SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 892d8901c1c3e1f90736ac7a2e8f6c81f77100cc.
Database Entry
| SHA1 Fingerprint: | 892d8901c1c3e1f90736ac7a2e8f6c81f77100cc |
|---|---|
| Certificate Common Name (CN): | cornmealjustly.lat |
| Issuer Distinguished Name (DN): | WE1 |
| TLS Version: | TLS 1.2 |
| First seen: | 2025-06-24 16:50:43 UTC |
| Last seen: | 2025-06-29 14:13:21 UTC |
| Status: | Blacklisted |
| Listing reason: | ACRStealer C&C |
| Listing date: | 2025-06-25 06:26:43 |
| Malware samples: | 4 |
| Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
| Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
|---|---|---|---|---|
| 2025-06-29 14:13:21 | b654b0d435f7420ce6f08618cb872f84 | n/a | 104.21.80.1:443 | |
| 2025-06-27 21:11:58 | 467cc2f9604095161e36e9136c38ee5d | n/a | 104.21.80.1:443 | |
| 2025-06-25 20:13:05 | 646a854797672207d73d6f60a6f10f8a | n/a | 104.21.80.1:443 | |
| 2025-06-24 16:50:43 | e55743b98a78053821eef82b7f7b9e8d | n/a | 104.21.80.1:443 | |
| 2025-06-24 16:50:43 | e55743b98a78053821eef82b7f7b9e8d | n/a | 104.21.80.1:443 |
# of entries: 5 (max: 100)