SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 86d6aade4ba1414a91b1e7fb3cdd7d503692f410.

Database Entry


SHA1 Fingerprint:86d6aade4ba1414a91b1e7fb3cdd7d503692f410
Certificate Common Name (CN):localhost
Issuer Distinguished Name (DN):localhost
TLS Version:SSLv3
First seen:2014-04-27 14:08:58 UTC
Last seen:2014-06-16 09:38:53 UTC
Status:Blacklisted
Listing reason:Shylock C&C
Listing date:2014-05-04 08:10:31
Malware samples:39
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2014-06-16 09:38:53e61f32ef715343d94b1c155a59255f95Virustotal results 16/54 (29.63%) Shylock 91.217.85.16:443
2014-06-11 13:06:45370f5950fe1adc6a6cb17b84bb040c22Virustotal results 2/49 (4.08%) Shylock 91.217.85.16:443
2014-06-03 09:18:31bff7579582acc96eaf6a074be23206f4Virustotal results 23/51 (45.10%) Shylock 91.217.85.16:443
2014-06-01 22:40:54d14e6d90f375259cd3fdf2090a615064Virustotal results 2/52 (3.85%) Shylock 91.217.85.16:443
2014-06-01 13:19:480b502f9d1aab9910ba1eaf2d941138e6Virustotal results 30/52 (57.69%) Shylock 91.217.85.16:443
2014-06-01 12:22:29274e85a804a88c28c6d389c1e03522eaVirustotal results 28/50 (56.00%) Shylock 91.217.85.16:443
2014-05-31 22:47:463c7cfb5b482221d97dbcee7aaabbe7ebVirustotal results 13/53 (24.53%) Shylock 91.217.85.16:443
2014-05-30 02:44:36b7a6855ba7a797824059ed3c26d1911aVirustotal results 16/52 (30.77%) Shylock 91.217.85.16:443
2014-05-29 20:11:14aa1676e61703c56288d8afdfcf8e1b69Virustotal results 24/53 (45.28%) Shylock 91.217.85.16:443
2014-05-29 11:35:101a8faab428e63b8813e85039e13ecf9cVirustotal results 25/53 (47.17%) Shylock 91.217.85.16:443
2014-05-27 18:16:24e6bda9c11e7d5dbdf26db04f82dd9697Virustotal results 32/53 (60.38%) Shylock 91.217.85.16:443
2014-05-26 07:59:03cb45923c3c26bb1684fb3b510ff9253bVirustotal results 29/51 (56.86%) Shylock 91.217.85.16:443
2014-05-25 05:33:05b3e8fa07ce77e6715684a69bef79d668Virustotal results 5/53 (9.43%) Shylock 91.217.85.16:443
2014-05-23 11:20:397004070597cd5fba71a3c4a72a928621Virustotal results 22/53 (41.51%) 91.217.85.16:443
2014-05-20 14:41:550a0a579a529cb77f08994570769a1957Virustotal results 34/52 (65.38%) Shylock 91.217.85.16:443
2014-05-16 03:09:3461573941e9ff02c771e0ff393703ca50Virustotal results 29/52 (55.77%) Shylock 91.217.85.16:443
2014-05-13 13:09:068b35f5a91f55bbea448a62e931161164Virustotal results 21/52 (40.38%) Shylock 91.217.85.16:443
2014-05-13 11:43:04045203fa177a42c3c5a96f4002ce4590Virustotal results 33/53 (62.26%) Shylock 91.217.85.16:443
2014-05-12 20:40:377cebaf55e479f483b41956f3d36615f6Virustotal results 27/52 (51.92%) Shylock 91.217.85.16:443
2014-05-11 13:47:13427ab4140bea78660dba9fc0c4bbe442Virustotal results 32/53 (60.38%) Shylock 91.217.85.16:443
2014-05-11 13:09:154876923b44aca2dad0e59ef179b9877aVirustotal results 25/53 (47.17%) Shylock 91.217.85.16:443
2014-05-11 02:46:406f1b8abf4de07294912daea412a6537aVirustotal results 2/52 (3.85%) Shylock 91.217.85.16:443
2014-05-09 21:22:1146ab2317cdd518a2ca58f8daec342a81Virustotal results 7/52 (13.46%) Shylock 91.217.85.16:443
2014-05-08 13:42:219d18d9fe764f1fa6f192b22d5ffa413aVirustotal results 2/50 (4.00%) Shylock 91.217.85.16:443
2014-05-07 17:53:5178c41c3458458b481eafe3744a59cc4eVirustotal results 7/51 (13.73%) Shylock 91.217.85.16:443
2014-05-04 18:30:47b276f408cb5bedf39e34e8d5706531e4Virustotal results 28/53 (52.83%) Shylock 91.217.85.16:443
2014-05-03 07:31:4180875c61797f8c3cbb759be55f7f7bf7Virustotal results 27/52 (51.92%) Shylock 91.217.85.16:443
2014-05-02 21:38:10d6d8667ba21c665902db9d9704eae3bfVirustotal results 2/52 (3.85%) Shylock 91.217.85.16:443
2014-04-29 12:59:48c0eaef6899fd8e7b12b888b7989f5d3dVirustotal results 8/51 (15.69%) Shylock 91.217.85.16:443
2014-04-27 22:49:00d07aa4e622ba7bd6337aaa746581cdfaVirustotal results 11/52 (21.15%) Shylock 91.217.85.16:443
2014-04-27 20:10:579e165e90c44f0f7bcca2250687eec589Virustotal results 2/50 (4.00%) Shylock 91.217.85.16:443
2014-04-27 14:08:580537ccdfe0bb1ffb4ad22f80bde86a2bVirustotal results 24/51 (47.06%) Shylock 91.217.85.16:443
2014-04-27 14:08:58c95a6feb53bacd057cc1edf76b2d6114Virustotal results 5/51 (9.80%) Shylock 91.217.85.16:443
2014-04-27 14:08:5876aa50cd73b41825c73196b82c64011cVirustotal results 16/51 (31.37%) Shylock 91.217.85.16:443
2014-04-27 14:08:584cc06faf167b25a71bed8016cb2baf74Virustotal results 19/51 (37.25%) Shylock 91.217.85.16:443
2014-04-27 14:08:5838a064c683159eabdfb1885db251c503Virustotal results 20/51 (39.22%) Shylock 91.217.85.16:443
2014-04-27 14:08:5822818a7c0727cef4401f9272e2621928Virustotal results 20/50 (40.00%) Shylock 91.217.85.16:443
2014-04-27 14:08:58169382c5ea0a6adff2540f9e98883f07Virustotal results 21/51 (41.18%) Shylock 91.217.85.16:443
2014-04-27 14:08:5807416e88f89b61dac424a5d357dcbfb4Virustotal results 1/51 (1.96%) Shylock 91.217.85.16:443

# of entries: 39 (max: 100)