SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 7841dc140c85781e29108109b73ab67c276a8eed.
Database Entry
| SHA1 Fingerprint: | 7841dc140c85781e29108109b73ab67c276a8eed |
|---|---|
| Certificate Common Name (CN): | willowbox.xyz |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2026-09-14 14:16:25 UTC |
| Last seen: | 2026-09-15 00:23:48 UTC |
| Status: | Blacklisted |
| Listing reason: | OffLoader C&C |
| Listing date: | 2026-09-15 12:45:47 |
| Malware samples: | 9 |
| Botnet C&Cs: | 3 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2026-09-15 00:23:48 | 218018bfbd640568555e29c4dd9d01b3 | n/a | 188.114.97.12:443 | |
| 2026-09-14 22:47:11 | 1da38325304f4e607fce74864e09dfcd | n/a | 188.114.97.12:443 | |
| 2026-09-14 21:30:25 | 1b612a919f9c7f287bc61176b83a34a4 | n/a | 188.114.97.12:443 | |
| 2026-09-14 20:24:37 | 18b897f4e9bd85793920834950bafe37 | n/a | 188.114.97.12:443 | |
| 2026-09-14 20:17:20 | 18050deec726b0a0ee03e68ce8a9d53a | n/a | 188.114.97.3:443 | |
| 2026-09-14 17:36:23 | 04e2cf75884e3a743762c73e61b8154a | n/a | 188.114.97.12:443 | |
| 2026-09-14 17:33:06 | 0775d17055210a8ae5afebca66080c42 | n/a | 188.114.97.12:443 | |
| 2026-09-14 14:40:00 | 08f0db672f4373b9dffd9f92c751d143 | n/a | 172.67.188.39:443 | |
| 2026-09-14 14:16:25 | 0a15e5c5e2bec6a83532db1f7e9a116a | n/a | 188.114.97.12:443 |
# of entries: 9 (max: 100)