SSL Certificates

The following table shows further information as well as a list of malware samples including the corresponding botnet C&C associated with the SSL certificate fingerprint 9c31420220917a09fa3f26ce826c83da3dc3d409.

Database Entry


SHA1 Fingerprint:9c31420220917a09fa3f26ce826c83da3dc3d409
Certificate Common Name (CN):3Prelftitpa.angsew8icartha.android
Issuer Distinguished Name (DN):3Prelftitpa.angsew8icartha.android
TLS Version:TLS 1.2
First seen:2016-12-24 16:24:12 UTC
Last seen:2016-12-27 08:37:01 UTC
Status:Blacklisted
Listing reason:Dridex C&C
Listing date:2016-12-25 08:54:01
Malware samples:2
Botnet C&Cs:1

Malware Samples


The table below documents all malware samples associated with this SSL certificate.

Timestamp (UTC)Malware Sample (MD5 hash)VTSignatureBotnet C&C (IP:port)
2016-12-27 08:37:014bf93c42a916e1bbf339c03f0f850a52Virustotal results 33/57 (57.89%) Dridex 188.68.50.34:4431
2016-12-24 16:24:12c1071758777830a19260d4c2bdfdc80cVirustotal results 35/57 (61.40%) Dridex 188.68.50.34:4431

# of entries: 2 (max: 100)