SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 859e9118b87e442ee349760f1777b9656f572ad1.

Database Entry


SHA1 Fingerprint:859e9118b87e442ee349760f1777b9656f572ad1
Certificate Common Name (CN):C=XX, L=Default City, O=Default Company Ltd
Issuer Distinguished Name (DN):C=XX, L=Default City, O=Default Company Ltd
TLS Version:TLS 1.2
First seen:2015-09-22 02:34:46 UTC
Last seen:2015-09-22 10:37:42 UTC
Status:Blacklisted
Listing reason:TorrentLocker C&C
Listing date:2015-09-22 04:54:40
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-09-22 10:37:424b954cccfc88b6b0a869254b86a8709aVirustotal results 3/55 (5.45%) TorrentLocker 94.103.80.249:443
2015-09-22 10:37:424b954cccfc88b6b0a869254b86a8709aVirustotal results 3/55 (5.45%) TorrentLocker 94.103.80.249:443
2015-09-22 06:44:28f02997bbd41578d2fc366036fbb86ae5Virustotal results 3/57 (5.26%) TorrentLocker 94.103.80.249:443
2015-09-22 06:44:28f02997bbd41578d2fc366036fbb86ae5Virustotal results 3/57 (5.26%) TorrentLocker 94.103.80.249:443
2015-09-22 06:10:40ead31d4cbbd79466359d46694a9d56d3Virustotal results 1/56 (1.79%) TorrentLocker 94.103.80.249:443
2015-09-22 06:10:40ead31d4cbbd79466359d46694a9d56d3Virustotal results 1/56 (1.79%) TorrentLocker 94.103.80.249:443
2015-09-22 02:34:462753930860988f5fd78fbc0d1df013acVirustotal results 31/57 (54.39%) TorrentLocker 94.103.80.249:443
2015-09-22 02:34:462753930860988f5fd78fbc0d1df013acVirustotal results 31/57 (54.39%) TorrentLocker 94.103.80.249:443

# of entries: 8 (max: 100)