SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 8eef8e5d5119d23d259264485fce706df2411e52.

Database Entry


SHA1 Fingerprint:8eef8e5d5119d23d259264485fce706df2411e52
Certificate Common Name (CN):www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US
Issuer Distinguished Name (DN):www.__RANDOM_STR_.com/O=__RANDOM_STR_./C=US
TLS Version:TLS 1.2
First seen:2016-12-19 05:59:19 UTC
Last seen:2016-12-19 13:43:58 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-12-19 14:03:41
Malware samples:4
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-12-19 13:43:58c2237048dc71f021e5dbf0f65f0da482n/aGootkit 176.9.238.164:80
2016-12-19 13:23:208daed9c714e59e3531adf1ee4df2be9eVirustotal results 24/57 (42.11%) 176.9.238.164:80
2016-12-19 08:36:2311bd06d7709ed5d870be64701c452d80Virustotal results 19/55 (34.55%) Gootkit 176.9.238.164:80
2016-12-19 05:59:196fe09868346adbc9592d8f5bab69903cVirustotal results 39/54 (72.22%) Gootkit 176.9.238.164:80

# of entries: 4 (max: 100)