SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6ebc65b326999b45343b636b7d22efc085f7c674.

Database Entry


SHA1 Fingerprint:6ebc65b326999b45343b636b7d22efc085f7c674
Certificate Common Name (CN):Predgqupe.Cuvishifolicha.trade
Issuer Distinguished Name (DN):Predgqupe.Cuvishifolicha.trade
TLS Version:TLS 1.2' NOTBEF
First seen:2018-11-24 00:44:19 UTC
Last seen:2018-12-07 11:33:17 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2018-12-08 09:41:23
Malware samples:19
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2018-12-07 11:33:170ad4314bc4347dd6bd8e3d170a0f2cb9Virustotal results 39/71 (54.93%) Dridex 185.244.150.230:443
2018-12-07 10:33:29164ffe1ffeaa0a954104d79c754c3b45Virustotal results 9/67 (13.43%) Dridex 185.244.150.230:443
2018-12-07 09:52:57b015ebb56916012ffecebc54ba3e5571Virustotal results 40/70 (57.14%) Dridex 185.244.150.230:443
2018-12-07 00:31:521afe1fc621f13bf7905a8e1c2384bafeVirustotal results 41/71 (57.75%) Dridex 185.244.150.230:443
2018-12-03 18:05:21be4733da4ced8716cb092a60291242d5Virustotal results 39/70 (55.71%) Dridex 185.244.150.230:443
2018-11-27 16:12:171e4f0502e15f23deb677cd6de11d0ffan/aGozi 185.244.150.230:443
2018-11-27 16:10:3719cb12ab7944e0e0be5f26f8d57bec96n/aGozi 185.244.150.230:443
2018-11-27 16:09:566fda62c46c49b83bd11aeabbd3a32904n/aGozi 185.244.150.230:443
2018-11-27 16:09:51101734d340958f361f4d412db9a3fd92n/aGozi 185.244.150.230:443
2018-11-27 16:08:18619dfab9a1acdc33ef0c2a2fcd1f3603n/aGozi 185.244.150.230:443
2018-11-27 16:08:070fa497c1a3603a4b629c26afb1e89869n/aGozi 185.244.150.230:443
2018-11-27 16:07:4320fc2b55c855deaedd8308da65cc4f25n/a185.244.150.230:443
2018-11-27 16:07:04703f20744b6db51ab6a7023bd636c2fcn/aGozi 185.244.150.230:443
2018-11-27 16:06:22835d2cca7737f4a44876b9d3f2eccfe6n/aGozi 185.244.150.230:443
2018-11-27 16:05:385c55e4f2ad96338563fff25e20812677n/aGozi 185.244.150.230:443
2018-11-27 16:04:12fc90b83e1fa10fa23d544478a2042ac2n/aGozi 185.244.150.230:443
2018-11-27 16:03:22e6948b959b931b1103f53f309ba20d2dn/aGozi 185.244.150.230:443
2018-11-27 16:01:45cae2134fad4a82ad756c5cf720ec41f6n/aGozi 185.244.150.230:443
2018-11-24 00:44:190f707a19a9d0f8c1072b7449b206caa6Virustotal results 38/69 (55.07%) Dridex 185.244.150.230:443

# of entries: 19 (max: 100)