SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 80ec6970979151cae83ce1a41e2640d89ec746d1.

Database Entry


SHA1 Fingerprint:80ec6970979151cae83ce1a41e2640d89ec746d1
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-06-21 17:04:20 UTC
Last seen:2014-07-07 23:47:06 UTC
Status:Blacklisted
Listing reason:Shylock C&C
Listing date:2014-06-24 10:35:21
Malware samples:60
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-07-07 23:47:063357d093aa7b41d7f54dc37636796c09Virustotal results 25/51 (49.02%) Shylock 176.122.227.28:443
2014-07-05 09:06:0586f1f4b00070a3038e449aa1b46d382fVirustotal results 24/53 (45.28%) Shylock 176.122.227.28:443
2014-07-01 08:09:03b42e4384ac9a7b8db9b776fb3c349db0Virustotal results 22/54 (40.74%) Shylock 176.122.227.28:443
2014-06-29 06:14:58ac6db4f295f1ecdc27af5956d383bef6Virustotal results 21/54 (38.89%) Shylock 176.122.227.28:443
2014-06-28 16:40:58a14c00868ccf2055513d34e91d30ca25Virustotal results 31/54 (57.41%) Shylock 176.122.227.28:443
2014-06-28 16:17:15a13642e2ad8ebf26b9b8d7306e83cb49Virustotal results 22/54 (40.74%) 176.122.227.28:443
2014-06-28 12:25:169ab1fcfc2797132e11ace44eeb18e8afVirustotal results 34/53 (64.15%) Shylock 176.122.227.28:443
2014-06-28 12:05:4498942dd3b9d6a19069253badfdfc222aVirustotal results 22/54 (40.74%) Shylock 176.122.227.28:443
2014-06-28 11:49:2996a215e43ba28ed6ccf45a5a1c1229d7Virustotal results 36/54 (66.67%) 176.122.227.28:443
2014-06-28 08:18:31c7335bfbd52295936c57ae37956ce075Virustotal results 12/54 (22.22%) Shylock 176.122.227.28:443
2014-06-28 07:42:1967461cccdb30bc405de3f1a84977e865Virustotal results 23/54 (42.59%) Shylock 176.122.227.28:443
2014-06-28 07:39:0713bf9988b7db0f6b5c6df0966ce179b6Virustotal results 29/54 (53.70%) 176.122.227.28:443
2014-06-28 07:33:364dcb162ab13d62b7a344883c6a6d2b70Virustotal results 25/54 (46.30%) Shylock 176.122.227.28:443
2014-06-28 05:36:2936f88de2931eb238d487298af7653172Virustotal results 28/54 (51.85%) Shylock 176.122.227.28:443
2014-06-28 05:32:52453fa948c8a9bb5d797f7ea037c01109Virustotal results 19/54 (35.19%) Shylock 176.122.227.28:443
2014-06-28 04:43:03573bdb8e4c4469457fe3f38d3f47e7d0Virustotal results 1/49 (2.04%) 176.122.227.28:443
2014-06-28 03:13:193466b72cb85131945088f8719d4abc81Virustotal results 28/54 (51.85%) Shylock 176.122.227.28:443
2014-06-28 01:55:5678677caef6d2b5eef9d18fd3f9e9d47fVirustotal results 22/53 (41.51%) 176.122.227.28:443
2014-06-28 01:43:22e95ebe6e0880a3671d36db7be2b959f7Virustotal results 32/55 (58.18%) 176.122.227.28:443
2014-06-28 01:10:2160931f684ada0f63b01b91c42dfc0962Virustotal results 24/54 (44.44%) Shylock 176.122.227.28:443
2014-06-27 23:52:59e3f5d2789a5dde96ce54567f1f3202e6Virustotal results 31/54 (57.41%) 176.122.227.28:443
2014-06-27 23:10:502b6fab77a7ef9174f72f9fc29a51100dVirustotal results 30/54 (55.56%) Shylock 176.122.227.28:443
2014-06-27 22:49:15ea0086c610bcd2cda59860a924934727Virustotal results 22/54 (40.74%) Shylock 176.122.227.28:443
2014-06-27 22:48:32e79b2a72ba890f6b8b2c7d6e7e4f6f4aVirustotal results 27/54 (50.00%) 176.122.227.28:443
2014-06-27 22:31:2052e9041ce02d28739852b04411ef5b99Virustotal results 34/53 (64.15%) 176.122.227.28:443
2014-06-27 21:59:066f3239d72cc0e4eb70bbdc594defcac0Virustotal results 30/54 (55.56%) 176.122.227.28:443
2014-06-27 21:50:17f0e124b9a8ad06b25d915273e0897897Virustotal results 8/54 (14.81%) Shylock 176.122.227.28:443
2014-06-27 21:49:1556229ab4d84911f36cc27ee6a73928dfVirustotal results 10/53 (18.87%) Shylock 176.122.227.28:443
2014-06-27 21:47:4952997cea8a7b21f5ea2b0d39145f414aVirustotal results 31/54 (57.41%) Shylock 176.122.227.28:443
2014-06-27 20:33:28ec36a2efb3b348687a47b14d5d43b618Virustotal results 24/53 (45.28%) Shylock 176.122.227.28:443
2014-06-27 11:05:209ca616599435bf03936c07fcaafe1e33Virustotal results 6/46 (13.04%) Shylock 176.122.227.28:443
2014-06-27 00:04:377a5864883d7412b607868743650a6e5cVirustotal results 25/54 (46.30%) Shylock 176.122.227.28:443
2014-06-26 19:25:043fcb8946770adb60dd2ea10fed5caae1Virustotal results 19/54 (35.19%) Shylock 176.122.227.28:443
2014-06-26 15:02:194a65b3f98a678a6c00f54f7844a61d65Virustotal results 30/54 (55.56%) Shylock 176.122.227.28:443
2014-06-26 08:16:30e93200b8c1b0d2857c18d69776b41d16Virustotal results 24/54 (44.44%) Shylock 176.122.227.28:443
2014-06-26 07:19:38741b41c15493c81c664d9d58d7f6b16dVirustotal results 26/54 (48.15%) Shylock 176.122.227.28:443
2014-06-25 07:29:43fc4d5fc760b53baec6d64c41292e99d3Virustotal results 26/53 (49.06%) Shylock 176.122.227.28:443
2014-06-25 07:23:48a383e197f08956d7ba238d80c0f28c04Virustotal results 19/54 (35.19%) Shylock 176.122.227.28:443
2014-06-25 06:42:285c159dd0edb412894508ced0a3da1d65Virustotal results 22/53 (41.51%) Shylock 176.122.227.28:443
2014-06-25 05:55:36ef04ded64ad76627cabffc7252beb8a8Virustotal results 26/54 (48.15%) Shylock 176.122.227.28:443
2014-06-25 05:12:142950848d501a4502527f2305189743f4Virustotal results 7/53 (13.21%) Shylock 176.122.227.28:443
2014-06-25 03:51:03826ac9cc831c11d1bc5af4d923a9a29fVirustotal results 8/54 (14.81%) Shylock 176.122.227.28:443
2014-06-25 02:18:48d7ae455db7d62b471f9fa47216ca58efVirustotal results 19/52 (36.54%) Shylock 176.122.227.28:443
2014-06-25 02:14:09313aadf3a3daa3a26d1c3179923ac968Virustotal results 16/54 (29.63%) Shylock 176.122.227.28:443
2014-06-25 01:51:0417a3fb26849c80299a6f5fc5817212acVirustotal results 22/54 (40.74%) Shylock 176.122.227.28:443
2014-06-25 00:24:224a0ef84f018aabcccc47dd1f8cd52f24Virustotal results 1/53 (1.89%) Shylock 176.122.227.28:443
2014-06-24 23:24:286c1a5120738db8345dc553f15ca05030Virustotal results 27/53 (50.94%) Shylock 176.122.227.28:443
2014-06-24 21:21:32398465383003fa58c2fdb60255550782Virustotal results 39/55 (70.91%) Shylock 176.122.227.28:443
2014-06-24 20:27:1510fb6ca2d09da798a547a8e1d523d730Virustotal results 5/54 (9.26%) Shylock 176.122.227.28:443
2014-06-24 18:05:43bc65d0408a28268f6181dd5bba8ce3fbVirustotal results 29/54 (53.70%) Shylock 176.122.227.28:443
2014-06-24 15:55:134b7eb3e3406612b5f3d3e5ba25b30a67Virustotal results 33/54 (61.11%) Shylock 176.122.227.28:443
2014-06-22 15:45:239127da6e7d5a026615b0792d5a6aa20dVirustotal results 2/54 (3.70%) Shylock 176.122.227.28:443
2014-06-22 02:57:200bcfaecf2660155504db544571faaa0bVirustotal results 11/54 (20.37%) Shylock 176.122.227.28:443
2014-06-22 02:41:521e04e3629c63eab5fe56c5b95d28bc5fVirustotal results 13/54 (24.07%) Shylock 176.122.227.28:443
2014-06-21 23:23:213e9d01051cb7a7f194a0175f662a0db7Virustotal results 23/54 (42.59%) Shylock 176.122.227.28:443
2014-06-21 22:54:436c0ed3000be4c3e9857a4413375ab87aVirustotal results 16/54 (29.63%) Shylock 176.122.227.28:443
2014-06-21 20:23:5022c25414a4bcdbb68fa0ce067f25814eVirustotal results 19/54 (35.19%) Shylock 176.122.227.28:443
2014-06-21 19:31:42268eddb8ad63ed830d66da7ec00a0b82Virustotal results 25/54 (46.30%) Shylock 176.122.227.28:443
2014-06-21 17:46:1470ba7cef081067a4945d43a059590238Virustotal results 9/54 (16.67%) Shylock 176.122.227.28:443
2014-06-21 17:04:200b842ba8e17eb7a9f6f97ec037519a82Virustotal results 15/41 (36.59%) Shylock 176.122.227.28:443

# of entries: 60 (max: 100)