SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 7d2ee42f4f0a70863a3c8d045999524bd22f62bc.

Database Entry

SHA1 Fingerprint:7d2ee42f4f0a70863a3c8d045999524bd22f62bc
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:TLSv1
First seen:2016-09-19 20:37:32 UTC
Last seen:2016-09-20 21:33:12 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-09-20 10:25:32
Malware samples:4
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-09-20 21:33:122e503f333faa68d61e659bbc2c1649bfVirustotal results 29/57 (50.88%) Gootkit 107.191.119.162:80
2016-09-20 21:33:122e503f333faa68d61e659bbc2c1649bfVirustotal results 29/57 (50.88%) Gootkit 107.191.119.162:80
2016-09-19 23:46:4189a92ebbc997fd22401116e3f7fd8cd2Virustotal results 37/56 (66.07%) Gootkit 107.191.119.162:80
2016-09-19 23:46:4189a92ebbc997fd22401116e3f7fd8cd2Virustotal results 37/56 (66.07%) Gootkit 107.191.119.162:80
2016-09-19 21:12:49d24e9a87292dc91122b277ccebba8f58Virustotal results 30/57 (52.63%) Gootkit 107.191.119.162:80
2016-09-19 21:12:49d24e9a87292dc91122b277ccebba8f58Virustotal results 30/57 (52.63%) Gootkit 107.191.119.162:80
2016-09-19 20:37:32790274fd632830f57e437fa36d3c2ad3Virustotal results 8/57 (14.04%) Gootkit 107.191.119.162:80
2016-09-19 20:37:32790274fd632830f57e437fa36d3c2ad3Virustotal results 8/57 (14.04%) Gootkit 107.191.119.162:80

# of entries: 8 (max: 100)