SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 7486ac5b2af44413003697968d5c2f46faa649ca.
Database Entry
| SHA1 Fingerprint: | 7486ac5b2af44413003697968d5c2f46faa649ca |
|---|---|
| Certificate Common Name (CN): | server.domain.com/emailAddress=root@server.domain.com |
| Issuer Distinguished Name (DN): | server.domain.com/emailAddress=root@server.domain.com |
| TLS Version: | TLS 1.2' NOTBEF |
| First seen: | 2019-11-20 00:07:04 UTC |
| Last seen: | 2019-11-20 13:06:54 UTC |
| Status: | Blacklisted |
| Listing reason: | Ostap C&C |
| Listing date: | 2019-11-20 13:09:50 |
| Malware samples: | 2 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2019-11-20 13:06:54 | 4a2d822d53b2ca419a3eeb9aacd3a730 |  6 / 60 (10.00%)
| TrickBot | 37.252.10.127:443 |
| 2019-11-20 13:06:54 | 4a2d822d53b2ca419a3eeb9aacd3a730 | 6 / 60 (10.00%)
| TrickBot | 37.252.10.127:443 |
| 2019-11-20 13:06:54 | 4a2d822d53b2ca419a3eeb9aacd3a730 | 6 / 60 (10.00%)
| TrickBot | 37.252.10.127:443 |
| 2019-11-20 13:06:54 | 4a2d822d53b2ca419a3eeb9aacd3a730 | 6 / 60 (10.00%)
| TrickBot | 37.252.10.127:443 |
| 2019-11-20 00:07:04 | 7df2b15a142aadad78605fc6d942b676 | n/a | Ostap | 37.252.10.127:443 |
| 2019-11-20 00:07:04 | 7df2b15a142aadad78605fc6d942b676 | n/a | Ostap | 37.252.10.127:443 |
# of entries: 6 (max: 100)