SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 850ce544ab68875cbc3510de8050a37878ad6ee4.

Database Entry

SHA1 Fingerprint:850ce544ab68875cbc3510de8050a37878ad6ee4
Certificate Common Name (CN):*
Issuer Distinguished Name (DN):*
TLS Version:TLS 1.2
First seen:2019-02-19 17:02:40 UTC
Last seen:2019-02-19 17:54:29 UTC
Status:Blacklisted
Listing reason:Gozi C&C
Listing date:2019-02-19 18:10:46
Malware samples:5
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2019-02-19 17:54:2993cc5d79e43efac92557c5bc1c6f8ab4Virustotal results 14/65 (21.54%) Gozi 89.223.28.167:443
2019-02-19 17:54:2993cc5d79e43efac92557c5bc1c6f8ab4Virustotal results 14/65 (21.54%) Gozi 89.223.28.167:443
2019-02-19 17:20:49d1d83bcf64d716bef33959c09d61def7Virustotal results 13/65 (20.00%) Gozi 89.223.28.167:443
2019-02-19 17:20:49d1d83bcf64d716bef33959c09d61def7Virustotal results 13/65 (20.00%) Gozi 89.223.28.167:443
2019-02-19 17:13:08c571f0fd9a28751237885df42d575b7aVirustotal results 16/70 (22.86%) Gozi 89.223.28.167:443
2019-02-19 17:13:08c571f0fd9a28751237885df42d575b7aVirustotal results 16/70 (22.86%) Gozi 89.223.28.167:443
2019-02-19 17:02:585d23d5de4ef53e3b4c8f1253e29ac4a7Virustotal results 14/65 (21.54%) Gozi 89.223.28.167:443
2019-02-19 17:02:585d23d5de4ef53e3b4c8f1253e29ac4a7Virustotal results 14/65 (21.54%) Gozi 89.223.28.167:443
2019-02-19 17:02:403beded7026ae14a644df9d4c913361f1Virustotal results 13/65 (20.00%) Gozi 89.223.28.167:443
2019-02-19 17:02:403beded7026ae14a644df9d4c913361f1Virustotal results 13/65 (20.00%) Gozi 89.223.28.167:443

# of entries: 10 (max: 100)