SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 8fafa99c7314e9eb3c64269fdcf342b6175b019e.

Database Entry


SHA1 Fingerprint:8fafa99c7314e9eb3c64269fdcf342b6175b019e
Certificate Common Name (CN):www.0mwe9udi.com/O=0mwe9udi./C=US
Issuer Distinguished Name (DN):www.0mwe9udi.com/O=0mwe9udi./C=US
TLS Version:TLS 1.2
First seen:2016-04-22 23:45:14 UTC
Last seen:2016-04-27 18:29:08 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2016-04-23 06:16:24
Malware samples:3
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-04-27 18:29:087ca33cc37984b7f11c3ae62c3b3becf3Virustotal results 32/57 (56.14%) Gootkit 192.157.251.245:80
2016-04-27 18:29:087ca33cc37984b7f11c3ae62c3b3becf3Virustotal results 32/57 (56.14%) Gootkit 192.157.251.245:80
2016-04-23 22:18:48059c4daf4cbb75426c4869d4979c39c6Virustotal results 15/56 (26.79%) Gootkit 192.157.251.245:80
2016-04-23 22:18:48059c4daf4cbb75426c4869d4979c39c6Virustotal results 15/56 (26.79%) Gootkit 192.157.251.245:80
2016-04-22 23:45:386176b492e60c5897615d84f662965ddfn/aGootkit 192.157.251.245:80
2016-04-22 23:45:386176b492e60c5897615d84f662965ddfn/aGootkit 192.157.251.245:80

# of entries: 6 (max: 100)