SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 878645d2ae902067e8a8096060e9d27593cda7c4.

Database Entry


SHA1 Fingerprint:878645d2ae902067e8a8096060e9d27593cda7c4
Certificate Common Name (CN):ago.ndflsfrth.sr
Issuer Distinguished Name (DN):ago.ndflsfrth.sr
TLS Version:TLS 1.2
First seen:2016-05-04 23:16:36 UTC
Last seen:never
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-05-05 05:40:31
Malware samples:1
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-05-04 23:16:3613b51a69f3344b6ba1441e2cd7d80680Virustotal results 6/56 (10.71%) Dridex 70.164.127.132:2443

# of entries: 1 (max: 100)