SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 86d6aade4ba1414a91b1e7fb3cdd7d503692f410.
Database Entry
| SHA1 Fingerprint: | 86d6aade4ba1414a91b1e7fb3cdd7d503692f410 |
|---|---|
| Certificate Common Name (CN): | localhost |
| Issuer Distinguished Name (DN): | localhost |
| TLS Version: | SSLv3 |
| First seen: | 2014-04-27 14:08:58 UTC |
| Last seen: | 2014-06-16 09:38:53 UTC |
| Status: | Blacklisted |
| Listing reason: | Shylock C&C |
| Listing date: | 2014-05-04 08:10:31 |
| Malware samples: | 39 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2014-06-16 09:38:53 | e61f32ef715343d94b1c155a59255f95 |  16/54 (29.63%)
| Shylock | 91.217.85.16:443 |
| 2014-06-16 09:38:53 | e61f32ef715343d94b1c155a59255f95 | 16/54 (29.63%)
| Shylock | 91.217.85.16:443 |
| 2014-06-11 13:06:45 | 370f5950fe1adc6a6cb17b84bb040c22 | 2/49 (4.08%)
| Shylock | 91.217.85.16:443 |
| 2014-06-11 13:06:45 | 370f5950fe1adc6a6cb17b84bb040c22 | 2/49 (4.08%)
| Shylock | 91.217.85.16:443 |
| 2014-06-03 09:18:31 | bff7579582acc96eaf6a074be23206f4 | 23/51 (45.10%)
| Shylock | 91.217.85.16:443 |
| 2014-06-03 09:18:31 | bff7579582acc96eaf6a074be23206f4 | 23/51 (45.10%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 22:40:54 | d14e6d90f375259cd3fdf2090a615064 | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 22:40:54 | d14e6d90f375259cd3fdf2090a615064 | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 13:19:48 | 0b502f9d1aab9910ba1eaf2d941138e6 | 30/52 (57.69%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 13:19:48 | 0b502f9d1aab9910ba1eaf2d941138e6 | 30/52 (57.69%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 12:22:29 | 274e85a804a88c28c6d389c1e03522ea | 28/50 (56.00%)
| Shylock | 91.217.85.16:443 |
| 2014-06-01 12:22:29 | 274e85a804a88c28c6d389c1e03522ea | 28/50 (56.00%)
| Shylock | 91.217.85.16:443 |
| 2014-05-31 22:47:46 | 3c7cfb5b482221d97dbcee7aaabbe7eb | 13/53 (24.53%)
| Shylock | 91.217.85.16:443 |
| 2014-05-31 22:47:46 | 3c7cfb5b482221d97dbcee7aaabbe7eb | 13/53 (24.53%)
| Shylock | 91.217.85.16:443 |
| 2014-05-30 02:44:36 | b7a6855ba7a797824059ed3c26d1911a | 16/52 (30.77%)
| Shylock | 91.217.85.16:443 |
| 2014-05-30 02:44:36 | b7a6855ba7a797824059ed3c26d1911a | 16/52 (30.77%)
| Shylock | 91.217.85.16:443 |
| 2014-05-29 20:11:14 | aa1676e61703c56288d8afdfcf8e1b69 | 24/53 (45.28%)
| Shylock | 91.217.85.16:443 |
| 2014-05-29 20:11:14 | aa1676e61703c56288d8afdfcf8e1b69 | 24/53 (45.28%)
| Shylock | 91.217.85.16:443 |
| 2014-05-29 11:35:10 | 1a8faab428e63b8813e85039e13ecf9c | 25/53 (47.17%)
| Shylock | 91.217.85.16:443 |
| 2014-05-29 11:35:10 | 1a8faab428e63b8813e85039e13ecf9c | 25/53 (47.17%)
| Shylock | 91.217.85.16:443 |
| 2014-05-27 18:16:24 | e6bda9c11e7d5dbdf26db04f82dd9697 | 32/53 (60.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-27 18:16:24 | e6bda9c11e7d5dbdf26db04f82dd9697 | 32/53 (60.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-26 07:59:03 | cb45923c3c26bb1684fb3b510ff9253b | 29/51 (56.86%)
| Shylock | 91.217.85.16:443 |
| 2014-05-26 07:59:03 | cb45923c3c26bb1684fb3b510ff9253b | 29/51 (56.86%)
| Shylock | 91.217.85.16:443 |
| 2014-05-25 05:33:05 | b3e8fa07ce77e6715684a69bef79d668 | 5/53 (9.43%)
| Shylock | 91.217.85.16:443 |
| 2014-05-25 05:33:05 | b3e8fa07ce77e6715684a69bef79d668 | 5/53 (9.43%)
| Shylock | 91.217.85.16:443 |
| 2014-05-23 11:20:39 | 7004070597cd5fba71a3c4a72a928621 | 22/53 (41.51%)
| 91.217.85.16:443 | |
| 2014-05-23 11:20:39 | 7004070597cd5fba71a3c4a72a928621 | 22/53 (41.51%)
| 91.217.85.16:443 | |
| 2014-05-20 14:41:55 | 0a0a579a529cb77f08994570769a1957 | 34/52 (65.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-20 14:41:55 | 0a0a579a529cb77f08994570769a1957 | 34/52 (65.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-16 03:09:34 | 61573941e9ff02c771e0ff393703ca50 | 29/52 (55.77%)
| Shylock | 91.217.85.16:443 |
| 2014-05-16 03:09:34 | 61573941e9ff02c771e0ff393703ca50 | 29/52 (55.77%)
| Shylock | 91.217.85.16:443 |
| 2014-05-13 13:09:06 | 8b35f5a91f55bbea448a62e931161164 | 21/52 (40.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-13 13:09:06 | 8b35f5a91f55bbea448a62e931161164 | 21/52 (40.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-13 11:43:04 | 045203fa177a42c3c5a96f4002ce4590 | 33/53 (62.26%)
| Shylock | 91.217.85.16:443 |
| 2014-05-13 11:43:04 | 045203fa177a42c3c5a96f4002ce4590 | 33/53 (62.26%)
| Shylock | 91.217.85.16:443 |
| 2014-05-12 20:40:37 | 7cebaf55e479f483b41956f3d36615f6 | 27/52 (51.92%)
| Shylock | 91.217.85.16:443 |
| 2014-05-12 20:40:37 | 7cebaf55e479f483b41956f3d36615f6 | 27/52 (51.92%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 13:47:13 | 427ab4140bea78660dba9fc0c4bbe442 | 32/53 (60.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 13:47:13 | 427ab4140bea78660dba9fc0c4bbe442 | 32/53 (60.38%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 13:09:15 | 4876923b44aca2dad0e59ef179b9877a | 25/53 (47.17%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 13:09:15 | 4876923b44aca2dad0e59ef179b9877a | 25/53 (47.17%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 02:46:40 | 6f1b8abf4de07294912daea412a6537a | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-05-11 02:46:40 | 6f1b8abf4de07294912daea412a6537a | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-05-09 21:22:11 | 46ab2317cdd518a2ca58f8daec342a81 | 7/52 (13.46%)
| Shylock | 91.217.85.16:443 |
| 2014-05-09 21:22:11 | 46ab2317cdd518a2ca58f8daec342a81 | 7/52 (13.46%)
| Shylock | 91.217.85.16:443 |
| 2014-05-08 13:42:21 | 9d18d9fe764f1fa6f192b22d5ffa413a | 2/50 (4.00%)
| Shylock | 91.217.85.16:443 |
| 2014-05-08 13:42:21 | 9d18d9fe764f1fa6f192b22d5ffa413a | 2/50 (4.00%)
| Shylock | 91.217.85.16:443 |
| 2014-05-07 17:53:51 | 78c41c3458458b481eafe3744a59cc4e | 7/51 (13.73%)
| Shylock | 91.217.85.16:443 |
| 2014-05-07 17:53:51 | 78c41c3458458b481eafe3744a59cc4e | 7/51 (13.73%)
| Shylock | 91.217.85.16:443 |
| 2014-05-04 18:30:47 | b276f408cb5bedf39e34e8d5706531e4 | 28/53 (52.83%)
| Shylock | 91.217.85.16:443 |
| 2014-05-04 18:30:47 | b276f408cb5bedf39e34e8d5706531e4 | 28/53 (52.83%)
| Shylock | 91.217.85.16:443 |
| 2014-05-03 07:31:41 | 80875c61797f8c3cbb759be55f7f7bf7 | 27/52 (51.92%)
| Shylock | 91.217.85.16:443 |
| 2014-05-03 07:31:41 | 80875c61797f8c3cbb759be55f7f7bf7 | 27/52 (51.92%)
| Shylock | 91.217.85.16:443 |
| 2014-05-02 21:38:10 | d6d8667ba21c665902db9d9704eae3bf | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-05-02 21:38:10 | d6d8667ba21c665902db9d9704eae3bf | 2/52 (3.85%)
| Shylock | 91.217.85.16:443 |
| 2014-04-29 12:59:48 | c0eaef6899fd8e7b12b888b7989f5d3d | 8/51 (15.69%)
| Shylock | 91.217.85.16:443 |
| 2014-04-29 12:59:48 | c0eaef6899fd8e7b12b888b7989f5d3d | 8/51 (15.69%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 22:49:00 | d07aa4e622ba7bd6337aaa746581cdfa | 11/52 (21.15%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 22:49:00 | d07aa4e622ba7bd6337aaa746581cdfa | 11/52 (21.15%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 20:10:57 | 9e165e90c44f0f7bcca2250687eec589 | 2/50 (4.00%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 20:10:57 | 9e165e90c44f0f7bcca2250687eec589 | 2/50 (4.00%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 0537ccdfe0bb1ffb4ad22f80bde86a2b | 24/51 (47.06%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | c95a6feb53bacd057cc1edf76b2d6114 | 5/51 (9.80%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 76aa50cd73b41825c73196b82c64011c | 16/51 (31.37%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 4cc06faf167b25a71bed8016cb2baf74 | 19/51 (37.25%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 38a064c683159eabdfb1885db251c503 | 20/51 (39.22%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 22818a7c0727cef4401f9272e2621928 | 20/50 (40.00%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 169382c5ea0a6adff2540f9e98883f07 | 21/51 (41.18%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 07416e88f89b61dac424a5d357dcbfb4 | 1/51 (1.96%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 0537ccdfe0bb1ffb4ad22f80bde86a2b | 24/51 (47.06%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | c95a6feb53bacd057cc1edf76b2d6114 | 5/51 (9.80%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 76aa50cd73b41825c73196b82c64011c | 16/51 (31.37%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 4cc06faf167b25a71bed8016cb2baf74 | 19/51 (37.25%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 38a064c683159eabdfb1885db251c503 | 20/51 (39.22%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 22818a7c0727cef4401f9272e2621928 | 20/50 (40.00%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 169382c5ea0a6adff2540f9e98883f07 | 21/51 (41.18%)
| Shylock | 91.217.85.16:443 |
| 2014-04-27 14:08:58 | 07416e88f89b61dac424a5d357dcbfb4 | 1/51 (1.96%)
| Shylock | 91.217.85.16:443 |
# of entries: 78 (max: 100)