SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 8dceaa6c43394cf8a9c3cc3c3feb9ba3c26a64c8.

Database Entry

SHA1 Fingerprint:8dceaa6c43394cf8a9c3cc3c3feb9ba3c26a64c8
Certificate Common Name (CN):alensthep.es
Issuer Distinguished Name (DN):alensthep.es
TLS Version:SSLv3
First seen:2016-02-02 21:38:37 UTC
Last seen:2016-02-04 06:50:36 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-02-03 05:48:22
Malware samples:5
Botnet C&Cs:1

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-02-04 06:50:36a9a6d0f6e1266dafd869ce61daedf2a6Virustotal results 6/53 (11.32%) Dridex 91.239.232.145:1743
2016-02-04 06:50:36a9a6d0f6e1266dafd869ce61daedf2a6Virustotal results 6/53 (11.32%) Dridex 91.239.232.145:1743
2016-02-03 13:52:26cc7b1925c503b9b21f9f6e0916a977feVirustotal results 6/52 (11.54%) Dridex 91.239.232.145:1743
2016-02-03 13:52:26cc7b1925c503b9b21f9f6e0916a977feVirustotal results 6/52 (11.54%) Dridex 91.239.232.145:1743
2016-02-03 10:54:37f9ea75f082a66a23ea422d2f9412ee9aVirustotal results 4/53 (7.55%) Dridex 91.239.232.145:1743
2016-02-03 10:54:37f9ea75f082a66a23ea422d2f9412ee9aVirustotal results 4/53 (7.55%) Dridex 91.239.232.145:1743
2016-02-03 03:23:350d37099eaff9c507c782fd81c715255bVirustotal results 0/52 (0.00%) Dridex 91.239.232.145:1743
2016-02-03 03:23:350d37099eaff9c507c782fd81c715255bVirustotal results 0/52 (0.00%) Dridex 91.239.232.145:1743
2016-02-02 21:38:3786ee4e0664714aab881e25ec6be861e1Virustotal results 5/51 (9.80%) Dridex 91.239.232.145:1743
2016-02-02 21:38:3786ee4e0664714aab881e25ec6be861e1Virustotal results 5/51 (9.80%) Dridex 91.239.232.145:1743

# of entries: 10 (max: 100)