SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 792418c297203344559c6a74a1175d3367ff4810.
Database Entry
| SHA1 Fingerprint: | 792418c297203344559c6a74a1175d3367ff4810 |
|---|---|
| Certificate Common Name (CN): | example.com |
| Issuer Distinguished Name (DN): | example.com |
| TLS Version: | TLSv1 |
| First seen: | 2015-05-01 09:44:57 UTC |
| Last seen: | 2015-05-11 13:01:58 UTC |
| Status: | Blacklisted |
| Listing reason: | Dridex C&C |
| Listing date: | 2015-05-14 08:42:56 |
| Malware samples: | 15 |
| Botnet C&Cs: | 3 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2015-05-11 13:01:58 | acb7cea7dda6f60846f937ca2c1c2093 | n/a | Dridex | 87.117.229.29:443 |
| 2015-05-11 13:01:58 | acb7cea7dda6f60846f937ca2c1c2093 | n/a | Dridex | 87.117.229.29:443 |
| 2015-05-11 12:41:21 | c9335906d559e6f7f20bf3e04ec9fbcb | n/a | 87.117.229.29:443 | |
| 2015-05-11 12:41:21 | c9335906d559e6f7f20bf3e04ec9fbcb | n/a | 87.117.229.29:443 | |
| 2015-05-11 12:24:20 | aa8a6e8ebdde7b96f0329497ee95c6d2 | n/a | Dridex | 87.117.229.29:443 |
| 2015-05-11 12:24:20 | aa8a6e8ebdde7b96f0329497ee95c6d2 | n/a | Dridex | 87.117.229.29:443 |
| 2015-05-11 05:35:59 | ca2f1ba4c6e14b19a66ef39f2327b689 | n/a | 87.117.229.29:443 | |
| 2015-05-11 05:35:59 | ca2f1ba4c6e14b19a66ef39f2327b689 | n/a | 87.117.229.29:443 | |
| 2015-05-10 14:32:49 | 2a46ff6e6dbd3358324dd6cdbb95acd4 | n/a | 43.249.81.85:443 | |
| 2015-05-10 14:32:49 | 2a46ff6e6dbd3358324dd6cdbb95acd4 | n/a | 43.249.81.85:443 | |
| 2015-05-08 06:59:28 | 24078a572efcd145a8a6829280b7dc6d |  4/57 (7.02%)
| 87.117.229.29:443 | |
| 2015-05-08 06:59:28 | 24078a572efcd145a8a6829280b7dc6d | 4/57 (7.02%)
| 87.117.229.29:443 | |
| 2015-05-07 22:47:54 | da73e95ebeb81873e08decf4ebb8b644 | 27/57 (47.37%)
| 87.117.229.29:443 | |
| 2015-05-07 22:47:54 | da73e95ebeb81873e08decf4ebb8b644 | 27/57 (47.37%)
| 87.117.229.29:443 | |
| 2015-05-07 17:48:38 | 7ce89250e2e1079dd4d9bf25c306b1a3 | 1/57 (1.75%)
| 87.117.229.29:443 | |
| 2015-05-07 17:48:38 | 7ce89250e2e1079dd4d9bf25c306b1a3 | 1/57 (1.75%)
| 87.117.229.29:443 | |
| 2015-05-07 14:12:08 | d7d8feca39ec36f8730adf1d842c6d94 | 1/57 (1.75%)
| 87.117.229.29:443 | |
| 2015-05-07 14:12:08 | d7d8feca39ec36f8730adf1d842c6d94 | 1/57 (1.75%)
| 87.117.229.29:443 | |
| 2015-05-06 23:21:37 | 1911eb9f0b22a456155ce7302621f571 | n/a | Downloader.Pony | 31.24.30.65:443 |
| 2015-05-06 23:21:37 | 1911eb9f0b22a456155ce7302621f571 | n/a | Downloader.Pony | 31.24.30.65:443 |
| 2015-05-06 22:53:40 | b790c67771304698f9948152da35297b | n/a | Downloader.Pony | 31.24.30.65:443 |
| 2015-05-06 22:53:40 | b790c67771304698f9948152da35297b | n/a | Downloader.Pony | 31.24.30.65:443 |
| 2015-05-06 15:18:57 | e0aa41a54eeb67480220997a205bc651 | 0/56 (0.00%)
| 31.24.30.65:443 | |
| 2015-05-06 15:18:57 | e0aa41a54eeb67480220997a205bc651 | 0/56 (0.00%)
| 31.24.30.65:443 | |
| 2015-05-05 01:55:47 | 26fcd1118c75fdc6dd026769042955fa | n/a | 31.24.30.65:443 | |
| 2015-05-05 01:55:47 | 26fcd1118c75fdc6dd026769042955fa | n/a | 31.24.30.65:443 | |
| 2015-05-01 20:59:44 | d0aee58d96d15b058e083e727296ff73 | 3/53 (5.66%)
| 31.24.30.65:443 | |
| 2015-05-01 20:59:44 | d0aee58d96d15b058e083e727296ff73 | 3/53 (5.66%)
| 31.24.30.65:443 | |
| 2015-05-01 09:44:57 | 935b1e95e436c2110964cfcb22823f99 | n/a | Dridex | 31.24.30.65:443 |
| 2015-05-01 09:44:57 | 935b1e95e436c2110964cfcb22823f99 | n/a | Dridex | 31.24.30.65:443 |
# of entries: 30 (max: 100)