SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 89f70f43f5d81a48f48acd5cdec9d37fd8a04bba.

Database Entry


SHA1 Fingerprint:89f70f43f5d81a48f48acd5cdec9d37fd8a04bba
Certificate Common Name (CN):freehost/emailAddress=web@freehost
Issuer Distinguished Name (DN):freehost/emailAddress=web@freehost
TLS Version:TLS 1.2
First seen:2017-01-18 14:05:42 UTC
Last seen:2017-01-21 07:20:03 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2017-01-21 11:11:11
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2017-01-21 07:20:03f39e723c9511821e2f237e6883d07733n/aGootkit 94.177.189.240:80
2017-01-21 07:20:03f39e723c9511821e2f237e6883d07733n/aGootkit 94.177.189.240:80
2017-01-20 22:03:5947cab087e5293a3c30830d1babb891efVirustotal results 42/57 (73.68%) Gootkit 94.177.189.240:80
2017-01-20 22:03:5947cab087e5293a3c30830d1babb891efVirustotal results 42/57 (73.68%) Gootkit 94.177.189.240:80
2017-01-19 03:44:510e69714e85f3b00aa88b8993c8388d5fVirustotal results 44/68 (64.71%) Gootkit 94.177.189.240:80
2017-01-19 03:44:510e69714e85f3b00aa88b8993c8388d5fVirustotal results 44/68 (64.71%) Gootkit 94.177.189.240:80
2017-01-18 14:05:42190ad0712afbdf35894d459a3bcec88fn/aGootkit 94.177.189.240:80
2017-01-18 14:05:42190ad0712afbdf35894d459a3bcec88fn/aGootkit 94.177.189.240:80

# of entries: 8 (max: 100)