SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 6f7348c0bb276568512d709f983c6df990766482.

Database Entry


SHA1 Fingerprint:6f7348c0bb276568512d709f983c6df990766482
Certificate Common Name (CN):fduqkl gornu
Issuer Distinguished Name (DN):fduqkl gornu
TLS Version:TLS 1.2
First seen:2025-05-30 22:19:08 UTC
Last seen:2025-05-31 09:24:00 UTC
Status:Blacklisted
Listing reason:QuasarRAT
Listing date:2025-06-01 16:57:44
Malware samples:6
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2025-05-31 09:24:005ba3d954c53bca252f4396aedaa6e974n/a185.254.97.125:26
2025-05-31 08:03:45883191d9361c4b5f17cba5740e136885n/a185.254.97.125:26
2025-05-31 07:05:09cb54abbefd805c1f796ca837597957a4n/a185.254.97.125:26
2025-05-31 02:02:514bb619e2aaca6bd6961667c4305007e7n/a185.254.97.125:26
2025-05-31 01:11:0290df728a0f3d68c07f2c107abfb61db8n/a185.254.97.125:26
2025-05-30 22:19:0816b5067ceac56b4caf4e3d05c2e99877n/a185.254.97.125:26

# of entries: 6 (max: 100)