SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 9a7dabd7d2e46202d33702e9a90baa02bbfe8940.

Database Entry


SHA1 Fingerprint:9a7dabd7d2e46202d33702e9a90baa02bbfe8940
Certificate Common Name (CN):www.z5qrrudi.com/O=a28uayvi./C=US
Issuer Distinguished Name (DN):www.z5qrrudi.com/O=a28uayvi./C=US
TLS Version:TLSv1
First seen:2015-11-12 01:10:47 UTC
Last seen:2015-11-12 13:45:49 UTC
Status:Blacklisted
Listing reason:Gootkit C&C
Listing date:2015-11-12 06:42:30
Malware samples:7
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2015-11-12 13:45:49ce76622879cce5061a8190ef6204f9afn/aGootkit 185.10.56.111:80
2015-11-12 12:55:51f6d402058f60cad53ced63a2f7b5cd56n/aGootkit 185.10.56.111:80
2015-11-12 08:37:3992cbce34c6b2c8040da3d0c892bcfed5Virustotal results 34/56 (60.71%) Gootkit 185.10.56.111:80
2015-11-12 07:03:2985d92f00a6fa5ad5829310e286741771n/aGootkit 185.10.56.111:80
2015-11-12 05:19:333512bcf8a85d668dfaaf5b81f55875c1n/aGootkit 185.10.56.111:80
2015-11-12 01:45:488012f48a4ccc55c3b49c582202f1f03dn/aGootkit 185.10.56.111:80
2015-11-12 01:10:470f05e792a6e398da5fbed843fd301ef8Virustotal results 27/55 (49.09%) Gootkit 185.10.56.111:80

# of entries: 7 (max: 100)