SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 82c01da1b88b9f3a1cea2e0447907110ea8024c6.

Database Entry


SHA1 Fingerprint:82c01da1b88b9f3a1cea2e0447907110ea8024c6
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-06-21 17:04:20 UTC
Last seen:2014-06-24 11:06:23 UTC
Status:Blacklisted
Listing reason:Shylock C&C
Listing date:2014-06-24 10:35:20
Malware samples:16
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-06-24 11:06:236ed0c65104670d354fef4f43cddea192Virustotal results 31/54 (57.41%) Shylock 78.135.97.139:443
2014-06-24 10:32:487167874ade1292524097643aef76bfc7Virustotal results 27/54 (50.00%) Shylock 78.135.97.139:443
2014-06-24 09:11:411b2a49f199d9a5c57fa4d1b1ee76ae97Virustotal results 23/54 (42.59%) Shylock 78.135.97.139:443
2014-06-22 15:45:239127da6e7d5a026615b0792d5a6aa20dVirustotal results 2/54 (3.70%) Shylock 78.135.97.139:443
2014-06-22 02:57:200bcfaecf2660155504db544571faaa0bVirustotal results 11/54 (20.37%) Shylock 78.135.97.139:443
2014-06-22 02:41:521e04e3629c63eab5fe56c5b95d28bc5fVirustotal results 13/54 (24.07%) Shylock 78.135.97.139:443
2014-06-22 00:49:4531e45925886bc2ff45c59268bcd281c1Virustotal results 32/54 (59.26%) Shylock 78.135.97.139:443
2014-06-21 23:23:213e9d01051cb7a7f194a0175f662a0db7Virustotal results 23/54 (42.59%) Shylock 78.135.97.139:443
2014-06-21 20:42:411ee5dd861f005024a88c00aeae4ed33fVirustotal results 19/54 (35.19%) Shylock 78.135.97.139:443
2014-06-21 20:23:5022c25414a4bcdbb68fa0ce067f25814eVirustotal results 19/54 (35.19%) Shylock 78.135.97.139:443
2014-06-21 19:31:42268eddb8ad63ed830d66da7ec00a0b82Virustotal results 25/54 (46.30%) Shylock 78.135.97.139:443
2014-06-21 18:03:20faa52886f7d10bb672ee77a283c0ff01Virustotal results 30/54 (55.56%) Shylock 78.135.97.139:443
2014-06-21 17:59:502467682e190c77a5378270d4d98ee54bVirustotal results 21/54 (38.89%) Shylock 78.135.97.139:443
2014-06-21 17:45:5018b99427e6a4f8198bada52c4c624169Virustotal results 2/54 (3.70%) Shylock 78.135.97.139:443
2014-06-21 17:13:480c947563f0ae626b88099ccee48f68b1Virustotal results 1/54 (1.85%) Shylock 78.135.97.139:443
2014-06-21 17:04:200b842ba8e17eb7a9f6f97ec037519a82Virustotal results 15/41 (36.59%) Shylock 78.135.97.139:443

# of entries: 16 (max: 100)