20744b6db51ab6a7023bd636c2fc | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:07:04 | 703f20744b6db51ab6a7023bd636c2fc | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:06:22 | 835d2cca7737f4a44876b9d3f2eccfe6 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:06:22 | 835d2cca7737f4a44876b9d3f2eccfe6 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:05:38 | 5c55e4f2ad96338563fff25e20812677 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:05:38 | 5c55e4f2ad96338563fff25e20812677 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:04:12 | fc90b83e1fa10fa23d544478a2042ac2 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:04:12 | fc90b83e1fa10fa23d544478a2042ac2 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:03:22 | e6948b959b931b1103f53f309ba20d2d | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:03:22 | e6948b959b931b1103f53f309ba20d2d | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:01:45 | cae2134fad4a82ad756c5cf720ec41f6 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-27 16:01:45 | cae2134fad4a82ad756c5cf720ec41f6 | n/a | Gozi | 185.244.150.230:443 |
| 2018-11-24 00:44:19 | 0f707a19a9d0f8c1072b7449b206caa6 | 38/69 (55.07%)
| Dridex | 185.244.150.230:443 |
| 2018-11-24 00:44:19 | 0f707a19a9d0f8c1072b7449b206caa6 | 38/69 (55.07%)
| Dridex | 185.244.150.230:443 |
# of entries: 38 (max: 100)