SSL Certificates
The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 904bf7874ad3930fe57473d00ce8538b4a4f31a8.
Database Entry
SHA1 Fingerprint: | 904bf7874ad3930fe57473d00ce8538b4a4f31a8 |
---|---|
Certificate Common Name (CN): | ficnecwxpqwftazmlck.info |
Issuer Distinguished Name (DN): | ficnecwxpqwftazmlck.info |
TLS Version: | TLS 1.2 |
First seen: | 2016-04-11 05:35:28 UTC |
Last seen: | 2016-04-11 06:27:00 UTC |
Status: | Blacklisted |
Listing reason: | Quakbot C&C |
Listing date: | 2016-04-11 06:10:40 |
Malware samples: | 4 |
Botnet C&Cs: | 1 |
Malware Samples
The table below documents all malware samples associated with this SSL certificate.
Timestamp (UTC) | Malware Sample (MD5 hash) | VT | Signature | Botnet C&C (IP:port) |
---|---|---|---|---|
2016-04-11 06:27:00 | 3fa359cba765955c11faf76abdbaa1cf | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 06:27:00 | 3fa359cba765955c11faf76abdbaa1cf | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 06:26:39 | 45c1def08b01c5aae4c2d178cbc99e8f | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 06:26:39 | 45c1def08b01c5aae4c2d178cbc99e8f | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 05:37:57 | 8a7b9aa6be8fafe8bbc62377c0ea34c7 | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 05:37:57 | 8a7b9aa6be8fafe8bbc62377c0ea34c7 | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 05:35:28 | f9fd1ab0575b600791edafd646bf40c1 | n/a | Quakbot | 5.230.208.16:443 |
2016-04-11 05:35:28 | f9fd1ab0575b600791edafd646bf40c1 | n/a | Quakbot | 5.230.208.16:443 |
# of entries: 8 (max: 100)