SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 94012108903a08562140bd744a3d7483072ff02c.

Database Entry

SHA1 Fingerprint:94012108903a08562140bd744a3d7483072ff02c
Certificate Common Name (CN):CLAYROOT
Issuer Distinguished Name (DN):CLAYROOT
TLS Version:TLSv1' NOTBEFOR
First seen:2020-12-31 15:47:18 UTC
Last seen:2021-04-10 12:51:18 UTC
Status:Blacklisted
Listing reason:AsyncRAT C&C
Listing date:2021-01-01 07:29:16
Malware samples:6
Botnet C&Cs:4

Malware Samples

The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2021-04-10 12:51:1857f2fcccda4aeb410054425836528ddbn/aAsyncRAT51.89.204.5:6666
2021-04-10 12:51:1857f2fcccda4aeb410054425836528ddbn/aAsyncRAT51.89.204.5:6666
2021-03-17 19:29:18000073007b10bcec18baca21c1e96ef5n/aAsyncRAT193.23.3.13:6666
2021-03-17 19:29:18000073007b10bcec18baca21c1e96ef5n/aAsyncRAT193.23.3.13:6666
2021-03-08 19:24:23253d5928309e6ebdd50a6dcdaf28888bn/aAsyncRAT193.23.3.13:6666
2021-03-08 19:24:23253d5928309e6ebdd50a6dcdaf28888bn/aAsyncRAT193.23.3.13:6666
2021-01-22 19:51:07a7acc632b184c4c824153850928011c6Virustotal results 18 / 60 (30.00%) AsyncRAT193.23.3.13:6666
2021-01-22 19:51:07a7acc632b184c4c824153850928011c6Virustotal results 18 / 60 (30.00%) AsyncRAT193.23.3.13:6666
2021-01-08 14:36:1983f5dfe54337970c464b58db9d990bbcn/aAsyncRAT168.119.103.207:6666
2021-01-08 14:36:1983f5dfe54337970c464b58db9d990bbcn/aAsyncRAT168.119.103.207:6666
2020-12-31 15:47:18c05a85cfc2c324d1d07fdb9d4bcddeb0n/aAsyncRAT135.181.96.16:6666
2020-12-31 15:47:18c05a85cfc2c324d1d07fdb9d4bcddeb0n/aAsyncRAT135.181.96.16:6666

# of entries: 12 (max: 100)